Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313733303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a313733303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          DS17bUFCG5xNSPKpq0BNcCicFYLLNRyiW7l+cd7gjRs=
Subject key identifier:   01:54:1A:91:43:FE:6B:8E:0D:52:9B:9B:BA:03:85:D9:B6:04:84:2A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       62CDBA36A24EABFC626D04D1F8120BAA98E570D8
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313733303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 17:30:01 +0000
ROA not before:           Sat 12 Feb 2022 17:25:01 +0000
ROA not after:            Sat 11 Feb 2023 17:30:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:1730::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cd:ba:36:a2:4e:ab:fc:62:6d:04:d1:f8:12:0b:aa:98:e5:70:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 17:25:01 2022 GMT
            Not After : Feb 11 17:30:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:a9:ca:32:10:93:dd:31:96:69:7c:38:82:
                    b2:00:9c:e5:31:fe:9c:2d:8e:e8:b1:3d:30:d1:c9:
                    44:02:ca:f3:1c:f6:55:9e:4c:38:5e:13:c5:fa:d9:
                    f3:74:9c:6f:b5:ba:cd:fb:b6:06:66:5d:20:e2:4b:
                    cb:ff:03:cd:cb:9a:4a:03:8a:06:da:9b:57:f1:e2:
                    51:6e:92:31:ee:c8:25:be:38:0b:b9:70:e0:fa:65:
                    06:e7:6d:e9:66:21:46:70:34:36:64:06:ba:ae:a5:
                    bf:25:e1:25:89:a7:ce:8a:6b:3a:77:b4:81:b1:f1:
                    87:e7:a1:ee:d9:f3:37:f0:f3:f0:a8:4f:4b:16:bb:
                    ea:e0:0f:d5:b9:f5:a4:4b:86:79:f3:6e:cc:62:77:
                    b1:5c:d2:15:6b:8f:60:71:cf:05:e0:fd:3c:72:5e:
                    9e:b0:df:6d:5e:ab:fe:b5:d4:e2:88:86:8b:5c:7e:
                    f5:b2:84:29:bf:30:38:89:f7:18:bb:70:3e:83:77:
                    eb:96:d8:73:1b:6d:4a:90:12:6d:eb:99:0d:a4:da:
                    6c:98:ed:15:81:06:06:f5:da:e9:f1:1f:1b:dd:79:
                    4d:65:1b:f3:7c:ce:9e:8d:1c:82:5e:e2:3a:9b:ec:
                    21:fb:ff:a5:54:14:2f:27:fd:16:25:f3:f5:5f:72:
                    9f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:54:1A:91:43:FE:6B:8E:0D:52:9B:9B:BA:03:85:D9:B6:04:84:2A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313733303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:1730::/80

    Signature Algorithm: sha256WithRSAEncryption
         9c:e3:c0:f2:e4:d1:aa:49:35:61:d7:c0:1b:b2:37:c0:99:1d:
         0a:24:89:2c:bb:6f:44:6d:43:11:f4:e9:59:27:a3:53:c2:f1:
         ea:ee:ee:27:2a:20:b5:12:d3:9b:38:b1:1b:d9:49:65:39:38:
         3f:01:66:b0:e8:c0:eb:49:0a:f4:d3:44:1c:65:9b:ba:e7:8d:
         e5:f1:2c:f5:9a:46:08:a9:16:08:de:b1:e2:35:d3:b3:72:bb:
         b1:c8:c7:2b:b1:74:f5:2f:6d:ee:58:ff:2f:14:94:64:90:9a:
         5c:c0:be:63:bf:02:f5:a1:4b:1b:ae:40:7e:86:63:be:9b:9f:
         eb:40:31:f9:2b:03:07:ad:c9:6e:92:19:df:af:c8:cd:2e:f2:
         57:f2:f9:80:05:b3:66:1e:ae:c5:ef:9a:fa:7f:b4:63:15:92:
         3f:31:7b:34:6f:1e:5f:7e:c8:f9:09:45:6b:ac:e1:32:fc:8a:
         87:d3:86:7e:61:fc:b2:18:7c:8b:b7:b2:e7:01:40:74:b9:ab:
         fb:18:ee:ff:94:e4:9c:af:bb:ca:ef:f8:db:cf:57:ee:ce:0b:
         22:2f:ea:a4:fe:92:bb:7a:d6:52:75:f2:ff:bf:2c:66:73:90:
         39:95:f7:c5:2f:bd:a4:82:84:22:77:fd:e9:73:19:d7:6a:cd:
         1e:ca:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----