Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          JiWRAvn/cNi6ea6etnG0/wm5WGamkuSo194sVeCPxnw=
Subject key identifier:   CA:F0:A3:7A:89:3B:AA:E1:59:C7:DB:CC:3B:90:1B:20:E5:13:07:D3
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       67CE91F93D7CDEA3B177ABA0F59F50777FB98FF9
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 00:05:02 +0000
ROA not before:           Mon 14 Feb 2022 00:00:02 +0000
ROA not after:            Mon 13 Feb 2023 00:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:5::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ce:91:f9:3d:7c:de:a3:b1:77:ab:a0:f5:9f:50:77:7f:b9:8f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 00:00:02 2022 GMT
            Not After : Feb 13 00:05:02 2023 GMT
        Subject: CN=3082010A0282010100EB2F03397455D5A4C63529328253B7007AE10F6ECF4428C4F924C0693CF2F28BA3482D0932A1B48C6D3DD2BFEB48F519A5F62F7AFB2BBD4C7B26AA9D273B6704B0D80D2ED06348F7B392F6812DA784683EE1DC291CED7440DC93A5E6FAEDFEF3FE5091A1955BF4A671E5AFBE15B27697A796A666AC05BD27FCC8A393C91C7EB73B7B70EBAFC5AE760FCCBBA82D07010790CE4C9828A8AB8A112203C8025BA051D0034B6E5B5522BF7DAF280368F2CF4434F8B68ED21090DBB3EC32543A5161675F875B38B29CEF90F62300A7462CC0E13F09118B53016FA98CE5877CF3940C0D1DECD6AB097F2063A5BADC9498BA3B4E73C6F0E22B441E0451A367E1334085250203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2f:03:39:74:55:d5:a4:c6:35:29:32:82:53:
                    b7:00:7a:e1:0f:6e:cf:44:28:c4:f9:24:c0:69:3c:
                    f2:f2:8b:a3:48:2d:09:32:a1:b4:8c:6d:3d:d2:bf:
                    eb:48:f5:19:a5:f6:2f:7a:fb:2b:bd:4c:7b:26:aa:
                    9d:27:3b:67:04:b0:d8:0d:2e:d0:63:48:f7:b3:92:
                    f6:81:2d:a7:84:68:3e:e1:dc:29:1c:ed:74:40:dc:
                    93:a5:e6:fa:ed:fe:f3:fe:50:91:a1:95:5b:f4:a6:
                    71:e5:af:be:15:b2:76:97:a7:96:a6:66:ac:05:bd:
                    27:fc:c8:a3:93:c9:1c:7e:b7:3b:7b:70:eb:af:c5:
                    ae:76:0f:cc:bb:a8:2d:07:01:07:90:ce:4c:98:28:
                    a8:ab:8a:11:22:03:c8:02:5b:a0:51:d0:03:4b:6e:
                    5b:55:22:bf:7d:af:28:03:68:f2:cf:44:34:f8:b6:
                    8e:d2:10:90:db:b3:ec:32:54:3a:51:61:67:5f:87:
                    5b:38:b2:9c:ef:90:f6:23:00:a7:46:2c:c0:e1:3f:
                    09:11:8b:53:01:6f:a9:8c:e5:87:7c:f3:94:0c:0d:
                    1d:ec:d6:ab:09:7f:20:63:a5:ba:dc:94:98:ba:3b:
                    4e:73:c6:f0:e2:2b:44:1e:04:51:a3:67:e1:33:40:
                    85:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F0:A3:7A:89:3B:AA:E1:59:C7:DB:CC:3B:90:1B:20:E5:13:07:D3
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:5::/80

    Signature Algorithm: sha256WithRSAEncryption
         38:19:59:52:db:0c:43:09:09:94:25:db:30:0a:ef:87:89:80:
         4d:56:4a:ca:d4:bf:de:41:c8:53:c4:bc:60:11:44:71:ed:01:
         b6:97:e7:65:ad:64:61:31:58:60:41:0a:f3:12:4d:71:0e:b3:
         91:40:b8:04:4f:80:d2:fb:b6:ad:8d:4c:a0:b1:6e:05:1f:95:
         d4:e3:35:5f:66:44:ac:51:37:51:c8:07:64:4d:a0:0e:cf:16:
         12:59:24:e0:c9:88:25:7b:45:69:0d:c4:b7:d2:70:5b:26:6a:
         ce:88:68:b1:fb:a0:be:ff:9c:40:f3:2e:0a:af:28:c0:09:6b:
         43:c8:43:3a:b5:52:79:04:04:98:51:23:bf:9f:53:63:d0:2f:
         78:ce:29:67:69:ba:58:25:48:44:ae:5e:80:bf:4f:41:59:4d:
         27:a3:7b:b2:ee:71:ec:31:a1:7c:01:4e:3d:f9:a2:aa:12:94:
         a4:bc:44:1a:b3:8b:0d:6d:0c:3a:d7:70:5c:b5:5e:22:ee:2b:
         ff:ff:96:88:1b:9b:59:fe:84:22:1c:35:13:ff:38:f7:16:f9:
         3c:bc:54:1e:cf:2b:e5:90:b5:f2:a2:ed:81:a3:7d:3f:10:d1:
         9c:4a:7b:53:ce:21:48:62:93:e0:ff:a5:89:05:0a:33:61:7b:
         6e:49:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----