Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313232353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a313232353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          k7Nr2/d3sxj1pka0/4+AIPiLnusBV4fIl5KcAixFn80=
Subject key identifier:   C3:B5:79:A4:48:EA:84:4F:E1:8B:8F:AD:65:40:55:8F:18:2A:71:28
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       56822CF36DDC163F14E51AB2FF136857CBD0BE25
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313232353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 12:25:02 +0000
ROA not before:           Fri 11 Feb 2022 12:20:02 +0000
ROA not after:            Fri 10 Feb 2023 12:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:1225::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:82:2c:f3:6d:dc:16:3f:14:e5:1a:b2:ff:13:68:57:cb:d0:be:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 12:20:02 2022 GMT
            Not After : Feb 10 12:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:e4:82:54:9b:56:7c:72:31:f2:12:f9:ea:
                    66:a1:e9:f4:9b:12:2d:2a:80:68:95:e6:47:90:c1:
                    58:bb:14:cf:ae:57:ff:6b:dc:08:15:fd:24:39:e4:
                    38:0c:34:a2:cf:7a:d7:b9:27:4e:35:61:be:12:f8:
                    62:fa:d5:ac:51:1d:57:29:f8:f3:32:15:e9:d1:99:
                    1f:54:7d:2a:9c:80:a3:9a:49:09:e0:76:70:ea:05:
                    ef:3c:49:2f:14:69:0a:a6:4e:b9:f7:22:49:da:44:
                    c8:2a:aa:54:92:5f:37:ff:dd:14:ad:56:77:03:64:
                    90:7d:b8:f8:18:69:a7:02:e1:04:79:86:07:1b:55:
                    71:20:dc:d0:4b:ff:f0:58:b4:3a:b4:7e:62:62:e1:
                    f6:c2:44:4d:f9:4b:d1:3a:97:58:2e:5f:b3:53:05:
                    3d:06:70:08:cb:4f:00:6a:31:d6:fb:a6:85:df:11:
                    18:0b:88:01:cc:2b:23:dd:2b:0e:4d:98:de:a8:ce:
                    25:db:76:9d:e6:c9:ab:21:f8:14:1e:c9:16:43:e5:
                    c9:54:1f:4d:ff:f9:46:20:ea:a8:94:02:e5:e4:e1:
                    a3:de:e0:49:4e:49:b4:34:b4:55:87:3a:0e:ab:d9:
                    3a:ad:5b:3f:4d:39:dd:1a:3a:4d:66:87:6d:6c:64:
                    b7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B5:79:A4:48:EA:84:4F:E1:8B:8F:AD:65:40:55:8F:18:2A:71:28
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313232353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:1225::/80

    Signature Algorithm: sha256WithRSAEncryption
         b2:4f:47:62:16:e4:07:8a:ab:b0:6b:d8:bc:cc:74:d4:8d:41:
         c4:66:7a:58:d3:bb:bf:91:9c:94:97:18:26:b9:c4:af:d1:d9:
         37:23:76:0e:1c:63:b5:56:5f:41:4d:2b:4a:25:c3:8e:82:1a:
         ac:5c:67:c4:3d:17:d2:7d:a8:5c:82:51:13:01:83:db:00:a7:
         75:b5:7d:7f:92:1e:a7:42:74:b2:38:77:d6:a5:86:95:6f:13:
         92:ed:03:06:9e:5e:17:63:38:61:84:04:b8:3d:e3:d2:c9:04:
         75:7c:7e:e9:fa:2e:d0:5a:6b:9e:cd:dd:01:4e:fd:9b:27:01:
         b7:8b:ae:37:68:e9:0e:87:7f:e4:28:d1:03:71:55:4b:cf:ee:
         97:cd:0c:51:e1:a9:be:23:a7:5c:a0:b8:fc:7e:90:9c:e2:3f:
         53:6c:37:9d:a6:ec:cd:b9:83:be:bf:43:74:98:a1:c4:ad:af:
         c8:b3:4e:94:3c:e2:d8:3d:de:0c:b1:18:0b:dd:50:d2:64:3f:
         29:2f:b4:47:7b:17:86:a5:5e:27:d7:0b:7b:2f:33:de:68:de:
         1f:01:1b:53:1d:c0:ed:d1:13:d9:14:9f:83:20:06:3a:55:f7:
         32:61:3e:c8:95:91:07:cb:c1:0b:17:dd:52:a1:f0:36:99:1f:
         88:77:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----