Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313035303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231353a313035303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          2wW3I9UloUTSr4FzF8yNCnwtaW6YWnhJuXAZmic3rnk=
Subject key identifier:   22:97:2F:71:1F:54:B5:C9:33:A9:B0:FF:B6:55:D3:AE:22:64:1B:84
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1C393DD7FACCBF5A89D72CC3976316A5A16F827D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313035303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 15 Feb 2022 10:50:02 +0000
ROA not before:           Tue 15 Feb 2022 10:45:02 +0000
ROA not after:            Tue 14 Feb 2023 10:50:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:215:1050::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:39:3d:d7:fa:cc:bf:5a:89:d7:2c:c3:97:63:16:a5:a1:6f:82:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 15 10:45:02 2022 GMT
            Not After : Feb 14 10:50:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:45:96:09:d0:ba:b1:b5:28:4f:87:2c:da:bb:
                    71:62:e6:50:f4:26:bd:fa:a3:8b:06:7a:6d:77:c8:
                    f4:dc:43:4b:7f:a7:a2:a1:48:01:a6:f3:91:cf:9f:
                    22:a3:46:cb:2b:6b:6b:0f:10:5f:b9:82:66:51:20:
                    4c:58:1a:08:4f:8b:eb:76:fd:fb:f7:20:d5:19:0f:
                    e2:8b:ad:9c:03:e1:dd:30:46:34:1f:40:1b:00:7a:
                    01:74:66:7a:5d:3a:73:06:77:0e:ae:df:9f:87:10:
                    d8:ca:fb:65:bc:85:c6:e4:e2:ce:be:75:57:ef:c3:
                    2f:25:a9:ca:3b:0e:e7:16:f1:2f:e3:8c:3d:c6:2a:
                    98:68:54:de:59:42:1e:cc:5d:43:79:78:4a:5a:b8:
                    76:44:09:66:c4:12:02:72:57:28:36:9d:e3:6f:d9:
                    bc:e9:aa:c3:13:3e:62:2d:9d:2c:1a:c2:1a:71:a0:
                    94:b6:78:d4:1b:31:df:0d:b8:61:ff:7f:8b:f9:4b:
                    53:60:0f:d4:33:ee:5c:36:af:92:8b:3d:ac:3e:62:
                    a9:3b:d2:21:48:e7:9e:9e:48:3e:70:92:29:5b:2c:
                    50:65:39:e1:e4:92:a4:07:97:dc:db:e8:e0:aa:b4:
                    20:1b:b4:4f:4c:c1:18:7f:ad:ec:47:ef:32:ef:7d:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:97:2F:71:1F:54:B5:C9:33:A9:B0:FF:B6:55:D3:AE:22:64:1B:84
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313035303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:215:1050::/80

    Signature Algorithm: sha256WithRSAEncryption
         33:ca:14:34:84:57:df:ac:1e:87:cb:5a:b8:ae:28:78:c1:a2:
         11:84:0d:01:ab:41:a3:f2:04:5c:70:b2:cd:57:90:4a:59:81:
         64:eb:1b:f3:d5:90:94:8d:32:f2:5b:bf:f4:a9:6f:51:54:ac:
         dd:81:bf:d0:3d:fa:51:33:03:fe:76:a0:b7:88:76:0f:65:8a:
         b5:9e:98:49:70:69:16:f6:53:33:74:a0:83:8a:d9:03:bd:6c:
         de:8b:ae:be:7c:44:3b:62:ec:02:67:3e:6c:1d:7b:fc:5c:0d:
         c0:26:bd:03:d1:e0:07:a4:ae:44:56:f7:5e:d0:44:c4:c6:2d:
         ed:ba:6b:b3:89:f2:ca:74:77:db:7b:0d:13:10:29:93:18:99:
         54:ed:62:95:4c:6b:63:85:de:c3:36:8b:46:f4:fa:6d:75:75:
         c8:9a:df:84:25:1a:0e:8e:a8:8b:92:8f:3e:07:28:31:2a:11:
         23:4f:76:7e:e0:41:c1:43:a6:f8:cb:c2:43:79:2c:41:28:3d:
         9c:e8:06:4b:ab:b5:00:88:91:78:6f:0a:c6:8a:1d:32:a9:07:
         7b:3b:9f:02:de:9c:14:6d:6d:76:cb:57:cf:8a:85:04:de:c5:
         bd:79:50:3d:26:73:89:49:da:e4:0d:ea:fe:79:c5:6c:26:52:
         0a:e1:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----