Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3730353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a3730353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          stTFtfKksNCJsNYQ96feAolxTq5jPsDp8CFlm9/JhOU=
Subject key identifier:   EA:70:09:9D:F6:9D:58:CC:55:89:9F:9C:21:3E:21:C8:D9:CA:16:B1
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       632103877A2F84391744EDADDEC830791E1579B6
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3730353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 07:05:01 +0000
ROA not before:           Sat 12 Feb 2022 07:00:01 +0000
ROA not after:            Sat 11 Feb 2023 07:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:705::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:21:03:87:7a:2f:84:39:17:44:ed:ad:de:c8:30:79:1e:15:79:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 07:00:01 2022 GMT
            Not After : Feb 11 07:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:da:ad:f6:df:ab:2a:ac:e8:e1:af:bb:8a:
                    29:90:cb:db:9f:df:4a:4e:d1:44:d0:2d:bc:b7:ba:
                    04:8a:ef:7f:ef:23:f5:aa:02:15:c0:1f:d8:c3:25:
                    3d:a8:19:42:20:43:bb:d6:8b:eb:d9:bc:4d:11:26:
                    5b:3f:bf:94:02:11:f0:30:d6:ae:65:f6:3e:1f:c5:
                    70:af:4c:0b:3d:ec:18:62:17:8a:f3:47:38:00:16:
                    22:f6:5e:c9:70:d1:61:ca:25:67:c3:e0:6d:e7:37:
                    47:71:fb:4a:12:0d:71:36:d2:8d:ec:80:65:0c:13:
                    93:6f:2c:a8:b1:ae:f0:2b:a1:d3:1a:89:77:9f:25:
                    72:e8:34:da:ce:66:85:8f:c4:2d:6d:ab:4a:db:11:
                    f1:18:9d:e5:7a:68:0e:f8:03:f5:5d:d3:7b:26:04:
                    d0:73:f8:e0:d0:8f:4b:45:6f:a8:21:2c:25:0d:03:
                    69:c2:4f:77:52:34:8d:4e:71:18:e3:42:d2:20:d9:
                    3b:b4:7a:f5:ac:8d:f0:3e:a5:ac:a3:57:5d:e5:cf:
                    01:39:e9:93:8a:85:29:f9:39:8e:37:75:c0:13:62:
                    48:2b:e4:c3:75:20:ce:be:0b:a3:5c:ff:c5:16:aa:
                    80:41:2d:34:6a:9a:aa:bc:70:2d:e5:5a:93:30:6d:
                    4e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:70:09:9D:F6:9D:58:CC:55:89:9F:9C:21:3E:21:C8:D9:CA:16:B1
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3730353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:705::/80

    Signature Algorithm: sha256WithRSAEncryption
         a3:63:2c:15:ac:d4:f9:db:f1:d6:3a:35:3c:0c:e7:41:5d:e7:
         57:e1:0a:d4:d2:6d:dc:c7:00:23:3c:a7:bb:ec:94:21:da:55:
         0a:da:d2:1f:5d:38:d0:d9:c9:24:33:20:24:31:3b:5a:1c:91:
         08:91:3f:92:db:46:3f:e2:16:c0:51:5e:2e:78:b2:e7:de:c3:
         30:bb:2e:89:47:96:82:41:a3:34:67:f8:20:44:ab:48:6e:94:
         ac:e9:94:3d:47:62:8b:8f:37:91:1b:2e:56:e3:92:c8:fe:59:
         4f:6c:9f:f7:8a:6b:61:65:cd:41:d9:e1:d8:e1:16:cb:52:b0:
         a4:0d:76:f3:b0:8c:9a:31:43:35:89:42:72:2e:e9:f5:6d:0f:
         17:28:b9:e9:b6:be:ed:28:05:cc:a7:96:39:2b:c9:46:80:d1:
         39:5c:b0:91:32:07:ae:6d:69:c0:bd:79:3e:03:f8:86:34:76:
         38:0a:4b:3f:1d:56:2e:a7:19:7c:e1:68:0c:71:52:83:92:95:
         47:24:23:34:0f:ca:25:ec:fa:72:62:6f:a0:8e:1c:91:b6:7a:
         44:e6:ee:55:2c:fd:91:a1:36:30:99:56:7e:47:4a:27:07:c9:
         5d:ba:28:42:63:6f:39:1d:cb:53:a9:74:08:36:2a:c3:1d:f6:
         4b:ac:e5:10
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUYyEDh3ovhDkXRO2t3sgweR4VebYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjEyMDcwMDAxWhcNMjMwMjExMDcwNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEJDQ0REQUFE
RjZERkFCMkFBQ0U4RTFBRkJCOEEyOTkwQ0JEQjlGREY0QTRFRDE0NEQwMkRCQ0I3
QkEwNDhBRUY3RkVGMjNGNUFBMDIxNUMwMUZEOEMzMjUzREE4MTk0MjIwNDNCQkQ2
OEJFQkQ5QkM0RDExMjY1QjNGQkY5NDAyMTFGMDMwRDZBRTY1RjYzRTFGQzU3MEFG
NEMwQjNERUMxODYyMTc4QUYzNDczODAwMTYyMkY2NUVDOTcwRDE2MUNBMjU2N0Mz
RTA2REU3Mzc0NzcxRkI0QTEyMEQ3MTM2RDI4REVDODA2NTBDMTM5MzZGMkNBOEIx
QUVGMDJCQTFEMzFBODk3NzlGMjU3MkU4MzREQUNFNjY4NThGQzQyRDZEQUI0QURC
MTFGMTE4OURFNTdBNjgwRUY4MDNGNTVERDM3QjI2MDREMDczRjhFMEQwOEY0QjQ1
NkZBODIxMkMyNTBEMDM2OUMyNEY3NzUyMzQ4RDRFNzExOEUzNDJEMjIwRDkzQkI0
N0FGNUFDOERGMDNFQTVBQ0EzNTc1REU1Q0YwMTM5RTk5MzhBODUyOUY5Mzk4RTM3
NzVDMDEzNjI0ODJCRTRDMzc1MjBDRUJFMEJBMzVDRkZDNTE2QUE4MDQxMkQzNDZB
OUFBQUJDNzAyREU1NUE5MzMwNkQ0RTM3MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALzN2q3236sqrOjhr7uKKZDL25/fSk7RRNAtvLe6
BIrvf+8j9aoCFcAf2MMlPagZQiBDu9aL69m8TREmWz+/lAIR8DDWrmX2Ph/FcK9M
Cz3sGGIXivNHOAAWIvZeyXDRYcolZ8Pgbec3R3H7ShINcTbSjeyAZQwTk28sqLGu
8Cuh0xqJd58lcug02s5mhY/ELW2rStsR8Rid5XpoDvgD9V3TeyYE0HP44NCPS0Vv
qCEsJQ0DacJPd1I0jU5xGONC0iDZO7R69ayN8D6lrKNXXeXPATnpk4qFKfk5jjd1
wBNiSCvkw3Ugzr4Lo1z/xRaqgEEtNGqaqrxwLeVakzBtTjcCAwEAAaOCApowggKW
MB0GA1UdDgQWBBTqcAmd9p1YzFWJn5whPiHI2coWsTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzIzYTM3MzAzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgISBwUwDQYJKoZIhvcN
AQELBQADggEBAKNjLBWs1Pnb8dY6NTwM50Fd51fhCtTSbdzHACM8p7vslCHaVQra
0h9dONDZySQzICQxO1ockQiRP5LbRj/iFsBRXi54sufewzC7LolHloJBozRn+CBE
q0hulKzplD1HYouPN5EbLlbjksj+WU9sn/eKa2FlzUHZ4djhFstSsKQNdvOwjJox
QzWJQnIu6fVtDxcouem2vu0oBcynljkryUaA0TlcsJEyB65tacC9eT4D+IY0djgK
Sz8dVi6nGXzhaAxxUoOSlUckIzQPyiXs+nJib6COHJG2ekTm7lUs/ZGhNjCZVn5H
SicHyV26KEJjbzkdy1OpdAg2KsMd9kus5RA=
-----END CERTIFICATE-----