Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313834353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231353a313834353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          uGP+2x31CrtkTMMzFC851ssbjKXQxHXytbWyuW3WKNg=
Subject key identifier:   5F:19:AF:64:16:D8:6C:FA:DA:19:65:62:BB:F0:71:E3:E0:C3:6B:7E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6EABB4E3E116EECC3F968D010751AB167CD13E53
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313834353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 15 Feb 2022 18:45:01 +0000
ROA not before:           Tue 15 Feb 2022 18:40:01 +0000
ROA not after:            Tue 14 Feb 2023 18:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:215:1845::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ab:b4:e3:e1:16:ee:cc:3f:96:8d:01:07:51:ab:16:7c:d1:3e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 15 18:40:01 2022 GMT
            Not After : Feb 14 18:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:1f:8e:7b:0c:ee:9f:fe:65:44:63:54:f5:
                    1e:f0:ce:05:35:07:a7:67:6c:e9:09:e2:5a:bd:04:
                    69:fd:47:68:5d:a8:18:21:61:22:28:90:df:33:a7:
                    4b:a2:e9:ff:e1:ae:3c:af:e5:2c:85:40:e0:98:ba:
                    21:9a:30:c7:a7:c9:38:7c:85:52:cb:8d:0a:6f:83:
                    03:3c:41:e9:66:8f:e4:20:6b:03:d8:f3:7e:a3:cd:
                    0d:a2:b7:c4:c7:06:0f:89:7a:6a:b5:85:df:a9:f8:
                    7e:b3:12:bb:00:9e:87:b7:be:82:34:3a:c0:ba:7c:
                    48:41:d2:14:43:88:1e:08:b8:bf:f6:92:fa:76:3a:
                    63:0d:b6:60:dd:4d:c9:41:fc:a7:eb:48:67:55:95:
                    52:10:03:a1:04:fa:16:97:7b:c7:b2:85:3c:e1:62:
                    51:fb:d0:70:be:49:f1:08:7a:e0:12:3f:7d:96:80:
                    4e:3e:0b:11:75:44:61:1a:a6:bd:70:36:2a:19:1a:
                    27:e2:51:4f:8b:1b:e6:38:27:2d:ef:54:a2:71:9b:
                    03:da:d1:35:c6:1f:f2:ea:0f:7c:e9:47:18:91:99:
                    56:55:77:d0:3a:3c:ba:08:5e:51:24:9c:d3:34:77:
                    dd:68:2f:76:2a:60:48:7f:0e:08:f7:9d:47:56:ae:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:19:AF:64:16:D8:6C:FA:DA:19:65:62:BB:F0:71:E3:E0:C3:6B:7E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313834353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:215:1845::/80

    Signature Algorithm: sha256WithRSAEncryption
         8f:fb:8d:12:c5:d5:8d:d1:98:7d:32:65:f7:a5:4c:79:38:dd:
         c3:25:79:fd:62:ec:5a:e1:d5:f0:c6:f4:7d:d0:d7:e9:c0:bc:
         98:1a:54:01:2e:f8:48:20:a2:05:3b:2f:c9:3f:c4:12:24:53:
         f6:1d:6f:10:52:b8:8e:35:61:ec:fb:60:cd:f5:18:c6:3e:3b:
         af:c3:41:d6:ff:e2:19:7f:cf:68:bf:3f:ea:85:ba:5d:d5:80:
         13:c4:80:8e:54:28:08:8f:23:7d:89:5f:fe:84:cd:b9:ff:60:
         e6:8a:c1:c2:b9:c7:0c:e2:2a:52:8f:a1:99:5a:0a:c1:59:fb:
         e9:81:a8:57:02:ab:3f:bd:15:05:08:ad:a6:51:70:3b:26:51:
         5d:70:d5:dc:94:6b:2c:c6:a4:73:c0:a8:b4:d7:86:89:89:6b:
         78:9f:c1:3a:f6:25:b7:4f:25:79:78:71:70:fc:da:d6:98:ab:
         d9:78:08:c5:64:50:7e:b6:c2:fd:bf:c2:6f:11:91:cd:0a:7d:
         b8:81:e0:4c:50:90:9f:c2:6d:9a:f8:aa:5c:f9:08:56:53:dc:
         30:c4:a7:71:bd:ea:5d:41:0c:ca:98:df:67:35:42:8e:38:b5:
         d4:36:c6:4d:39:8b:78:63:fb:f7:40:ff:ed:9a:4d:21:ee:8d:
         0f:21:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----