Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a323334353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230393a323334353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          DT4vj+0SRdzAcMJ+n6Xovw8nmKUrGLymoPZlfxIR+qw=
Subject key identifier:   5A:F6:21:D7:1E:70:80:68:44:46:EC:07:41:C9:01:0D:8B:B5:78:49
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       56ADC624B37426DFFFFA3A155BA065BEDFB55AA0
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a323334353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 09 Feb 2022 23:45:02 +0000
ROA not before:           Wed 09 Feb 2022 23:40:02 +0000
ROA not after:            Wed 08 Feb 2023 23:45:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:209:2345::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ad:c6:24:b3:74:26:df:ff:fa:3a:15:5b:a0:65:be:df:b5:5a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  9 23:40:02 2022 GMT
            Not After : Feb  8 23:45:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:01:d8:2f:e1:7c:c6:64:c2:ea:1e:67:6f:
                    3d:f4:52:aa:d3:8a:65:6c:3e:75:c7:99:68:9d:41:
                    dd:53:79:49:36:bd:86:d1:0d:8a:78:68:7a:35:43:
                    53:96:e2:1d:28:da:36:15:78:71:9f:0f:79:76:93:
                    e9:e9:9f:59:dc:df:da:7f:d7:39:cb:48:af:4e:e7:
                    f2:44:9e:26:9a:7f:22:ed:38:25:ea:dc:ea:8c:6b:
                    63:cb:f8:c7:6a:b8:a3:ed:90:9c:e6:f4:de:57:99:
                    36:d9:1c:f4:f8:e2:90:62:06:64:a9:35:95:cc:6c:
                    ce:f7:cc:80:86:6b:65:c0:3d:50:c3:d0:c1:5d:92:
                    b4:16:3a:97:39:dd:3b:52:08:e2:d8:54:c6:de:07:
                    1a:86:71:2f:77:c7:2f:9c:14:56:5e:b1:2d:5d:25:
                    82:81:7c:a2:cb:0e:69:02:07:32:87:7d:bc:ff:e0:
                    b7:ab:d1:38:1a:2c:8e:bd:1d:e7:68:7b:a8:2f:81:
                    e7:61:2e:1a:65:02:89:44:6f:9f:6d:f8:32:9f:6e:
                    2f:8c:a6:b4:ba:3f:2e:fe:fb:e2:f2:ff:59:6f:55:
                    cf:52:dd:9c:8e:c9:31:52:66:5e:e3:7c:75:43:4a:
                    e4:a2:a7:5b:67:9e:24:87:81:5c:d1:41:f4:37:9f:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F6:21:D7:1E:70:80:68:44:46:EC:07:41:C9:01:0D:8B:B5:78:49
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a323334353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:209:2345::/80

    Signature Algorithm: sha256WithRSAEncryption
         52:0f:7b:59:08:61:c2:24:30:aa:a4:cf:68:2e:50:35:d0:2d:
         d8:d3:99:38:37:3e:67:14:f2:fe:5e:7f:5e:2f:c6:f1:13:db:
         8e:56:f7:02:08:8e:9d:bc:24:d6:94:48:0e:34:e2:e1:83:15:
         0f:45:76:98:5b:31:ce:2d:de:d5:b9:d4:f1:d6:ef:b9:06:02:
         4c:59:f7:8e:9e:ab:7d:28:01:07:17:84:d3:72:30:92:1d:bf:
         2e:b7:f0:bb:3b:35:ba:44:dd:47:77:fc:8c:53:09:80:e4:06:
         51:2f:de:bf:f4:76:d7:73:9a:e3:ac:9a:58:57:76:5b:72:37:
         6e:c6:81:91:4d:71:25:3a:23:14:1e:b2:ce:7e:be:50:a0:88:
         53:38:38:c0:a3:b7:6b:e4:57:f9:e9:9a:51:4e:4f:30:a8:6f:
         4a:d2:8b:e7:44:99:12:77:df:8a:64:ee:9c:48:ab:61:2e:5f:
         2c:5e:6e:c6:4c:f1:2f:b3:43:fd:ef:ad:df:4f:12:13:01:c4:
         d8:00:0f:9e:49:67:6f:29:9c:09:82:43:a6:8e:4d:89:b1:13:
         ea:bb:55:cb:3f:9a:8c:ab:2f:4b:63:16:45:54:1c:43:63:d6:
         2f:9c:69:8e:a7:0c:d0:35:0f:80:93:1f:9a:62:77:5e:cd:e7:
         21:27:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----