Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323130353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a323130353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          OiGv+N8jG6SlK/sAI+jX8k3JhB4jCtr5Z7L5zS4w3bk=
Subject key identifier:   24:1A:E8:4F:30:85:F6:07:4C:D7:F1:B2:EA:21:9D:0B:E8:91:61:A2
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       22A616ACEC5BAF9F91D53730DDE6A818C9D4A99C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323130353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 21:05:01 +0000
ROA not before:           Mon 14 Feb 2022 21:00:01 +0000
ROA not after:            Mon 13 Feb 2023 21:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:2105::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a6:16:ac:ec:5b:af:9f:91:d5:37:30:dd:e6:a8:18:c9:d4:a9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 21:00:01 2022 GMT
            Not After : Feb 13 21:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:ba:ba:53:e4:66:17:c3:71:58:01:20:31:
                    98:c9:28:2d:7f:67:8d:46:13:dd:e0:80:df:17:15:
                    6f:31:ed:17:b7:82:8d:10:3f:cb:5e:4b:bb:04:60:
                    04:69:c8:29:d7:e4:d0:3d:0b:e8:54:85:a9:bf:80:
                    10:c4:8f:3c:dd:f1:5e:13:da:eb:a2:c1:c9:77:a0:
                    fe:ad:61:71:da:ef:65:a9:67:df:5d:9c:80:81:11:
                    85:89:ee:d2:f4:8f:cd:e1:5b:09:bc:61:84:3f:52:
                    7e:11:f4:cd:3a:1e:f1:24:29:72:68:f5:22:a4:da:
                    59:c6:e8:ff:9b:72:54:42:88:e1:78:ac:13:7d:c5:
                    42:3e:38:c3:17:e6:9c:db:e6:04:0d:df:41:84:ac:
                    9c:01:06:68:55:c2:84:46:fd:1e:14:33:e8:03:41:
                    06:6b:39:69:8d:38:de:39:49:4f:ee:7a:40:a6:65:
                    59:e1:8a:73:5b:80:8b:6d:2e:5a:ad:b3:6b:0a:03:
                    66:27:f1:21:c8:bb:80:4e:a8:1d:93:54:5e:25:69:
                    97:06:23:0f:31:78:bf:2c:ab:0e:ee:3b:c4:a2:67:
                    84:30:03:03:8f:79:44:4d:44:55:10:c2:98:eb:48:
                    7c:bf:a1:1d:15:e9:ab:1c:13:0a:3d:ff:ac:4f:5a:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1A:E8:4F:30:85:F6:07:4C:D7:F1:B2:EA:21:9D:0B:E8:91:61:A2
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323130353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:2105::/80

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:95:18:b2:ac:35:49:36:64:b1:05:af:cb:6d:fe:2c:72:
         37:4f:cd:8f:80:8b:0a:00:5d:ed:9a:ea:19:40:b3:4d:c2:e4:
         e6:3f:cc:85:01:ad:2e:40:60:f9:2d:72:31:01:44:4d:a5:31:
         dd:99:0e:b5:64:f2:d9:b4:34:f2:d8:b4:98:d4:78:c2:d3:2b:
         b4:86:9b:c7:e2:9b:6b:9e:20:dd:44:35:f5:41:56:a3:69:e2:
         7a:dc:ff:a1:71:da:36:86:e8:fd:7a:0b:af:2d:3f:18:0f:67:
         d1:1d:61:84:41:dd:b4:91:c8:b1:cd:df:12:40:c7:d2:65:40:
         e5:45:4a:cb:c4:c0:d0:67:d6:7c:37:d5:d2:77:b6:ab:bb:57:
         44:c6:12:87:7d:19:2e:4b:73:68:70:f8:a3:a3:e8:d2:46:24:
         37:9d:5d:36:c1:68:28:f7:b6:fe:5f:e6:8b:54:ef:3e:b1:94:
         a3:6c:07:cf:e0:4e:68:a8:ec:b6:bb:6e:be:af:d7:13:2f:f6:
         b6:5c:4f:95:2c:e9:17:76:5f:3b:aa:0e:0a:1b:29:56:e1:9b:
         81:40:21:60:18:b5:18:60:2b:e7:ec:28:23:fa:38:5b:92:6d:
         1c:30:06:27:1f:d7:07:68:06:ce:15:5b:65:b8:c0:8d:ae:4f:
         14:15:30:b8
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUIqYWrOxbr5+R1Tcw3eaoGMnUqZwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE0MjEwMDAxWhcNMjMwMjEzMjEwNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEMyMTFCQUJB
NTNFNDY2MTdDMzcxNTgwMTIwMzE5OEM5MjgyRDdGNjc4RDQ2MTNEREUwODBERjE3
MTU2RjMxRUQxN0I3ODI4RDEwM0ZDQjVFNEJCQjA0NjAwNDY5QzgyOUQ3RTREMDNE
MEJFODU0ODVBOUJGODAxMEM0OEYzQ0RERjE1RTEzREFFQkEyQzFDOTc3QTBGRUFE
NjE3MURBRUY2NUE5NjdERjVEOUM4MDgxMTE4NTg5RUVEMkY0OEZDREUxNUIwOUJD
NjE4NDNGNTI3RTExRjRDRDNBMUVGMTI0Mjk3MjY4RjUyMkE0REE1OUM2RThGRjlC
NzI1NDQyODhFMTc4QUMxMzdEQzU0MjNFMzhDMzE3RTY5Q0RCRTYwNDBEREY0MTg0
QUM5QzAxMDY2ODU1QzI4NDQ2RkQxRTE0MzNFODAzNDEwNjZCMzk2OThEMzhERTM5
NDk0RkVFN0E0MEE2NjU1OUUxOEE3MzVCODA4QjZEMkU1QUFEQjM2QjBBMDM2NjI3
RjEyMUM4QkI4MDRFQTgxRDkzNTQ1RTI1Njk5NzA2MjMwRjMxNzhCRjJDQUIwRUVF
M0JDNEEyNjc4NDMwMDMwMzhGNzk0NDRENDQ1NTEwQzI5OEVCNDg3Q0JGQTExRDE1
RTlBQjFDMTMwQTNERkZBQzRGNUE2Njg5MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMIRurpT5GYXw3FYASAxmMkoLX9njUYT3eCA3xcV
bzHtF7eCjRA/y15LuwRgBGnIKdfk0D0L6FSFqb+AEMSPPN3xXhPa66LByXeg/q1h
cdrvZaln312cgIERhYnu0vSPzeFbCbxhhD9SfhH0zToe8SQpcmj1IqTaWcbo/5ty
VEKI4XisE33FQj44wxfmnNvmBA3fQYSsnAEGaFXChEb9HhQz6ANBBms5aY043jlJ
T+56QKZlWeGKc1uAi20uWq2zawoDZifxIci7gE6oHZNUXiVplwYjDzF4vyyrDu47
xKJnhDADA495RE1EVRDCmOtIfL+hHRXpqxwTCj3/rE9aZokCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQkGuhPMIX2B0zX8bLqIZ0L6JFhojAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzQzYTMyMzEzMDM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhQhBTANBgkqhkiG
9w0BAQsFAAOCAQEAApuVGLKsNUk2ZLEFr8tt/ixyN0/Nj4CLCgBd7ZrqGUCzTcLk
5j/MhQGtLkBg+S1yMQFETaUx3ZkOtWTy2bQ08ti0mNR4wtMrtIabx+Kba54g3UQ1
9UFWo2nietz/oXHaNobo/XoLry0/GA9n0R1hhEHdtJHIsc3fEkDH0mVA5UVKy8TA
0GfWfDfV0ne2q7tXRMYSh30ZLktzaHD4o6Po0kYkN51dNsFoKPe2/l/mi1TvPrGU
o2wHz+BOaKjstrtuvq/XEy/2tlxPlSzpF3ZfO6oOChspVuGbgUAhYBi1GGAr5+wo
I/o4W5JtHDAGJx/XB2gGzhVbZbjAja5PFBUwuA==
-----END CERTIFICATE-----