Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313732353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a313732353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          kV7BsqKJ+BpqPd229Gsdb7vZMGE5rPN3SmjvaeZ7LyQ=
Subject key identifier:   F5:4D:A6:3E:CB:0C:74:65:53:83:6E:1C:20:04:F9:9E:DD:21:F4:64
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       57B1B7B3D11791791D885436AB65DE68D5669B87
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313732353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 17:25:01 +0000
ROA not before:           Sun 13 Feb 2022 17:20:01 +0000
ROA not after:            Sun 12 Feb 2023 17:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:1725::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b1:b7:b3:d1:17:91:79:1d:88:54:36:ab:65:de:68:d5:66:9b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 17:20:01 2022 GMT
            Not After : Feb 12 17:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:0b:fa:dd:67:91:cd:7b:49:dc:74:ab:f7:
                    a9:c8:04:c2:df:a7:36:a3:e7:94:d0:31:2c:6e:0a:
                    85:da:14:6b:7b:81:d9:f8:88:22:ec:61:ca:d8:21:
                    b5:bc:ea:8d:f9:ae:b3:29:32:d5:1f:c7:f5:37:5c:
                    4c:08:7f:c2:ce:35:8f:02:33:4e:2a:57:61:0e:6c:
                    3a:40:c3:72:c3:27:4a:27:e3:5a:cf:1d:8c:bd:36:
                    c2:30:98:47:fe:2d:a3:07:a0:db:e5:67:78:c6:0e:
                    dd:f0:84:26:44:7a:8a:90:f8:08:42:9c:84:81:51:
                    60:7b:8a:15:37:a7:2c:36:0a:a0:e8:76:4c:29:7a:
                    eb:80:92:28:4e:f4:fd:b4:7b:18:bb:bc:fb:57:ca:
                    69:f4:c4:f9:27:9b:a0:33:b1:ea:71:5d:6c:d4:09:
                    2f:f0:cd:53:de:b6:a1:5f:d5:1d:86:a8:64:82:59:
                    21:6d:a2:bc:ef:87:c7:92:09:c6:31:3d:52:bd:86:
                    15:ed:ac:63:34:c0:2c:3a:fd:2d:24:b9:89:6f:77:
                    1a:55:56:62:83:82:5a:de:df:41:60:42:d9:79:da:
                    c2:5f:db:5a:ad:f0:9c:40:d8:8e:8f:6f:30:81:02:
                    6c:3b:cf:b8:e8:f4:47:14:32:e8:99:50:29:9c:56:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4D:A6:3E:CB:0C:74:65:53:83:6E:1C:20:04:F9:9E:DD:21:F4:64
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313732353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:1725::/80

    Signature Algorithm: sha256WithRSAEncryption
         1d:d9:48:36:6d:a4:bb:1a:b7:39:b9:5f:91:5b:4e:2a:db:46:
         f6:a9:52:a0:4d:34:39:31:b0:cd:17:eb:76:fe:c1:f5:fa:81:
         b6:ef:58:d5:73:57:07:17:b3:26:be:81:55:3b:49:b0:a9:a1:
         a9:d3:91:b0:01:24:3c:9b:72:66:d7:c7:ae:37:5d:da:49:fd:
         d9:e8:b9:44:bf:68:57:2b:f8:f8:75:83:fe:44:86:6d:7a:ce:
         20:c5:92:7f:a7:b4:47:ae:a7:3c:cb:8d:20:f1:4b:1d:48:fe:
         08:cb:b3:2f:83:50:c5:f2:51:71:63:87:2d:92:e6:20:02:ee:
         39:49:b1:83:87:82:2b:bb:be:86:e5:bc:94:9c:12:79:aa:5b:
         8d:f6:8d:2a:42:f8:a6:d1:a6:e7:7d:d4:0b:8f:57:c5:64:d2:
         6e:5a:51:ad:e6:a3:d2:cc:ca:84:d5:16:dc:c2:65:80:b9:a6:
         5a:7f:50:55:32:f2:5d:7f:90:a2:ff:a7:c2:c6:8a:04:3e:21:
         65:1c:9b:12:d1:3c:1d:67:c9:ed:08:50:3a:3e:82:86:d4:04:
         65:da:61:b8:82:a0:c1:d1:43:9d:03:9d:3f:e4:6a:e7:f7:05:
         d3:48:e7:d2:f1:4b:82:da:92:7c:07:b9:e6:f0:ee:36:94:83:
         79:2b:94:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----