Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a3935353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231303a3935353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          8EmpCaI1wpDcwCnUiX+ANg+C3bQMdClZpt8hfcjowBY=
Subject key identifier:   14:36:C0:AF:4B:7B:0E:2B:0C:6D:76:33:44:F7:79:1D:6C:AF:CD:E8
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3742900D65A826D9D88C056E178577D01D7E8902
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a3935353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 10 Feb 2022 09:55:01 +0000
ROA not before:           Thu 10 Feb 2022 09:50:01 +0000
ROA not after:            Thu 09 Feb 2023 09:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:210:955::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:42:90:0d:65:a8:26:d9:d8:8c:05:6e:17:85:77:d0:1d:7e:89:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 10 09:50:01 2022 GMT
            Not After : Feb  9 09:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:5b:83:36:fd:fe:e9:20:0f:18:a3:96:a3:
                    9a:5e:5d:bd:e3:66:f1:8d:20:ea:91:8f:c8:c7:86:
                    65:c6:1f:bf:9b:f1:b7:de:cf:f9:2c:37:be:33:5b:
                    61:a7:e9:1c:51:e4:d6:ff:2b:3c:bc:f6:5a:6f:8c:
                    f5:fe:83:d8:c1:73:4a:e4:4b:7f:59:87:f6:e1:5e:
                    52:df:c4:b0:04:0c:87:d4:7b:e0:9d:ea:21:b8:6b:
                    9c:c1:e5:25:68:06:ad:09:8d:05:e9:bb:0e:90:e2:
                    cd:50:f0:4a:da:e7:d3:3a:92:8b:aa:6d:ae:99:8c:
                    0e:fd:91:15:92:e9:ec:bb:f9:05:04:e4:ba:e5:a5:
                    4b:9a:ed:64:78:64:2d:44:44:51:4c:ff:81:a2:1f:
                    20:96:0c:c0:33:b9:9a:7d:cb:b7:87:0f:83:d4:5e:
                    86:cb:ab:69:15:df:ea:dc:64:4f:2d:d7:51:02:dd:
                    50:9b:6c:bb:b6:65:e9:da:9b:8b:17:f7:d6:2a:21:
                    94:70:67:5b:38:06:82:ed:4f:c7:ad:5c:32:b3:91:
                    b8:2c:6b:48:05:a8:a0:ff:ce:b6:9b:c3:65:96:74:
                    dd:79:0f:8e:b9:d1:41:fe:fb:5b:d7:2b:23:1f:e4:
                    5b:af:9e:ed:e0:c6:71:1a:db:e7:57:a0:87:b6:06:
                    f3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:36:C0:AF:4B:7B:0E:2B:0C:6D:76:33:44:F7:79:1D:6C:AF:CD:E8
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a3935353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:210:955::/80

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:6f:59:58:9b:73:af:08:3b:c9:cb:7b:2d:3d:38:34:d4:
         19:76:8e:1c:7e:a1:20:ec:2d:41:e6:9c:46:01:3f:d6:59:1c:
         32:c0:90:ab:21:4a:d3:f3:ad:41:8d:04:00:c1:00:6d:f9:c8:
         8a:fa:77:4c:e2:67:ea:e4:75:8c:fd:a1:65:43:c4:6e:25:74:
         1a:00:33:9b:1d:9d:9c:b5:6d:92:4e:69:aa:0b:48:88:9b:62:
         e2:7f:be:ec:65:20:10:40:14:e1:0e:83:1a:e1:50:ce:8d:d4:
         26:26:d4:64:8d:f2:ba:19:e6:cd:db:16:ba:db:11:cb:b6:a8:
         54:ea:c1:96:08:fb:31:a2:f4:24:75:6e:a5:61:87:38:33:52:
         25:17:90:7c:3f:ea:40:da:98:c3:df:f5:8e:12:16:04:af:92:
         f0:92:6a:cc:8f:da:23:88:bc:a2:0f:20:fb:c5:e1:c6:cc:f4:
         54:5f:0c:55:a2:8b:9c:02:4f:f5:b5:e5:49:72:4a:1f:2a:f4:
         a9:39:f1:ed:63:42:db:e3:df:0c:0d:75:f2:15:d2:6c:9a:30:
         7e:1d:d6:7b:10:e7:7d:a1:12:1a:71:e1:a3:fe:eb:1b:a5:8b:
         e2:d3:2a:06:27:5c:58:aa:d6:7e:b5:63:66:ad:2b:7a:1c:44:
         79:97:98:35
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUN0KQDWWoJtnYjAVuF4V30B1+iQIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjEwMDk1MDAxWhcNMjMwMjA5MDk1NTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEFERkY1Qjgz
MzZGREZFRTkyMDBGMThBMzk2QTM5QTVFNURCREUzNjZGMThEMjBFQTkxOEZDOEM3
ODY2NUM2MUZCRjlCRjFCN0RFQ0ZGOTJDMzdCRTMzNUI2MUE3RTkxQzUxRTRENkZG
MkIzQ0JDRjY1QTZGOENGNUZFODNEOEMxNzM0QUU0NEI3RjU5ODdGNkUxNUU1MkRG
QzRCMDA0MEM4N0Q0N0JFMDlERUEyMUI4NkI5Q0MxRTUyNTY4MDZBRDA5OEQwNUU5
QkIwRTkwRTJDRDUwRjA0QURBRTdEMzNBOTI4QkFBNkRBRTk5OEMwRUZEOTExNTky
RTlFQ0JCRjkwNTA0RTRCQUU1QTU0QjlBRUQ2NDc4NjQyRDQ0NDQ1MTRDRkY4MUEy
MUYyMDk2MENDMDMzQjk5QTdEQ0JCNzg3MEY4M0Q0NUU4NkNCQUI2OTE1REZFQURD
NjQ0RjJERDc1MTAyREQ1MDlCNkNCQkI2NjVFOURBOUI4QjE3RjdENjJBMjE5NDcw
Njc1QjM4MDY4MkVENEZDN0FENUMzMkIzOTFCODJDNkI0ODA1QThBMEZGQ0VCNjlC
QzM2NTk2NzRERDc5MEY4RUI5RDE0MUZFRkI1QkQ3MkIyMzFGRTQ1QkFGOUVFREUw
QzY3MTFBREJFNzU3QTA4N0I2MDZGMzMzMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAK3/W4M2/f7pIA8Yo5ajml5dveNm8Y0g6pGPyMeG
ZcYfv5vxt97P+Sw3vjNbYafpHFHk1v8rPLz2Wm+M9f6D2MFzSuRLf1mH9uFeUt/E
sAQMh9R74J3qIbhrnMHlJWgGrQmNBem7DpDizVDwStrn0zqSi6ptrpmMDv2RFZLp
7Lv5BQTkuuWlS5rtZHhkLUREUUz/gaIfIJYMwDO5mn3Lt4cPg9RehsuraRXf6txk
Ty3XUQLdUJtsu7Zl6dqbixf31iohlHBnWzgGgu1Px61cMrORuCxrSAWooP/OtpvD
ZZZ03XkPjrnRQf77W9crIx/kW6+e7eDGcRrb51egh7YG8zMCAwEAAaOCApowggKW
MB0GA1UdDgQWBBQUNsCvS3sOKwxtdjNE93kdbK/N6DAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzAzYTM5MzUzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIQCVUwDQYJKoZIhvcN
AQELBQADggEBAJ7Ub1lYm3OvCDvJy3stPTg01Bl2jhx+oSDsLUHmnEYBP9ZZHDLA
kKshStPzrUGNBADBAG35yIr6d0ziZ+rkdYz9oWVDxG4ldBoAM5sdnZy1bZJOaaoL
SIibYuJ/vuxlIBBAFOEOgxrhUM6N1CYm1GSN8roZ5s3bFrrbEcu2qFTqwZYI+zGi
9CR1bqVhhzgzUiUXkHw/6kDamMPf9Y4SFgSvkvCSasyP2iOIvKIPIPvF4cbM9FRf
DFWii5wCT/W15UlySh8q9Kk58e1jQtvj3wwNdfIV0myaMH4d1nsQ532hEhpx4aP+
6xuli+LTKgYnXFiq1n61Y2atK3ocRHmXmDU=
-----END CERTIFICATE-----