Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a3735353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231303a3735353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          oPVL+YvOYsR63msYbeDCd+4zag9cIAYVsm792xLPb+Q=
Subject key identifier:   FD:84:67:7B:09:5F:AB:89:71:E4:7C:23:7C:F3:A7:58:A6:24:10:D0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3F84F4C5D97CDCD0A55F396895F51C48BAC170D1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a3735353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 10 Feb 2022 07:55:02 +0000
ROA not before:           Thu 10 Feb 2022 07:50:02 +0000
ROA not after:            Thu 09 Feb 2023 07:55:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:210:755::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:84:f4:c5:d9:7c:dc:d0:a5:5f:39:68:95:f5:1c:48:ba:c1:70:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 10 07:50:02 2022 GMT
            Not After : Feb  9 07:55:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:83:b9:24:60:26:2f:6a:fd:3e:63:60:1a:
                    35:f7:f1:ea:cb:61:c3:f5:e9:cf:75:d4:02:88:e0:
                    7a:94:ec:21:08:fa:60:f6:b0:71:2e:54:a6:7a:fd:
                    fe:b2:ee:22:d8:c2:40:ee:de:f4:6f:dc:68:66:9f:
                    c2:26:68:f3:9f:cf:c4:ec:92:a4:30:7c:8e:a2:1c:
                    01:cd:45:4b:90:40:41:81:01:6b:f7:7e:97:b8:e4:
                    78:35:49:6f:26:2c:6a:b8:e3:e0:e7:51:d2:52:37:
                    2f:4d:c0:68:c1:aa:10:ac:b3:a4:54:94:d5:58:0a:
                    66:c5:29:d7:b1:c2:0c:d8:b1:b8:84:c4:77:f1:a4:
                    53:96:6c:e9:5c:f8:5e:68:7f:05:5e:16:c7:a6:dd:
                    6e:f1:65:d9:10:ca:16:af:1e:d2:f5:d6:61:45:a4:
                    93:bf:8f:ee:a4:d0:74:8c:e4:13:1b:8f:52:e7:f4:
                    ba:a5:13:4a:33:80:6d:22:49:7c:ee:fc:ba:0b:a3:
                    8a:66:bb:81:d6:44:64:b3:52:e0:ff:4d:a6:b8:bb:
                    6d:af:2a:09:ae:10:44:a6:92:a0:5a:c5:51:b4:94:
                    dc:6d:ae:91:53:6b:04:ec:15:22:53:de:7d:e8:4c:
                    37:85:f1:10:51:a8:1a:b7:54:8b:6f:a2:41:50:dd:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:84:67:7B:09:5F:AB:89:71:E4:7C:23:7C:F3:A7:58:A6:24:10:D0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a3735353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:210:755::/80

    Signature Algorithm: sha256WithRSAEncryption
         2b:01:b9:d3:75:14:48:d8:c8:28:93:16:64:cd:5b:7b:62:3b:
         89:d8:5c:20:68:07:4c:03:1e:2c:21:88:16:56:6b:eb:96:6e:
         c7:b8:7e:f9:82:0f:87:60:8e:16:6f:26:c5:75:b3:95:bf:00:
         8b:e0:5d:b0:0a:23:45:ce:18:83:26:db:57:10:e8:18:1e:dc:
         c0:5e:df:fc:6e:d7:ad:7b:9d:b0:f9:5d:61:b2:f4:e2:11:91:
         b5:5e:8c:af:74:0b:62:d0:47:59:38:27:0f:04:88:34:89:c2:
         03:71:c3:39:01:c7:cc:fa:78:e4:41:95:26:41:d5:6b:0e:d7:
         26:9f:00:bd:47:a2:eb:0a:2a:c2:f1:c3:5c:f7:97:c1:43:2d:
         c5:79:04:bd:a2:3c:64:37:bc:38:76:cc:18:e4:fa:36:fd:b5:
         89:1e:58:43:62:a9:65:0f:31:fc:bc:f3:c3:93:1b:24:4b:45:
         07:26:6e:90:da:3d:24:97:db:a2:54:0c:8b:11:53:19:fa:d4:
         74:96:9a:07:37:ef:29:84:6e:41:e0:7d:50:3f:1b:04:da:df:
         20:a2:89:b1:db:a0:0e:96:69:55:93:71:43:82:be:9e:23:f7:
         9f:77:13:62:9d:87:5a:b2:fc:6a:e9:b8:2c:2d:36:08:1d:46:
         0e:70:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----