Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313432303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a313432303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          CvuECL+ktRIu/UjXUrnEZ+JCMQbUeU4dFdVApB6LcjM=
Subject key identifier:   1B:CB:44:7D:A0:74:A0:33:BF:01:3A:1B:32:DF:C6:07:28:B8:9A:1A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       30D76B70BAE5244CD58DC77F6878FFBC68BDBD39
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313432303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 14:20:02 +0000
ROA not before:           Fri 11 Feb 2022 14:15:02 +0000
ROA not after:            Fri 10 Feb 2023 14:20:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:1420::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d7:6b:70:ba:e5:24:4c:d5:8d:c7:7f:68:78:ff:bc:68:bd:bd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 14:15:02 2022 GMT
            Not After : Feb 10 14:20:02 2023 GMT
        Subject: CN=3082010A0282010100C713C5F501782BE9757609739C0CA8930DA9CB8108B7C45D5DC02E3289EDB1565B4CFE5F30D58EC2610035246B41DD3C134A5B855975BE77C6687B56DE0873F7B6E4A9E5301AE919A94317D84360D6E60A788FD07E09F71D2C134251E653AAC74A192AC33B35A05F3BBA82F74D6601B82532E64D334685B6B98530C2ABCE82FBDC904B96FA2A32A44568C3938C90234881FD769143141D79B9D8783FCEE94B252DDE37A52097CFC1FD28248372773A49A612DB99E2007FFE804AAE58A1955011141C7EA09ADB89D961A4BBB1C1494CCA1F0EC9430D2BB953BCCCFECB92114E5ED0A6CAD12371F89AC2B05F61C9039732C59CFD00A98F6C92F54D7DEA610F49050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:c5:f5:01:78:2b:e9:75:76:09:73:9c:0c:
                    a8:93:0d:a9:cb:81:08:b7:c4:5d:5d:c0:2e:32:89:
                    ed:b1:56:5b:4c:fe:5f:30:d5:8e:c2:61:00:35:24:
                    6b:41:dd:3c:13:4a:5b:85:59:75:be:77:c6:68:7b:
                    56:de:08:73:f7:b6:e4:a9:e5:30:1a:e9:19:a9:43:
                    17:d8:43:60:d6:e6:0a:78:8f:d0:7e:09:f7:1d:2c:
                    13:42:51:e6:53:aa:c7:4a:19:2a:c3:3b:35:a0:5f:
                    3b:ba:82:f7:4d:66:01:b8:25:32:e6:4d:33:46:85:
                    b6:b9:85:30:c2:ab:ce:82:fb:dc:90:4b:96:fa:2a:
                    32:a4:45:68:c3:93:8c:90:23:48:81:fd:76:91:43:
                    14:1d:79:b9:d8:78:3f:ce:e9:4b:25:2d:de:37:a5:
                    20:97:cf:c1:fd:28:24:83:72:77:3a:49:a6:12:db:
                    99:e2:00:7f:fe:80:4a:ae:58:a1:95:50:11:14:1c:
                    7e:a0:9a:db:89:d9:61:a4:bb:b1:c1:49:4c:ca:1f:
                    0e:c9:43:0d:2b:b9:53:bc:cc:fe:cb:92:11:4e:5e:
                    d0:a6:ca:d1:23:71:f8:9a:c2:b0:5f:61:c9:03:97:
                    32:c5:9c:fd:00:a9:8f:6c:92:f5:4d:7d:ea:61:0f:
                    49:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CB:44:7D:A0:74:A0:33:BF:01:3A:1B:32:DF:C6:07:28:B8:9A:1A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313432303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:1420::/80

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:3b:f9:6d:8d:df:96:1c:ba:b7:c1:28:7f:dd:8e:fe:35:
         54:98:52:c4:14:61:fd:cd:c0:9f:71:f9:b7:e6:c3:c3:dc:7b:
         b8:1d:01:4f:2d:c0:48:df:e5:8f:c7:1d:11:73:d4:3e:6e:7d:
         db:fc:1b:94:93:d2:f3:4e:ac:5c:b9:8d:04:c2:3e:a0:e5:17:
         b4:c3:a3:8e:5d:98:89:24:e4:8d:29:0b:4b:00:9f:25:f9:ae:
         12:12:50:e7:7a:56:59:41:26:a9:23:37:12:b0:98:e0:d4:82:
         17:74:6f:aa:c4:04:3a:41:67:ec:64:fa:7e:92:fd:eb:0a:90:
         7a:1d:21:f2:5d:61:24:aa:a6:e7:cf:84:58:5a:0d:f8:5f:26:
         4a:ea:33:6e:94:02:f9:a2:ab:c6:50:39:04:cf:01:51:ff:76:
         1d:58:6e:0a:9f:62:8a:de:3b:03:38:86:08:7e:2b:4c:65:cf:
         30:82:1d:27:fa:cb:70:dc:dc:2a:78:e4:34:bd:6b:b4:67:0e:
         12:4f:da:df:db:c6:48:8b:05:2c:27:54:48:2b:05:30:21:9f:
         aa:9a:96:15:36:25:7e:89:f1:76:5e:58:d6:71:7a:26:e7:57:
         17:f2:de:31:8a:4c:db:0e:40:31:6e:8f:81:5c:20:49:47:77:
         a6:70:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----