Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313635353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a313635353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          oTbOfXQz4DKJetyW5ruBwXPQzwgZ/VAcZXS7QOozJcs=
Subject key identifier:   74:B1:B6:51:A3:BB:16:1B:54:79:04:4D:9F:E9:22:ED:97:76:B6:F8
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0F67C3D6188395886AA9797F3BA125973AF9920F
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313635353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 16:55:01 +0000
ROA not before:           Sat 12 Feb 2022 16:50:01 +0000
ROA not after:            Sat 11 Feb 2023 16:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:1655::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:67:c3:d6:18:83:95:88:6a:a9:79:7f:3b:a1:25:97:3a:f9:92:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 16:50:01 2022 GMT
            Not After : Feb 11 16:55:01 2023 GMT
        Subject: CN=3082010A0282010100C1C453180703225F5B6E4E2A483567D060D89ADD041697DEEB12FC754B101AC6709F09601DE1E66A7F04D800023D20F2774BDBA5620423950FA7550A865E8ABBE7145DB82F069871E12DB9BAC812C4FD433A5FA25299CBE6EEC40D63C8E5CD2DE7E08765281F9631434DD7E1923245CB4810F3CAE92D1031BD546F70A91832FB24A6A89602A099FB1324764FA9347B2B5BD3398FBC054390877BACB3768D06C5ECEDEDB8A891DC180C8D98169958298589BF35D8CC15235CF999F09BBF3CF40723F9E7A6239018E35AC2FF85876D506F14E2306F71AD25A988818316396263B30A4D0BA0FFD41BC7C89B8B99A92DAF5CCAA726FD9F0659982AF5B4884FAC49490203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:53:18:07:03:22:5f:5b:6e:4e:2a:48:35:
                    67:d0:60:d8:9a:dd:04:16:97:de:eb:12:fc:75:4b:
                    10:1a:c6:70:9f:09:60:1d:e1:e6:6a:7f:04:d8:00:
                    02:3d:20:f2:77:4b:db:a5:62:04:23:95:0f:a7:55:
                    0a:86:5e:8a:bb:e7:14:5d:b8:2f:06:98:71:e1:2d:
                    b9:ba:c8:12:c4:fd:43:3a:5f:a2:52:99:cb:e6:ee:
                    c4:0d:63:c8:e5:cd:2d:e7:e0:87:65:28:1f:96:31:
                    43:4d:d7:e1:92:32:45:cb:48:10:f3:ca:e9:2d:10:
                    31:bd:54:6f:70:a9:18:32:fb:24:a6:a8:96:02:a0:
                    99:fb:13:24:76:4f:a9:34:7b:2b:5b:d3:39:8f:bc:
                    05:43:90:87:7b:ac:b3:76:8d:06:c5:ec:ed:ed:b8:
                    a8:91:dc:18:0c:8d:98:16:99:58:29:85:89:bf:35:
                    d8:cc:15:23:5c:f9:99:f0:9b:bf:3c:f4:07:23:f9:
                    e7:a6:23:90:18:e3:5a:c2:ff:85:87:6d:50:6f:14:
                    e2:30:6f:71:ad:25:a9:88:81:83:16:39:62:63:b3:
                    0a:4d:0b:a0:ff:d4:1b:c7:c8:9b:8b:99:a9:2d:af:
                    5c:ca:a7:26:fd:9f:06:59:98:2a:f5:b4:88:4f:ac:
                    49:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B1:B6:51:A3:BB:16:1B:54:79:04:4D:9F:E9:22:ED:97:76:B6:F8
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313635353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:1655::/80

    Signature Algorithm: sha256WithRSAEncryption
         46:c1:9e:81:8e:b4:0d:a8:b7:3c:a8:83:b1:3a:f4:93:da:47:
         2d:27:fc:66:d9:2e:22:a6:d7:7e:ef:3e:8e:7b:ce:cd:66:e8:
         e4:39:5a:92:31:6b:dd:d1:0d:92:17:eb:de:33:dd:45:22:42:
         79:2f:bf:ac:56:b2:df:96:a1:a6:c4:8c:6c:94:02:05:8a:14:
         fe:b1:9a:26:ca:58:a7:c8:e6:bb:de:74:eb:91:3c:6b:7b:98:
         10:54:ac:33:72:49:62:85:fc:48:f6:14:0e:b5:a1:e1:64:cb:
         94:d7:98:11:bd:8b:fd:cd:a1:33:4d:a5:79:ee:19:12:fd:82:
         7f:6a:98:40:69:c6:1d:e6:63:31:37:a7:fd:06:91:ae:3a:fd:
         dd:b3:e4:a4:ff:e8:b9:1d:f6:03:59:a2:90:bb:e1:67:ad:81:
         78:ec:fb:c5:1f:e0:6f:15:5c:b1:e3:d6:42:57:5d:e3:1d:9b:
         48:f8:2c:72:75:c6:db:99:3b:f5:f6:3c:2d:b1:16:96:95:82:
         77:cd:b3:a5:fd:34:1b:68:be:5b:1e:8b:d1:44:0e:f6:5b:a6:
         52:6c:35:e5:ed:7f:09:a7:d8:17:82:25:9c:99:bb:32:77:90:
         80:e0:a2:0c:16:0d:ad:d4:79:63:cd:2d:ae:00:4d:5d:17:5b:
         47:9a:13:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----