Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a323235303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a323235303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          UZITY9hsSXhbOXYwzMxlprgDGFvCJF/8OP9Fqjo7ylE=
Subject key identifier:   DD:3F:6A:31:27:7C:7A:5E:CF:2E:9D:D3:FC:AC:E0:67:B2:32:6F:9D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5449FC107F72DD93C6557E887B9195678B280FAB
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a323235303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 22:50:02 +0000
ROA not before:           Fri 11 Feb 2022 22:45:02 +0000
ROA not after:            Fri 10 Feb 2023 22:50:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:2250::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:49:fc:10:7f:72:dd:93:c6:55:7e:88:7b:91:95:67:8b:28:0f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 22:45:02 2022 GMT
            Not After : Feb 10 22:50:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:bc:f5:1e:19:93:96:56:62:74:6c:a5:c4:
                    65:62:dc:2d:d0:9e:a8:04:e3:2a:26:8e:28:5b:90:
                    90:c9:57:fa:f3:b0:6f:03:eb:95:5f:cc:c4:33:71:
                    ab:2b:4d:1d:37:55:13:c8:ba:c8:0e:1c:30:d8:0a:
                    62:23:24:d1:10:6c:6e:e0:d9:17:22:7c:a5:5c:8b:
                    e2:96:cb:d8:c7:37:3b:02:b9:1d:8f:6f:0a:a0:2d:
                    bc:e4:4b:24:9f:ee:a8:de:e7:f5:e9:93:d2:7d:44:
                    1b:c1:1b:66:e0:07:f0:73:33:bb:d3:d6:fb:b6:e6:
                    73:56:cf:de:2d:0e:59:a2:46:c1:b9:ae:bd:ef:b9:
                    9d:05:c3:13:d6:a1:f2:31:d3:72:8f:74:f4:b0:f3:
                    c7:f2:52:f3:bf:62:13:42:cf:e2:c4:cb:fa:aa:2a:
                    ff:67:bf:ab:be:1b:85:22:e5:29:de:b2:f1:66:45:
                    b4:ac:d5:7b:02:62:e6:dd:a0:13:10:e4:75:6b:4e:
                    8c:17:6b:c9:13:99:01:b0:0e:b7:e6:d5:c7:2a:6c:
                    d5:97:73:d1:ee:8b:74:c1:4c:44:fa:cd:32:77:a9:
                    44:82:33:5c:f7:e1:84:8a:91:15:fe:86:33:59:f0:
                    c2:bc:cb:5f:80:16:17:7f:51:d0:cf:b3:a9:fe:23:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3F:6A:31:27:7C:7A:5E:CF:2E:9D:D3:FC:AC:E0:67:B2:32:6F:9D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a323235303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:2250::/80

    Signature Algorithm: sha256WithRSAEncryption
         70:28:3f:ee:96:6b:74:6c:6f:65:71:6c:e1:a5:d5:c4:1b:da:
         06:5c:f9:95:96:4a:b5:42:b3:5d:e4:52:1d:1d:87:6c:4c:2c:
         7d:fa:29:33:0d:79:de:2f:2e:47:a9:e5:55:9f:d9:e2:3d:c6:
         18:73:cf:9f:a9:aa:b2:a2:2f:fd:0d:36:49:6f:b1:c5:b1:0c:
         5e:80:e3:ce:30:bf:9d:30:6a:8f:a4:56:88:17:65:97:07:1f:
         21:b1:d8:08:c7:68:b8:52:0d:a2:e5:16:77:8e:6c:34:7e:9d:
         0f:82:82:b9:cf:ef:47:4d:61:d6:ed:c3:df:b7:da:b0:49:d3:
         d1:6b:90:3d:1b:d5:42:09:81:07:ee:b4:e1:a0:51:e3:dd:b9:
         52:f6:6b:4b:fa:5f:05:77:ac:17:e9:97:9e:83:9a:47:da:5e:
         6e:cf:e0:e2:fe:fa:68:8c:ff:4d:f3:19:a2:fd:2b:88:fa:77:
         e0:f7:f9:b2:30:40:46:9b:e3:fe:32:ac:55:e8:38:ae:df:0e:
         5a:d1:77:c5:86:05:62:e9:bf:f5:ff:90:d0:b8:92:f5:b3:ca:
         f5:20:4d:1c:da:21:fc:a5:a7:54:72:0b:aa:83:b2:97:95:ef:
         31:8f:9b:8c:f7:29:bf:e3:89:e7:c9:bc:42:3a:9d:99:50:8c:
         53:cc:2a:25
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUVEn8EH9y3ZPGVX6Ie5GVZ4soD6swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjExMjI0NTAyWhcNMjMwMjEwMjI1MDAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEM1MDdCQ0Y1
MUUxOTkzOTY1NjYyNzQ2Q0E1QzQ2NTYyREMyREQwOUVBODA0RTMyQTI2OEUyODVC
OTA5MEM5NTdGQUYzQjA2RjAzRUI5NTVGQ0NDNDMzNzFBQjJCNEQxRDM3NTUxM0M4
QkFDODBFMUMzMEQ4MEE2MjIzMjREMTEwNkM2RUUwRDkxNzIyN0NBNTVDOEJFMjk2
Q0JEOEM3MzczQjAyQjkxRDhGNkYwQUEwMkRCQ0U0NEIyNDlGRUVBOERFRTdGNUU5
OTNEMjdENDQxQkMxMUI2NkUwMDdGMDczMzNCQkQzRDZGQkI2RTY3MzU2Q0ZERTJE
MEU1OUEyNDZDMUI5QUVCREVGQjk5RDA1QzMxM0Q2QTFGMjMxRDM3MjhGNzRGNEIw
RjNDN0YyNTJGM0JGNjIxMzQyQ0ZFMkM0Q0JGQUFBMkFGRjY3QkZBQkJFMUI4NTIy
RTUyOURFQjJGMTY2NDVCNEFDRDU3QjAyNjJFNkREQTAxMzEwRTQ3NTZCNEU4QzE3
NkJDOTEzOTkwMUIwMEVCN0U2RDVDNzJBNkNENTk3NzNEMUVFOEI3NEMxNEM0NEZB
Q0QzMjc3QTk0NDgyMzM1Q0Y3RTE4NDhBOTExNUZFODYzMzU5RjBDMkJDQ0I1Rjgw
MTYxNzdGNTFEMENGQjNBOUZFMjNBNjc3MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMUHvPUeGZOWVmJ0bKXEZWLcLdCeqATjKiaOKFuQ
kMlX+vOwbwPrlV/MxDNxqytNHTdVE8i6yA4cMNgKYiMk0RBsbuDZFyJ8pVyL4pbL
2Mc3OwK5HY9vCqAtvORLJJ/uqN7n9emT0n1EG8EbZuAH8HMzu9PW+7bmc1bP3i0O
WaJGwbmuve+5nQXDE9ah8jHTco909LDzx/JS879iE0LP4sTL+qoq/2e/q74bhSLl
Kd6y8WZFtKzVewJi5t2gExDkdWtOjBdryROZAbAOt+bVxyps1Zdz0e6LdMFMRPrN
MnepRIIzXPfhhIqRFf6GM1nwwrzLX4AWF39R0M+zqf4jpncCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBTdP2oxJ3x6Xs8undP8rOBnsjJvnTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzEzYTMyMzIzNTMwM2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhEiUDANBgkqhkiG
9w0BAQsFAAOCAQEAcCg/7pZrdGxvZXFs4aXVxBvaBlz5lZZKtUKzXeRSHR2HbEws
ffopMw153i8uR6nlVZ/Z4j3GGHPPn6mqsqIv/Q02SW+xxbEMXoDjzjC/nTBqj6RW
iBdllwcfIbHYCMdouFINouUWd45sNH6dD4KCuc/vR01h1u3D37fasEnT0WuQPRvV
QgmBB+604aBR4925UvZrS/pfBXesF+mXnoOaR9pebs/g4v76aIz/TfMZov0riPp3
4Pf5sjBARpvj/jKsVeg4rt8OWtF3xYYFYum/9f+Q0LiS9bPK9SBNHNoh/KWnVHIL
qoOyl5XvMY+bjPcpv+OJ58m8QjqdmVCMU8wqJQ==
-----END CERTIFICATE-----