Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3533303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a3533303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          MfurF2gZKX2xQnwKHuiXon9tlPLaaMRh7J7fLVnGW+k=
Subject key identifier:   5E:E9:2A:11:15:DA:BF:73:34:5C:E2:50:F7:FF:5D:EC:79:03:21:4E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7E4989B4C4049506FE588C9878084CBE8AA3F72E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3533303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 05:30:01 +0000
ROA not before:           Sun 13 Feb 2022 05:25:01 +0000
ROA not after:            Sun 12 Feb 2023 05:30:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:530::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:49:89:b4:c4:04:95:06:fe:58:8c:98:78:08:4c:be:8a:a3:f7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 05:25:01 2022 GMT
            Not After : Feb 12 05:30:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:45:4e:3a:bd:d3:1a:b0:0e:00:33:1f:8c:
                    41:8b:6a:92:09:da:86:a2:7a:71:ed:89:30:c2:4d:
                    9b:df:2a:e2:91:a5:eb:ef:71:9c:7a:8b:fe:d9:4a:
                    68:62:01:25:24:a8:f6:d4:14:58:1e:68:e3:f5:28:
                    ae:b3:7c:ba:1a:42:ef:35:33:22:ad:cb:88:4f:17:
                    b3:11:49:c1:cd:36:23:b1:f0:45:74:d3:76:de:64:
                    a5:29:2c:e8:c6:71:85:7c:23:6e:c0:b8:24:a8:32:
                    36:2c:9f:c3:9a:fb:ae:f1:98:d6:72:79:0f:b7:20:
                    84:77:39:7e:e7:1b:a1:2c:4b:fb:a5:e3:18:13:ba:
                    45:17:37:d1:c3:83:95:92:dd:d0:a0:72:d0:b7:39:
                    e9:6f:e0:9c:03:97:8f:80:99:b1:16:44:3d:d9:2d:
                    bb:92:f3:77:c6:04:a6:ea:49:41:d2:fb:09:45:a3:
                    ad:ce:6b:95:ea:da:97:23:e7:2b:cd:87:7d:ae:6f:
                    a9:1d:4b:d5:87:51:9b:11:63:7a:67:26:72:99:1f:
                    a9:41:f9:2b:21:11:9a:04:d7:76:a4:07:e0:8d:80:
                    75:8e:0d:b5:65:e9:21:4d:9d:3b:65:f9:8d:62:81:
                    34:47:19:79:43:ad:eb:2f:3e:23:28:9b:f9:6f:32:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E9:2A:11:15:DA:BF:73:34:5C:E2:50:F7:FF:5D:EC:79:03:21:4E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3533303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:530::/80

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:df:d6:20:bf:20:5c:88:4b:8c:2c:0b:14:96:f1:d2:55:
         34:98:ab:15:a1:bf:ce:2b:56:3c:78:5a:a4:ff:08:57:b0:8c:
         16:1d:d4:90:23:ad:f4:13:40:06:bb:da:e9:89:c0:70:32:38:
         31:a3:f2:92:52:a8:d8:a0:31:ef:8d:44:1c:64:83:76:43:49:
         ba:d2:fa:f1:9e:95:8d:12:3b:b5:e7:b9:f4:df:c1:04:ad:5c:
         ed:73:2f:cf:db:46:07:7d:bd:ac:4a:d5:65:3a:38:ac:45:ba:
         e7:3b:ff:c7:57:1c:1a:94:9c:8b:13:58:ee:ef:6b:7f:1d:d5:
         18:46:a9:79:dc:17:b0:da:1c:e1:8c:42:34:32:35:6b:77:49:
         fc:84:ae:fd:b1:72:a4:6d:32:f8:e5:22:6c:f8:2f:f0:7e:e3:
         5b:e3:db:14:16:38:dc:86:8a:18:20:b5:9f:0d:64:b5:e5:63:
         43:70:a5:d2:ed:4e:f4:7e:36:df:6b:c7:68:b5:21:e1:ff:1e:
         04:7b:80:18:3d:e9:82:db:0d:08:90:9f:16:45:48:a6:97:a1:
         c8:ab:63:98:b9:b9:f8:95:65:60:85:9e:b7:9b:90:e3:9b:12:
         54:88:5e:e6:a3:06:75:36:1d:cf:86:91:e4:91:1e:ee:09:43:
         f8:3c:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----