Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313835303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a313835303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          ErKkV9Xg9Yb9LA0KPazJegrujaArTTmnbFkbBBFxsYM=
Subject key identifier:   EE:C1:19:62:FD:31:93:9E:DC:F0:5F:E8:3F:00:1B:FA:D7:3A:40:15
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       281DF8A89D1AD64EAE27A5986C096C20C19D70C6
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313835303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 18:50:01 +0000
ROA not before:           Fri 11 Feb 2022 18:45:01 +0000
ROA not after:            Fri 10 Feb 2023 18:50:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:1850::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1d:f8:a8:9d:1a:d6:4e:ae:27:a5:98:6c:09:6c:20:c1:9d:70:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 18:45:01 2022 GMT
            Not After : Feb 10 18:50:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2c:f8:50:24:32:a9:c6:c3:5e:bd:a7:4b:65:
                    ab:49:d9:4c:c9:9f:51:98:5a:92:2c:31:37:36:4c:
                    6a:12:d4:97:26:22:22:c3:56:ae:b9:05:3c:49:02:
                    c9:93:45:44:9e:10:4d:55:6b:94:be:1b:67:bf:82:
                    73:25:2f:5d:dd:81:51:ce:aa:42:bc:8d:35:58:1e:
                    4c:81:7d:c4:4f:1a:f1:89:b3:70:e0:f7:47:eb:8b:
                    05:3a:09:ff:cc:e8:fa:91:d6:db:ae:a8:88:94:f0:
                    52:fa:4a:27:dc:64:51:b8:aa:75:2e:f8:92:fb:5a:
                    24:40:d1:bc:62:25:1c:58:32:9f:c3:e2:c5:5c:d7:
                    60:8f:06:09:77:f7:59:66:cc:ac:16:3f:e0:e1:e6:
                    c1:9a:21:69:6d:11:08:24:29:f3:19:6a:10:9c:2f:
                    97:9e:aa:ba:72:71:d6:63:32:8c:55:a9:22:37:10:
                    3e:32:fd:d3:6d:0e:ad:2f:80:ed:1a:8d:ac:37:b5:
                    4a:92:80:02:69:47:2e:81:46:41:0a:2a:60:76:cd:
                    e2:75:47:e4:87:f4:67:47:c9:b1:5f:78:f2:0f:91:
                    a2:b7:43:0a:4a:35:c1:90:99:e6:1c:d0:53:9f:0f:
                    c9:65:cc:ac:bf:7e:d0:2a:72:06:4f:96:c6:4c:b8:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C1:19:62:FD:31:93:9E:DC:F0:5F:E8:3F:00:1B:FA:D7:3A:40:15
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313835303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:1850::/80

    Signature Algorithm: sha256WithRSAEncryption
         5d:45:4a:58:0b:7f:40:27:fd:9b:28:8c:67:b5:39:08:40:c2:
         3c:8b:6a:47:88:ef:50:25:34:1f:6d:76:34:e5:37:87:ac:32:
         c1:f1:07:ae:06:57:ac:6a:09:e8:27:bf:64:af:97:26:95:e3:
         10:36:b1:cb:48:17:6f:a9:9a:66:b2:ac:0e:32:ae:08:20:dd:
         22:a5:cf:7d:55:5c:74:be:76:37:bf:f2:c3:4b:ae:5f:13:3b:
         cb:f6:0e:16:dc:09:f8:4a:76:67:55:98:1f:d5:ca:48:9e:eb:
         1f:b0:78:06:16:e7:1f:18:97:6a:dc:d5:27:6f:14:b6:32:ca:
         b0:ec:2e:e4:9b:ca:5f:cc:26:9f:d9:8e:be:67:f3:fc:b8:aa:
         39:33:dc:fe:f1:6b:d0:a4:c7:0b:6e:16:d8:04:a8:f6:82:aa:
         84:df:79:ff:b0:43:43:4e:72:99:c0:95:20:5c:f2:c8:89:8c:
         a4:18:e4:15:34:4e:ef:75:03:55:f4:b1:14:15:69:30:d4:88:
         b6:db:9d:d5:ea:25:c7:ba:cf:a4:3a:3e:a9:a6:f5:9f:4e:5c:
         67:ae:e9:b2:30:92:06:3f:a9:9d:bc:23:c5:03:61:68:10:67:
         e6:2c:b0:35:e0:14:9e:db:c6:34:60:df:93:7d:35:64:5c:32:
         b7:9c:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----