Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3331353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a3331353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Ftcl9fTKfNn3/ruAhI0KJDpnjjNiAg1h041E4bDTPsw=
Subject key identifier:   80:54:D5:AC:C8:D0:27:CF:2D:D5:9E:7A:8B:AD:A9:7C:B7:26:63:7A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6DA079B812430F20FF869285AF5A6DB05319155A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3331353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 03:15:01 +0000
ROA not before:           Mon 14 Feb 2022 03:10:01 +0000
ROA not after:            Mon 13 Feb 2023 03:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:315::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a0:79:b8:12:43:0f:20:ff:86:92:85:af:5a:6d:b0:53:19:15:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 03:10:01 2022 GMT
            Not After : Feb 13 03:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:fa:a6:1e:e0:71:6b:93:0f:21:ff:e0:15:
                    38:ca:d7:dd:42:bd:4f:8f:86:27:ea:70:95:9b:03:
                    03:e0:7e:ef:f6:d7:3b:84:cf:86:0a:c8:f2:72:55:
                    60:8d:8a:b5:27:3f:fe:21:3d:d8:92:cd:20:c2:a8:
                    2c:18:2e:aa:86:a6:79:3c:7d:03:60:60:73:e5:77:
                    5b:43:35:94:d0:c3:44:87:24:9e:0c:8f:15:7c:df:
                    35:d4:ff:c2:06:c3:c0:ce:69:05:84:12:ec:2b:4d:
                    d0:ac:01:ca:51:45:67:0a:f5:d3:9c:21:7f:ec:5d:
                    e4:88:28:7c:03:82:e3:94:4f:4a:c1:6d:76:d6:24:
                    bc:77:54:45:be:d0:bd:46:f2:a3:2a:0f:2d:55:d6:
                    1f:ac:d0:05:b2:b3:03:2d:9a:70:77:f1:32:c6:f3:
                    58:60:d8:e6:af:8a:1e:85:fb:23:ba:40:c6:a4:81:
                    af:16:66:66:6c:84:dd:a5:63:40:3a:2b:85:54:e2:
                    92:8b:ea:d6:d6:f3:70:db:35:2b:d6:bf:1e:b2:f4:
                    cf:5b:a5:df:03:79:99:3d:1f:a5:57:ed:d3:3e:0a:
                    5f:cd:9a:e8:f0:b1:5e:5b:b7:88:bd:d5:f9:5c:2c:
                    9b:4d:f9:0c:57:3d:3d:b8:c7:a1:11:ec:a9:2c:02:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:54:D5:AC:C8:D0:27:CF:2D:D5:9E:7A:8B:AD:A9:7C:B7:26:63:7A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3331353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:315::/80

    Signature Algorithm: sha256WithRSAEncryption
         58:d9:da:ef:34:e7:d2:78:17:7c:1b:1a:74:9e:76:34:ad:00:
         ac:4c:c6:86:e8:ff:d1:25:77:63:41:20:25:6e:96:bc:6f:20:
         55:09:2b:d2:80:d8:ac:a5:de:f1:73:16:0d:13:9f:08:71:56:
         e7:e8:f0:95:fa:97:64:1b:d0:61:ef:de:1b:15:2b:02:35:83:
         76:96:61:0f:5c:cf:81:d7:b5:c5:fe:59:b6:34:96:28:ec:f2:
         02:ca:4c:4d:b1:16:8f:c2:ca:e9:3f:3a:85:d7:92:02:99:b7:
         c3:1a:11:df:d5:ad:33:a4:ff:8a:7b:c2:b2:b7:74:5d:72:d8:
         05:3d:66:54:4d:10:ce:e7:ca:7d:a4:d8:36:9d:55:9f:8d:2a:
         63:db:cd:c5:45:31:8a:b4:f9:96:ed:ac:05:86:a9:30:54:c6:
         d1:43:4b:09:0a:af:6c:41:0b:be:d3:28:73:72:d0:53:6f:05:
         66:7a:16:ed:30:52:69:ff:e6:2e:14:a6:ba:dc:dc:21:21:fa:
         37:4e:81:47:cc:38:3b:d9:85:ed:3e:ec:71:c3:81:8d:56:f4:
         2e:49:fa:11:bc:62:0c:a7:55:7b:3e:59:76:23:0d:73:7a:8f:
         57:91:ed:16:b5:5e:c4:69:0a:ff:6f:7e:11:c9:df:e7:50:42:
         33:41:94:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----