Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323332353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a323332353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          SURqw27RLZ5bjk5joFy7VKSx3PTBHpQD5cpQ0x0PwCo=
Subject key identifier:   86:79:B3:1E:19:F0:D7:98:3E:60:C2:DD:87:D9:27:07:86:21:D2:34
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       29B54583DEEF6B199FAF8FA38040B13021147265
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323332353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 23:25:02 +0000
ROA not before:           Mon 14 Feb 2022 23:20:02 +0000
ROA not after:            Mon 13 Feb 2023 23:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:2325::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b5:45:83:de:ef:6b:19:9f:af:8f:a3:80:40:b1:30:21:14:72:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 23:20:02 2022 GMT
            Not After : Feb 13 23:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:c7:ac:d6:91:86:b4:31:1d:25:e0:92:f9:
                    59:6b:7c:2c:70:18:d7:fb:69:c3:10:ca:b0:cd:64:
                    8a:f9:28:e5:e4:f0:81:d9:76:13:e6:00:52:91:34:
                    a6:24:ad:99:95:97:eb:05:bb:fa:6a:2b:b1:c5:52:
                    18:16:60:70:0d:c1:85:a8:6f:7f:3c:72:45:83:cd:
                    f5:40:d0:b7:55:c5:a3:02:52:0e:a9:52:8d:ee:58:
                    e8:48:fa:d7:98:07:57:cf:22:b2:ba:25:31:65:06:
                    f5:57:d2:7f:f8:f2:d3:d4:9f:e4:6c:d2:11:03:1e:
                    7b:e2:4f:f4:0c:7e:5a:64:0a:6b:a4:9a:bb:f1:9e:
                    97:8a:f6:fd:8c:ea:af:6b:04:9c:02:b7:98:f0:f7:
                    ae:dc:4e:35:9d:34:33:12:d9:ba:8b:af:2e:d6:47:
                    e8:cf:4e:37:5a:6a:ee:72:c2:28:1f:bc:eb:99:2c:
                    b1:de:e9:8e:90:78:ae:d9:e6:25:4c:2d:fe:02:e2:
                    76:0a:63:72:3c:33:ba:f1:7b:a9:bb:ac:47:3b:b6:
                    d9:d1:bf:c1:ef:66:93:02:ea:10:5c:3e:27:06:5a:
                    ff:c4:0c:68:b5:0e:10:e6:99:ad:ea:8e:a2:fe:ec:
                    60:bb:70:a7:f4:98:a9:dc:31:e0:e2:2c:b1:46:98:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:79:B3:1E:19:F0:D7:98:3E:60:C2:DD:87:D9:27:07:86:21:D2:34
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323332353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:2325::/80

    Signature Algorithm: sha256WithRSAEncryption
         4d:11:eb:d0:0d:47:80:13:74:18:27:bf:92:fb:39:12:63:ce:
         db:ed:61:96:16:a9:aa:40:7f:24:0e:41:55:c1:b2:48:b8:4a:
         0d:b0:24:c0:a1:2e:a3:6b:c0:7d:49:bc:12:1d:cc:74:2e:a9:
         5a:7e:5e:ca:a2:f0:aa:7d:6a:81:6f:53:61:78:cb:56:2a:42:
         8c:1b:5c:c9:b7:d4:f0:6b:82:fb:3d:27:58:55:0b:0a:bc:46:
         52:6f:22:0f:7a:b6:07:bf:03:7d:3d:c3:0a:8c:9b:08:e5:1e:
         b5:ae:64:eb:1d:f7:46:ab:bf:5a:fe:1b:8f:a4:d4:e7:07:53:
         5d:c0:e5:94:c3:34:15:96:f7:f4:d5:cd:62:cd:a4:4d:3d:1f:
         c7:7d:fe:da:bd:4d:5a:33:a9:8b:6e:c6:cb:07:dd:ea:2f:59:
         87:f9:97:b3:21:56:ea:e0:e6:8a:1b:70:7d:14:55:82:44:69:
         cf:2b:c4:c0:bf:38:b0:c5:32:6f:f7:9e:f8:50:57:46:cc:1a:
         d8:20:04:5e:81:b1:d9:40:56:b8:61:ff:fa:ab:d2:9f:35:fb:
         32:97:98:4f:52:1f:05:3e:1a:52:48:85:aa:b5:30:73:3e:84:
         9f:20:a6:97:3c:d1:30:26:c4:8d:ee:75:b9:50:63:37:0d:d7:
         af:c4:cb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----