Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313930303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a313930303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Bfh762ITGUuz0ax/minutLwQNVFSmyfYzMOB80ePIIE=
Subject key identifier:   9A:A0:68:12:94:B3:DF:D3:89:A6:49:22:4E:31:36:AA:4D:F7:B6:FC
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       79E43364DB3E873294D9AFAD2906F8C18B9549FE
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313930303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 19:00:02 +0000
ROA not before:           Mon 14 Feb 2022 18:55:02 +0000
ROA not after:            Mon 13 Feb 2023 19:00:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:1900::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e4:33:64:db:3e:87:32:94:d9:af:ad:29:06:f8:c1:8b:95:49:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 18:55:02 2022 GMT
            Not After : Feb 13 19:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:ec:b7:fc:be:3f:3b:db:07:9e:86:ed:57:
                    3c:25:35:2b:e9:17:ec:53:73:2a:48:00:8e:db:60:
                    44:5b:ce:27:e7:49:c7:80:a1:1c:37:6d:32:e7:2a:
                    86:e0:91:4d:eb:61:b1:de:27:6d:53:ab:03:bc:02:
                    a8:98:ca:f3:1d:bd:7b:85:25:ca:31:d0:cf:37:9e:
                    d1:9e:57:20:6e:d8:b6:21:fa:2e:f6:ea:80:fb:1f:
                    b8:14:a8:51:00:75:14:ea:d0:57:e4:a3:6c:63:f1:
                    47:ff:a7:bb:6b:eb:76:8c:44:11:a2:6a:48:64:db:
                    98:1e:9a:c5:84:32:c2:f3:5d:c3:72:64:7c:74:49:
                    e7:7d:24:a6:25:75:cd:a8:f8:cb:32:eb:72:10:a7:
                    fc:06:e3:c2:1d:de:aa:0d:0e:1d:4a:4c:ad:f6:2c:
                    8d:42:4d:70:c7:07:2c:e7:11:0c:2f:af:6d:b8:7d:
                    1d:40:a5:cb:0d:e2:3e:6b:db:87:04:c5:c5:88:e1:
                    e3:6c:30:dc:b2:a6:eb:5b:95:e6:9c:11:b4:60:f1:
                    c2:f0:7c:8e:b3:31:b8:83:9e:14:32:8b:b8:4d:8a:
                    3b:1e:b7:5c:21:fa:67:0b:81:15:cd:1c:03:5e:05:
                    bd:6c:ec:fc:36:da:b2:a7:d2:6c:b4:a2:0d:f2:25:
                    14:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A0:68:12:94:B3:DF:D3:89:A6:49:22:4E:31:36:AA:4D:F7:B6:FC
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313930303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:1900::/80

    Signature Algorithm: sha256WithRSAEncryption
         a5:02:51:41:97:49:2c:04:29:19:65:d5:b0:16:89:23:b3:18:
         8f:77:90:fe:8b:ba:f2:a0:e2:6b:4b:e7:be:da:ac:8d:ef:98:
         b3:27:ec:8c:43:b6:0a:d9:a9:5e:9e:82:b1:84:fa:83:8f:4c:
         7a:f4:58:8e:3c:db:40:b4:be:6c:78:39:b3:73:31:66:9e:2f:
         a2:ea:f5:11:13:3f:80:81:2a:a6:df:45:4d:3f:0a:28:72:18:
         b8:71:99:ed:4b:e4:e3:55:37:c6:3d:da:81:06:b5:f6:18:b6:
         e0:09:22:36:65:69:e7:5c:5e:9d:1d:09:fc:f4:e2:35:af:7d:
         62:1d:47:a3:f2:1d:b8:6f:80:ad:7a:ff:27:3a:5c:f9:a6:0b:
         c1:e8:b9:df:a3:3c:c7:b7:97:8e:ff:f9:74:68:05:e5:f3:a8:
         2b:96:fc:3a:1e:3a:af:d8:36:ab:dd:88:44:ab:2c:f6:1f:88:
         97:a6:dd:66:23:7b:cf:d1:7a:4f:cd:5e:ef:6f:69:58:36:53:
         bb:72:23:50:82:8f:96:8f:25:37:82:55:cf:bc:42:ab:db:96:
         10:77:bc:29:ef:ec:4f:3f:1a:20:e3:bf:07:41:cd:7a:97:69:
         d7:00:9c:ef:30:a3:18:1b:a5:fb:66:8c:e0:2e:a7:c6:b4:12:
         9b:f4:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----