Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313630353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231303a313630353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Q9KjEmp4RocXxYxTVr8tdD1MBbZ8R6eSGX1bpUq6kaI=
Subject key identifier:   9B:76:9E:25:A0:2E:35:33:FE:ED:A2:E3:18:E6:6B:1A:F3:82:2B:67
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       552A65871CACD231AC33A509C1490EDA753B4ABC
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313630353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 10 Feb 2022 16:05:02 +0000
ROA not before:           Thu 10 Feb 2022 16:00:02 +0000
ROA not after:            Thu 09 Feb 2023 16:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:210:1605::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2a:65:87:1c:ac:d2:31:ac:33:a5:09:c1:49:0e:da:75:3b:4a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 10 16:00:02 2022 GMT
            Not After : Feb  9 16:05:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:75:37:0d:3d:72:1e:d1:7e:ae:93:7e:c7:5f:
                    b5:4f:5b:3c:3f:a3:1b:e4:b2:f7:47:b1:16:72:de:
                    dd:0a:08:3e:aa:57:fd:a6:a1:2d:7c:51:b3:32:e0:
                    1c:d9:1e:bb:23:27:36:e5:bc:3c:9b:5c:6a:81:24:
                    d6:0b:cf:05:05:e7:26:ea:7c:4d:cb:34:7d:80:03:
                    29:16:e7:94:86:c2:15:2f:83:bc:70:b3:36:d1:fa:
                    bc:9e:aa:91:4e:f2:8c:81:db:39:0d:03:37:14:d1:
                    6a:23:d1:95:61:7e:7a:21:a2:c7:33:b0:f6:d2:1b:
                    24:84:ca:03:d8:62:3a:66:ae:0a:49:16:23:3d:f2:
                    c7:78:7d:0b:cc:87:2f:4a:c9:73:c7:a8:f9:e9:8b:
                    06:c4:72:5b:d7:77:5d:6c:52:f3:4f:3d:83:7c:ef:
                    a1:4c:2c:70:b5:77:f0:41:40:74:d8:73:20:76:b8:
                    ef:e6:c1:ae:15:2d:f2:35:58:ac:aa:64:33:25:5e:
                    a5:a2:f4:5a:6f:a0:5a:c1:f1:c7:47:58:2d:e1:c6:
                    13:6e:65:12:b1:b1:f0:e8:a2:26:b0:9d:fe:9a:d3:
                    b5:e8:81:c2:e9:3f:2c:98:5a:30:3a:85:24:4e:69:
                    3f:a2:00:da:0b:28:fd:fc:87:69:b6:da:b4:48:d3:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:76:9E:25:A0:2E:35:33:FE:ED:A2:E3:18:E6:6B:1A:F3:82:2B:67
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313630353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:210:1605::/80

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:54:f3:87:fa:0c:96:57:00:b9:51:45:2f:9a:f5:8f:2e:
         c5:34:94:2c:78:66:6a:d0:7f:04:25:d4:61:ad:c0:d9:1d:be:
         9e:ff:69:b9:d9:34:37:15:8f:54:a5:55:57:57:70:29:ef:ee:
         6b:8d:e6:d1:c6:2f:b5:9d:95:99:c2:ce:18:44:62:ed:17:4e:
         50:58:df:23:94:7a:cf:3f:d3:10:44:18:5b:8f:fc:ac:04:4a:
         60:18:57:d1:7b:76:55:5e:e0:b1:3b:b2:f4:d6:5d:cc:9e:b1:
         3b:20:a2:6d:54:fb:b8:de:00:e4:a5:9b:1c:5e:9f:ce:89:61:
         93:6e:4f:01:2c:4a:0b:2d:17:d1:f7:6e:91:93:67:75:83:cc:
         b6:f8:a8:ac:93:d4:c7:d6:f5:3e:69:50:2c:21:3b:10:6f:79:
         a1:27:5c:a7:a3:45:e5:7b:4a:f3:6d:03:b3:9e:db:90:12:35:
         87:72:d4:68:9c:f0:50:be:c2:7f:3e:0f:13:c2:e7:23:ce:5e:
         1d:f6:1e:88:b0:2d:66:12:d5:fd:20:a7:b1:27:b0:f5:55:2d:
         51:c3:93:f8:32:f1:4f:81:a3:95:5f:f8:89:04:3d:eb:c6:15:
         a5:7e:30:45:f2:87:d0:27:91:9d:48:21:64:c5:c1:5a:05:f8:
         e2:4e:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----