Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3932353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a3932353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          L4vTUp4Mx4ZPwCshD+3pY53iylk6lfPuiqMpQIPEqRg=
Subject key identifier:   1E:1F:21:50:E0:C3:A7:6F:D1:67:6D:31:D0:CD:D4:A5:49:ED:F4:57
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       57FFE7740FD3EA51F53E049D38FA1022D2085495
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3932353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 09:25:01 +0000
ROA not before:           Sun 13 Feb 2022 09:20:01 +0000
ROA not after:            Sun 12 Feb 2023 09:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:925::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ff:e7:74:0f:d3:ea:51:f5:3e:04:9d:38:fa:10:22:d2:08:54:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 09:20:01 2022 GMT
            Not After : Feb 12 09:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:ec:27:bb:fb:fd:0b:70:df:ec:d5:33:26:
                    b1:47:9b:98:f6:1b:3e:f5:00:83:34:02:6b:f0:b0:
                    77:37:09:91:77:d2:5f:7b:ec:4c:33:fa:92:4b:3f:
                    25:0c:4d:ee:29:86:f9:b1:a0:b9:25:f8:ec:48:b4:
                    09:bf:4c:08:4c:f5:2c:00:cf:8e:b5:07:9c:73:de:
                    65:8b:8c:b6:4f:b1:f2:72:14:a2:04:e9:8c:ed:4f:
                    fe:1d:fa:29:03:dc:45:f9:32:9f:9e:65:bb:27:f2:
                    d6:93:84:68:7b:2b:b5:fe:42:e1:44:bd:7a:37:13:
                    78:f1:b1:81:3d:bf:5c:c0:1c:66:0d:b1:73:cd:04:
                    0f:1b:91:e8:04:d2:81:36:49:03:cd:68:d7:c6:ba:
                    7a:35:b4:12:8d:3c:bb:29:95:34:6d:66:1d:e4:a9:
                    d5:fc:fb:69:55:e2:6e:9b:a6:97:27:6a:1a:b2:fc:
                    32:82:a5:07:b2:03:e8:44:d7:61:5a:57:56:f7:cf:
                    39:9f:94:ed:e8:05:12:56:34:9c:d7:8a:cf:a6:b9:
                    19:b1:03:8d:b3:88:1c:e2:7d:61:ee:fe:9a:b3:54:
                    59:93:d0:fd:12:b5:9d:a0:c0:4e:d7:82:02:a5:11:
                    2c:e8:42:07:be:85:1b:45:96:c0:ce:9a:47:42:1a:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1F:21:50:E0:C3:A7:6F:D1:67:6D:31:D0:CD:D4:A5:49:ED:F4:57
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3932353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:925::/80

    Signature Algorithm: sha256WithRSAEncryption
         5a:eb:ec:58:18:8a:b5:c4:ec:45:13:cb:c4:1b:8f:82:7b:9c:
         d2:d0:2e:59:36:53:8b:ee:f2:af:a6:d1:26:2b:86:81:82:e3:
         09:7a:01:79:22:18:aa:e0:6f:2e:71:86:c4:00:05:5f:62:62:
         9a:49:54:ac:e7:53:ee:46:02:43:db:1b:a3:cf:a6:e8:ab:34:
         f9:66:1d:33:61:4f:e8:da:98:ea:cf:a0:7f:b3:4a:ec:f3:28:
         36:d3:c7:c0:c0:40:e9:26:4c:49:b6:70:d0:7f:9a:33:11:2a:
         d3:b5:33:97:05:a7:5c:28:e1:8c:1a:a9:e7:1c:d8:37:81:91:
         c4:c5:c9:ea:a3:f3:0f:b7:5d:f8:b5:99:7d:d0:9a:5a:b3:7d:
         cd:4a:1b:a9:44:fa:3e:74:5a:3e:cc:ce:da:e8:f0:dd:4c:05:
         75:bf:7f:06:cb:34:df:6a:a3:13:86:01:fc:4e:dd:8a:60:3c:
         e4:f8:4d:dd:33:87:b3:71:e0:bb:bd:0e:04:26:48:6b:db:a2:
         b8:98:a0:37:16:4e:f1:c7:99:74:49:53:54:3d:38:a6:28:8f:
         c7:1d:19:2a:16:ae:ca:7f:9a:b6:4a:5c:94:78:90:bf:fe:8b:
         38:a2:92:cd:ce:06:87:21:e5:51:06:c7:a3:d3:f2:98:54:3c:
         b5:fa:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----