Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a323331353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a323331353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          fjHQ4bdjyVSCgIuYe9EcPsADvK9clVR1DmMyrUCu274=
Subject key identifier:   1F:68:F8:65:79:2D:21:02:4B:D9:60:6B:E4:A9:CB:46:F1:49:B8:65
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       49EE8046A8A901D421E32107C1D8278E4F641BD6
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a323331353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 23:15:01 +0000
ROA not before:           Sun 13 Feb 2022 23:10:01 +0000
ROA not after:            Sun 12 Feb 2023 23:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:2315::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ee:80:46:a8:a9:01:d4:21:e3:21:07:c1:d8:27:8e:4f:64:1b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 23:10:01 2022 GMT
            Not After : Feb 12 23:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:00:d8:2d:94:63:af:8d:28:5c:5b:5d:7a:
                    71:d4:06:c9:47:5f:6e:7a:8a:22:a7:cc:31:a0:2f:
                    74:19:bc:4f:be:ea:41:4f:5c:ae:7c:ab:7d:a7:f4:
                    b1:4e:28:d4:4b:92:7c:54:15:2d:c4:e8:cc:23:9b:
                    fa:23:cd:28:97:84:fe:8f:01:c7:97:26:54:f6:fa:
                    3d:1e:1c:c4:ae:f0:ec:d2:3e:6a:63:40:ae:8b:f0:
                    60:69:06:9e:e8:96:99:ec:13:f8:9c:8c:14:95:ac:
                    97:46:e4:79:ce:db:5e:9e:46:27:5b:97:f4:29:98:
                    65:96:b4:c5:d0:43:4e:53:aa:a0:d1:82:56:f4:29:
                    18:f4:c3:48:a7:b1:c4:bd:db:cf:16:c8:01:61:81:
                    e7:04:11:34:9b:6c:02:30:b6:69:6d:44:9b:bc:f3:
                    9e:8c:43:7e:51:3e:a5:99:54:61:3c:64:26:f6:62:
                    3d:f6:8f:ca:5d:72:65:23:86:87:b8:8e:a0:2e:ca:
                    df:ec:73:e2:08:1d:54:39:92:af:8a:51:be:d3:47:
                    f2:d1:3c:58:3c:6d:70:3e:79:44:da:74:e2:b1:a9:
                    7a:86:60:4f:92:67:07:3a:94:40:d1:9e:04:18:3a:
                    dd:35:fa:c7:7d:b8:39:e6:7c:75:29:54:58:5e:45:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:68:F8:65:79:2D:21:02:4B:D9:60:6B:E4:A9:CB:46:F1:49:B8:65
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a323331353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:2315::/80

    Signature Algorithm: sha256WithRSAEncryption
         d8:96:f3:9c:91:cb:f5:4c:01:40:82:7e:f6:47:b7:ec:65:2e:
         a6:91:d2:9e:12:dc:87:f5:dd:1f:fb:44:79:bd:84:33:06:01:
         31:d5:ff:00:fd:a7:24:10:65:ed:d6:8e:70:54:be:b6:3a:be:
         90:83:ec:c9:a4:7e:51:95:02:99:ee:31:15:36:ff:22:e9:34:
         06:b6:b2:35:cd:88:23:7c:51:08:b0:9a:da:66:fd:5b:b6:50:
         94:94:1f:45:43:dd:4a:c6:25:e6:e0:cf:0c:5c:cc:62:ea:6a:
         12:2f:a2:41:c0:8b:a7:51:1b:81:98:fc:c5:52:a1:34:b5:b8:
         aa:4b:a5:a0:aa:6c:32:a3:1b:82:b1:5f:a7:79:f3:76:fe:c8:
         33:59:f6:93:7e:3b:fd:32:ce:0b:87:d6:ef:ac:a5:9c:75:0c:
         13:13:9e:f3:11:eb:28:7a:52:ee:05:e6:b2:ef:15:a9:bf:75:
         f7:d6:68:88:73:50:38:14:70:05:97:9f:c8:eb:2c:ee:b4:7a:
         f5:5e:71:12:76:a9:96:0c:ce:2d:4f:3f:18:5f:d8:33:cb:04:
         97:80:3f:7d:0f:ac:e4:90:7c:ee:15:be:46:6b:c4:3e:1d:b8:
         d2:c0:02:b5:b2:b0:2a:36:61:d4:11:7d:a1:5f:64:7e:4f:ec:
         4f:5b:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----