Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a323035353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a323035353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          JRjXaMcpzesBDx1uYLFYqj0Yl+v91/FXImdyEOh9u1s=
Subject key identifier:   AB:D2:FC:D0:F4:7D:79:85:D8:CE:9C:11:A9:DC:FD:36:4C:15:E4:0D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       44FCB9D99CF920E575CEEA6AEEA51206088795A5
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a323035353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 20:55:01 +0000
ROA not before:           Fri 11 Feb 2022 20:50:01 +0000
ROA not after:            Fri 10 Feb 2023 20:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:2055::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fc:b9:d9:9c:f9:20:e5:75:ce:ea:6a:ee:a5:12:06:08:87:95:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 20:50:01 2022 GMT
            Not After : Feb 10 20:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:6a:db:c5:dc:e2:6e:00:c6:df:23:41:7c:
                    21:d6:b1:b1:83:45:01:97:7a:29:a0:68:1e:8e:63:
                    74:e3:a7:f8:35:0f:4b:fa:f0:01:d3:ec:f2:7e:ba:
                    c8:e4:48:2f:9e:6a:9b:9c:08:5c:1e:2f:72:0b:01:
                    f1:13:a7:0f:9f:56:17:16:82:0c:99:bf:53:c3:eb:
                    d0:29:b1:ad:d0:cf:58:ab:ab:7f:a3:b5:54:a3:17:
                    2a:b6:09:ad:f5:b5:cb:42:56:60:c6:8d:97:eb:7f:
                    b7:83:4d:7d:9f:1e:38:6d:67:93:8f:b5:ad:79:d3:
                    81:56:88:26:bb:ac:5e:47:b2:25:92:c6:65:78:0e:
                    e2:24:f5:1c:6c:54:a6:9d:a4:c3:6f:27:6d:e0:93:
                    6a:e6:af:0f:2e:83:c3:81:dc:1a:f4:4e:59:65:e6:
                    f9:48:3e:c6:c4:74:5d:3d:d7:3e:40:9c:80:a2:38:
                    a9:f1:3d:95:c9:ee:54:dd:2b:fa:b1:38:02:23:61:
                    76:70:d2:92:7e:6a:76:32:6c:e0:11:fd:d8:d5:1e:
                    79:10:08:f3:43:90:d8:6e:da:e2:22:2c:be:9c:fa:
                    6e:c4:f5:ef:ab:7e:9f:c8:bc:22:4c:ea:9a:ac:d0:
                    7f:1c:4a:e2:34:a9:24:c8:46:17:70:b0:bb:dd:ba:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D2:FC:D0:F4:7D:79:85:D8:CE:9C:11:A9:DC:FD:36:4C:15:E4:0D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a323035353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:2055::/80

    Signature Algorithm: sha256WithRSAEncryption
         c4:6a:a7:34:d2:fa:b2:ab:a4:e5:0b:3e:8e:ad:c5:7b:72:93:
         a3:41:58:c0:33:5f:3f:13:af:48:08:92:41:8a:66:aa:1d:d9:
         78:49:b1:9d:2a:d1:ab:5f:ec:b7:26:6c:2d:a3:da:3a:cd:c7:
         43:9e:fa:00:6b:57:26:c2:01:02:bf:8a:97:40:05:3d:bb:41:
         79:1b:5e:45:57:1f:61:9b:ce:7e:9f:62:7b:1b:cb:00:9b:e8:
         68:8b:68:18:54:45:90:a8:dd:9f:97:e3:68:e0:3c:18:97:fc:
         fb:3f:d2:c8:c7:a6:f7:e1:0d:6c:b0:8c:fa:8e:27:bf:d9:3e:
         85:95:31:59:ea:56:34:80:d6:b7:5f:19:28:93:36:86:25:13:
         62:41:d7:85:ae:6b:7e:1c:19:3b:a6:1e:81:a4:56:95:e4:2e:
         b1:2b:b5:85:53:26:a9:1c:58:a8:ae:76:00:31:04:cf:5c:bf:
         f7:0b:44:6b:e9:43:c7:e1:d8:31:99:ee:6b:c4:62:fd:35:91:
         13:dd:8f:cb:2c:b9:8f:fb:a8:be:69:89:04:a1:32:87:97:a1:
         4b:af:17:96:8b:fb:2c:c9:d3:d5:b9:0e:80:09:8b:ee:46:5f:
         97:7f:5c:b9:71:76:08:f2:24:27:a3:0e:db:0b:fd:f0:09:80:
         5d:5f:5a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----