Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3133353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a3133353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          kgvLT8MKPeK4rPfC2cDXamMPpCAP5qJ5BlRgN1V1YHE=
Subject key identifier:   5E:47:B0:27:5A:1C:18:35:E3:64:76:5C:42:2C:6D:12:00:98:8F:04
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0AD9E867D1CE220DE552E5D841919BBD8FCBF2C1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3133353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 01:35:02 +0000
ROA not before:           Sun 13 Feb 2022 01:30:02 +0000
ROA not after:            Sun 12 Feb 2023 01:35:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:135::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d9:e8:67:d1:ce:22:0d:e5:52:e5:d8:41:91:9b:bd:8f:cb:f2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 01:30:02 2022 GMT
            Not After : Feb 12 01:35:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:d0:45:6c:3d:d0:84:0d:cb:94:45:97:fc:
                    49:96:ef:3b:a3:6a:9e:11:35:a7:6a:73:cb:b8:94:
                    3c:3b:26:8d:10:2d:c7:2b:a0:47:8d:72:5c:7c:52:
                    b0:8f:9d:25:19:33:31:4a:bc:d4:53:d0:4e:e9:92:
                    c6:4e:83:3b:3c:7b:42:87:f4:14:10:03:a7:7c:09:
                    c7:cd:f5:da:04:f2:56:4f:6d:72:e2:b2:16:ef:f8:
                    19:54:5d:4c:8b:5c:e3:9d:a8:e1:ed:8b:46:a5:b6:
                    4c:fd:47:52:42:e2:9d:84:76:de:b2:d8:2f:3c:6d:
                    ef:b0:0e:4c:42:b2:eb:cb:de:f0:24:7a:ad:ab:84:
                    74:d7:f2:a1:5c:5d:91:db:f6:d9:43:19:4a:cb:77:
                    41:52:6a:a2:8d:3d:4d:bc:52:9c:58:35:02:13:56:
                    f4:ed:6d:ce:e4:d7:b1:bf:6c:56:97:0e:c3:ee:5e:
                    55:5c:ce:aa:01:15:df:02:a4:53:14:d2:b8:10:ec:
                    cc:b8:90:c0:a4:51:a3:e1:3f:fa:32:be:86:3c:e3:
                    6b:ce:ef:a9:29:1e:6f:20:47:0b:86:26:d4:07:48:
                    08:9a:31:99:74:29:f7:f9:3c:42:36:f7:5f:59:70:
                    eb:fe:8b:8e:1e:da:06:b8:ec:fc:3a:55:61:df:e2:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:47:B0:27:5A:1C:18:35:E3:64:76:5C:42:2C:6D:12:00:98:8F:04
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3133353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:135::/80

    Signature Algorithm: sha256WithRSAEncryption
         01:52:1b:61:4f:e3:e9:fd:a6:48:74:36:1c:ed:8c:9c:bc:61:
         e5:f8:52:76:05:fc:e7:fa:12:13:79:0d:47:7d:84:0d:eb:27:
         85:79:2f:34:28:f7:ad:78:f8:e1:4e:54:fa:14:b7:da:5c:3f:
         f9:99:ea:71:03:c5:d3:ce:c5:03:8f:81:8b:59:09:49:cd:fb:
         03:c4:db:b8:1d:1e:d5:f6:8a:dc:b3:00:c2:8d:12:21:7d:95:
         85:72:55:ae:90:6b:6e:42:12:8c:39:6b:35:a7:21:70:3d:2a:
         34:72:69:b9:7d:77:b7:29:a6:da:29:90:17:84:04:ca:74:2b:
         fd:32:60:cd:59:c1:f2:f1:98:cb:2b:d7:d6:9e:df:fe:67:da:
         19:6a:bd:90:5e:3c:8a:51:d1:08:5a:bd:4c:47:d6:5e:96:ea:
         3e:7e:a9:36:bb:c7:01:57:d5:9f:f3:c4:4c:c8:ab:3e:7f:75:
         75:15:2e:e6:4b:c0:3f:d1:61:7c:c1:9a:7e:93:0b:34:93:cc:
         87:51:82:92:9b:55:37:93:fa:60:14:e1:11:23:8b:3a:64:1e:
         23:d7:57:6c:97:07:8d:3a:7a:5c:11:fc:66:91:96:07:5d:f1:
         bc:a6:4d:80:00:ea:e9:d5:5a:c2:5f:80:5c:dc:db:ef:7b:c3:
         70:87:c6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----