Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323133353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a323133353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          DETbuCNLK/QRUlo4ittiBJkRDU3tRGLroL39Hvha2ws=
Subject key identifier:   CA:2D:11:22:0E:3D:E2:3A:CA:7C:E6:23:DF:B3:96:57:93:B6:F1:57
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       42315AD9DF3E067D51ECB852AD3BD914522005B1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323133353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 21:35:02 +0000
ROA not before:           Sat 12 Feb 2022 21:30:02 +0000
ROA not after:            Sat 11 Feb 2023 21:35:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:2135::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:31:5a:d9:df:3e:06:7d:51:ec:b8:52:ad:3b:d9:14:52:20:05:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 21:30:02 2022 GMT
            Not After : Feb 11 21:35:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:0c:de:7b:47:de:21:a7:cf:53:2d:3a:4d:
                    78:be:a8:10:d2:48:85:42:21:a1:f3:aa:30:cc:01:
                    02:8a:f9:43:67:c9:29:ea:05:e0:68:22:29:18:82:
                    01:b4:c6:07:89:03:f6:6c:1e:8b:2b:29:67:21:e6:
                    36:e3:4f:d7:70:2e:f8:4a:71:4d:0e:67:55:19:9c:
                    a8:e0:7a:d1:fd:6d:15:fa:41:52:54:6d:6e:23:57:
                    c7:61:ab:2c:0e:8d:cf:d3:21:12:c5:56:b8:8d:3f:
                    67:b4:f6:e5:c6:f2:34:86:c0:31:95:10:5d:52:f1:
                    27:dd:74:35:36:dc:46:35:6b:ad:e4:eb:a4:67:a3:
                    c5:16:80:23:26:f7:87:07:a1:cb:41:25:d0:dc:d4:
                    d0:ca:90:6a:1f:0e:1c:a8:ed:d0:47:2d:77:d3:b4:
                    d6:4b:f5:17:26:62:d0:71:f3:b1:16:4a:d1:a1:4b:
                    a4:d9:49:f1:18:00:94:d5:20:e6:ce:3b:33:f4:22:
                    bc:60:e2:e8:50:d0:49:f2:0e:30:5d:96:d0:ce:fe:
                    21:44:76:28:38:49:ad:a4:98:d2:b9:a8:6b:fd:ea:
                    2c:14:fd:14:94:18:67:31:10:17:57:2e:38:6c:cc:
                    3c:f9:95:71:ed:61:f1:6a:04:35:e3:70:f6:92:e0:
                    b7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2D:11:22:0E:3D:E2:3A:CA:7C:E6:23:DF:B3:96:57:93:B6:F1:57
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323133353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:2135::/80

    Signature Algorithm: sha256WithRSAEncryption
         35:b8:d4:b5:de:a1:b0:81:02:58:c9:b9:b7:05:6f:e3:06:2c:
         e6:27:4d:b9:c1:8e:0c:bb:95:fa:03:2c:2e:e7:a4:fd:73:a8:
         a3:b6:cd:91:5a:7d:dc:ac:5f:ee:0d:27:c1:e4:0c:29:b9:83:
         44:64:d3:49:a2:b9:35:4e:28:06:ae:c9:d3:bd:55:23:bb:41:
         c0:b0:b8:06:b9:3d:c3:4f:62:6a:47:8c:8d:bb:3d:79:2e:c6:
         db:1b:e5:19:e4:14:10:8d:2c:50:51:73:41:6e:f1:fc:76:10:
         91:bd:93:e7:24:eb:49:1c:b0:ca:24:ae:60:e5:f3:02:0d:cb:
         c4:e4:d2:d4:8b:17:11:4c:aa:5f:df:c1:81:b4:af:54:ad:2d:
         ef:5d:88:ce:d8:d5:01:a0:88:6d:c2:b5:0c:94:9d:73:1f:16:
         7f:98:de:97:8a:32:71:03:08:5d:07:5b:6a:e1:76:3e:56:3f:
         16:a2:65:20:50:6e:29:14:55:e2:6b:d7:b2:ad:2e:a0:56:30:
         9c:c3:af:77:b2:db:f9:5b:5f:2e:6a:be:c7:1a:3b:f7:8f:c6:
         9d:8e:fb:14:7c:da:49:10:4e:72:0e:3c:65:64:6d:66:82:d3:
         cc:6a:05:36:08:91:06:9c:37:85:f8:79:0f:56:42:06:98:0f:
         a4:02:6f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----