Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3532353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a3532353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          s+S7EsthzCzrvJM8lnygpchCw0QR3O3QYyuf0DrnP0k=
Subject key identifier:   44:E6:0C:A1:BA:AD:1B:27:2C:85:24:77:C2:7B:B9:D3:42:CF:72:52
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       78C58018D562AB88C7700F815778A21E90F76E62
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3532353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 05:25:01 +0000
ROA not before:           Sun 13 Feb 2022 05:20:01 +0000
ROA not after:            Sun 12 Feb 2023 05:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:525::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c5:80:18:d5:62:ab:88:c7:70:0f:81:57:78:a2:1e:90:f7:6e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 05:20:01 2022 GMT
            Not After : Feb 12 05:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:96:6b:c7:0f:ed:31:ff:4d:af:1b:31:14:2e:
                    2f:17:93:60:00:be:81:ac:fa:f3:15:28:2a:bc:77:
                    c2:92:7c:b7:3d:8a:3c:7b:28:8a:f5:aa:08:2a:c8:
                    e4:72:8c:3b:79:d6:9e:fa:3c:6e:11:a2:c2:6a:b7:
                    6e:67:68:04:92:19:1e:e8:26:50:58:0f:86:ea:f0:
                    cb:e0:b5:5c:2e:27:dd:e6:29:69:77:ad:93:dc:de:
                    97:85:ce:b0:a9:44:0d:ae:80:7d:a0:95:ca:d7:ba:
                    9e:cb:f8:9b:17:f7:ac:87:14:91:02:20:25:91:a7:
                    79:56:93:63:f5:ef:ef:89:b9:6a:41:1d:30:41:70:
                    6c:2e:10:7f:a7:07:f3:01:8e:40:b7:d1:32:74:02:
                    b3:1f:4b:08:b1:82:f1:49:c4:26:c6:ce:00:f5:11:
                    ae:ec:6d:fd:3d:86:a8:68:d3:d0:9a:9f:8f:f0:81:
                    fb:2d:af:64:d8:e8:38:0c:96:d9:eb:ee:24:ad:ef:
                    fd:62:de:fe:7d:2e:c5:36:40:f8:59:d8:c6:08:d2:
                    3e:68:6c:a9:1a:e6:f5:c3:14:cb:99:79:86:c4:93:
                    d4:b5:0a:57:2f:d2:d4:7b:93:1e:f2:ff:c6:00:c7:
                    5b:bd:a0:7d:8a:f1:27:c8:0d:79:2b:57:9b:74:78:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E6:0C:A1:BA:AD:1B:27:2C:85:24:77:C2:7B:B9:D3:42:CF:72:52
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3532353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:525::/80

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:40:72:6f:ed:f1:d7:41:4a:46:01:8a:7a:2a:9e:17:b6:
         9e:2e:5f:a2:4d:ed:54:ec:c4:b9:24:18:94:1e:6d:0a:a3:06:
         78:56:75:9c:fc:2c:82:71:95:ff:de:c8:21:45:cb:a0:b2:fa:
         2b:f2:30:8a:73:14:ee:98:e6:eb:b6:2c:ca:3a:1a:05:0b:04:
         2d:5a:ff:6b:1d:a3:d1:5b:06:4f:0d:88:7b:ab:67:17:51:ed:
         ab:71:eb:22:8d:1e:63:38:95:8f:3a:c1:72:08:28:c3:d7:bf:
         13:6d:16:51:4c:0c:e4:8b:62:9a:cb:d3:0c:49:78:a4:8f:c9:
         19:9a:fb:87:f0:fa:6f:ca:80:c5:3d:a2:af:86:c7:5d:a3:79:
         0f:7c:a8:bc:ac:9a:d7:6a:ab:8e:e0:09:00:74:94:88:f5:a2:
         7a:f5:97:a4:80:eb:03:73:c7:bd:26:46:b6:9c:a4:1a:4a:7b:
         e2:ec:23:07:54:59:c6:3b:3a:de:bc:00:95:4b:75:ec:8e:18:
         77:f3:71:d2:7b:f4:bc:64:a8:70:21:8b:e4:13:5b:f1:07:db:
         0d:a5:67:b5:51:81:a8:45:84:1c:9c:02:4b:7d:b3:f8:89:8d:
         98:b3:ff:13:f0:df:16:5d:3f:7a:86:d6:14:2f:cf:92:f5:02:
         76:9a:5c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----