Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323334353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a323334353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          g+NT9atG+zWQbfAB8r4sK8CJqTmtkOgVYXWVYXFj6Vc=
Subject key identifier:   3C:E3:66:19:7E:C0:56:9C:18:68:7C:6D:A3:F9:CB:B8:17:82:C7:BA
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       74B4D3475D9023C9724631FE1DF05735CFCEF309
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323334353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 23:45:03 +0000
ROA not before:           Mon 14 Feb 2022 23:40:03 +0000
ROA not after:            Mon 13 Feb 2023 23:45:03 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:2345::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b4:d3:47:5d:90:23:c9:72:46:31:fe:1d:f0:57:35:cf:ce:f3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 23:40:03 2022 GMT
            Not After : Feb 13 23:45:03 2023 GMT
        Subject: CN=3082010A0282010100D5FB706217B697A7038AC24ABB83F8FCC4DCE768A460FB581099138FCC5D4333741BFDFE0A5C3AB2BCD0FDF00489A00D8339549EBDD2E814CF8C40BE4EFF0DDCEC8321557DB87D5E4DFC956D3D280C6B32656402908954E4D69B8962A3D3F732D25A1A022917A4447FE1DFE24205CCF9E1DE8501DD93A8A772586CF615AF276E11DF08C2B2E8E9CF9AC804EBAB975814364BAC81910EC2AA332B549E684565DC77FD08545A512B7403B2EAC3A1D22EAB362375AA14439FDB31764238DA161E39D9744132EA4B7721312786C51D43B5526FDDC0332610647EF8BFC3D098117BE840E1B040C547EA51C7C6316D6A1171ED02F3FC6F2F414DAE32F7098D64E561D50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fb:70:62:17:b6:97:a7:03:8a:c2:4a:bb:83:
                    f8:fc:c4:dc:e7:68:a4:60:fb:58:10:99:13:8f:cc:
                    5d:43:33:74:1b:fd:fe:0a:5c:3a:b2:bc:d0:fd:f0:
                    04:89:a0:0d:83:39:54:9e:bd:d2:e8:14:cf:8c:40:
                    be:4e:ff:0d:dc:ec:83:21:55:7d:b8:7d:5e:4d:fc:
                    95:6d:3d:28:0c:6b:32:65:64:02:90:89:54:e4:d6:
                    9b:89:62:a3:d3:f7:32:d2:5a:1a:02:29:17:a4:44:
                    7f:e1:df:e2:42:05:cc:f9:e1:de:85:01:dd:93:a8:
                    a7:72:58:6c:f6:15:af:27:6e:11:df:08:c2:b2:e8:
                    e9:cf:9a:c8:04:eb:ab:97:58:14:36:4b:ac:81:91:
                    0e:c2:aa:33:2b:54:9e:68:45:65:dc:77:fd:08:54:
                    5a:51:2b:74:03:b2:ea:c3:a1:d2:2e:ab:36:23:75:
                    aa:14:43:9f:db:31:76:42:38:da:16:1e:39:d9:74:
                    41:32:ea:4b:77:21:31:27:86:c5:1d:43:b5:52:6f:
                    dd:c0:33:26:10:64:7e:f8:bf:c3:d0:98:11:7b:e8:
                    40:e1:b0:40:c5:47:ea:51:c7:c6:31:6d:6a:11:71:
                    ed:02:f3:fc:6f:2f:41:4d:ae:32:f7:09:8d:64:e5:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E3:66:19:7E:C0:56:9C:18:68:7C:6D:A3:F9:CB:B8:17:82:C7:BA
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323334353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:2345::/80

    Signature Algorithm: sha256WithRSAEncryption
         9a:57:cc:39:7b:f6:8e:b5:e8:69:17:48:37:f6:9a:ba:f6:41:
         2c:80:90:31:61:7e:0f:d8:29:21:9b:a4:9e:ff:c1:36:34:38:
         26:2d:79:6b:9f:15:77:2f:24:58:fe:f1:c7:32:a1:5d:e2:2e:
         78:52:35:43:39:76:e6:f9:1f:59:95:a5:39:45:90:8f:1b:da:
         61:9e:be:a0:61:19:83:bb:e0:7b:96:90:c1:1f:c1:f3:b8:24:
         a9:36:a6:63:c0:49:11:be:e2:59:e4:2c:58:48:61:ee:45:f5:
         b7:c5:32:ef:f4:db:82:0c:13:51:a2:21:db:e4:e7:72:d3:65:
         f4:98:52:ba:06:2b:bc:9b:da:55:01:4b:38:fe:69:55:08:c4:
         31:29:e8:67:f3:b9:34:75:a4:91:0a:53:67:e7:4f:39:b1:9e:
         f9:56:09:2c:76:8b:3c:56:e4:a3:23:77:a2:76:35:c6:e5:9a:
         c3:d2:b3:4f:a0:a5:9f:d4:a3:2d:b7:b3:77:9f:5b:50:28:10:
         6a:d4:7e:6d:ac:4f:df:2e:b0:58:fe:52:36:14:e1:29:1c:40:
         92:c8:96:e9:4d:85:c3:c1:42:50:74:40:d5:ee:80:7c:d0:59:
         02:98:3f:60:ce:ab:08:fb:ff:f6:fe:23:45:71:53:95:56:21:
         c1:08:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----