Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3731303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a3731303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          F6z/Mq1fVHuuCw0nyEL18GBLSvml+7jR+YDaqFgztok=
Subject key identifier:   82:25:9F:27:A2:A8:2D:31:60:A3:B5:36:1E:FB:68:7D:D2:E4:5D:8E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       09D15BD072E6E99977EFBCCE15F7B8D5C0E0EB25
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3731303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 07:10:01 +0000
ROA not before:           Sat 12 Feb 2022 07:05:01 +0000
ROA not after:            Sat 11 Feb 2023 07:10:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:710::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d1:5b:d0:72:e6:e9:99:77:ef:bc:ce:15:f7:b8:d5:c0:e0:eb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 07:05:01 2022 GMT
            Not After : Feb 11 07:10:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:48:d9:46:b7:4e:14:35:9a:31:dd:9f:7a:e4:
                    2d:eb:57:ec:02:b2:3d:85:fc:58:58:b4:24:d6:4c:
                    ca:a1:ee:57:1c:c4:87:ec:0e:d4:e0:8b:df:b6:9f:
                    24:96:b1:c3:06:41:b5:3c:b3:c3:f2:87:1d:7f:f9:
                    d7:19:1b:ce:ce:74:92:84:ef:3c:b3:41:8a:1b:e2:
                    33:5b:ec:7e:97:07:a6:2a:9b:51:f0:74:8d:07:6c:
                    13:56:3b:66:0b:5c:e5:48:50:79:0d:ca:a3:cb:8a:
                    48:d5:9c:b3:9f:54:1b:2f:00:8a:86:0a:8e:7f:8c:
                    6f:ad:11:3b:26:f8:d5:6d:83:8d:c8:82:59:36:39:
                    dd:df:5d:71:36:d0:d7:db:6b:6e:e5:f6:a9:22:a7:
                    c3:2f:c8:5c:67:bb:e1:25:1d:35:53:52:e1:19:45:
                    e5:81:65:b5:c9:0e:94:62:d9:61:0d:bd:f1:04:f9:
                    45:3c:39:70:e2:f0:08:a4:f3:41:57:c6:a7:ac:24:
                    3c:dd:27:62:81:57:43:ea:91:c6:55:eb:97:7b:95:
                    a1:a5:70:5d:d3:80:d9:df:41:d9:67:c4:26:a3:83:
                    2f:d7:b6:f4:6c:f4:e7:b5:fc:d4:4a:74:ca:71:71:
                    6f:ad:3c:46:5f:a2:c7:d9:de:80:5e:1e:1c:21:f5:
                    bb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:25:9F:27:A2:A8:2D:31:60:A3:B5:36:1E:FB:68:7D:D2:E4:5D:8E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3731303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:710::/80

    Signature Algorithm: sha256WithRSAEncryption
         ad:48:2b:1b:c6:56:7a:9a:9d:3d:99:6b:6a:75:07:dd:28:ae:
         10:63:83:d1:15:e0:8f:14:64:3a:10:6c:1c:03:7d:ed:12:5a:
         04:5e:41:43:72:f9:5f:39:d2:a1:cc:26:6c:e5:1f:b3:40:c1:
         61:8e:f2:a0:88:00:35:a2:38:47:4e:76:ee:78:40:a0:a1:ab:
         74:54:c2:50:d3:90:f3:bd:c0:5b:c6:d2:42:7a:02:08:42:73:
         64:5d:ab:58:f7:0d:65:5e:da:05:e3:4f:7e:ab:ee:32:c2:5a:
         6b:73:5e:0d:0a:d1:51:bd:07:a6:4e:dd:9a:b2:02:4c:ae:e2:
         c8:e0:15:f9:a1:a4:24:41:af:dd:f3:a2:c7:9f:4e:ad:b5:c9:
         8a:92:d2:bb:36:85:c0:96:f5:98:81:4b:79:39:84:7a:39:90:
         2f:01:a9:d2:68:3d:f4:3b:9a:83:12:5a:a3:71:65:b2:ca:b7:
         cb:8e:9c:45:d8:55:4d:11:51:4e:ec:85:ea:0d:a8:f5:00:01:
         24:6e:b5:46:73:25:34:42:a0:7f:fc:83:5d:0b:a4:f3:04:26:
         a5:2e:50:11:c6:a0:ee:79:54:75:fb:6c:8c:c9:78:ef:57:ec:
         5f:7c:72:59:e4:92:ff:f3:91:7e:0b:65:d3:50:0f:87:c2:70:
         e9:49:22:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----