Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313030353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a313030353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          HVOk+H8fYrGuxEmYoPPQbGcP9nXdEtR9McUc6iY/Frw=
Subject key identifier:   11:13:77:A3:78:79:EB:DC:3A:FC:66:F2:CE:73:B5:5A:49:E5:E9:CA
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       64E33CB762E8816713A811C7627AA1020CD518CD
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313030353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 10:05:01 +0000
ROA not before:           Wed 16 Feb 2022 10:00:01 +0000
ROA not after:            Wed 15 Feb 2023 10:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:1005::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e3:3c:b7:62:e8:81:67:13:a8:11:c7:62:7a:a1:02:0c:d5:18:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 10:00:01 2022 GMT
            Not After : Feb 15 10:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:f8:60:d1:b4:ab:f2:b5:79:66:ff:cf:4a:
                    b9:a0:60:9f:5d:b4:fd:40:47:81:1e:30:f2:bc:c2:
                    b4:13:18:1c:55:11:b5:85:64:98:39:a7:ca:58:2f:
                    7c:60:bb:b6:ac:5a:c2:6c:ef:44:cf:fb:8b:01:32:
                    77:77:f8:2f:2d:df:d3:2e:0e:1c:f1:7e:ee:34:fc:
                    61:79:a1:d8:f1:b4:33:ed:03:6a:1a:6e:d2:95:d1:
                    ab:c5:c2:32:c6:47:b0:05:0a:82:1c:22:64:6f:1e:
                    b3:dc:2b:07:14:f1:d5:13:fe:85:4b:43:b7:78:48:
                    ad:dc:49:6e:4d:17:28:66:5e:24:f7:02:5f:31:b1:
                    98:61:97:45:7f:2b:81:f2:ed:8b:df:b2:0d:15:09:
                    d1:e4:e7:17:d2:ff:07:86:b4:23:b0:eb:4c:e1:c5:
                    8d:2b:af:d5:0b:e1:6a:1b:4e:b6:4a:3d:35:79:34:
                    ca:63:8c:d7:76:7f:c4:8d:b2:0d:ab:bc:de:b4:49:
                    15:ca:aa:c0:80:0a:ec:1e:f9:07:3e:3e:aa:d5:b0:
                    3a:e8:1c:7d:de:7f:9b:26:be:79:bf:81:51:db:47:
                    c8:08:04:70:df:a6:cd:74:eb:e2:8f:d3:ba:18:d2:
                    dc:9e:83:42:98:5d:7c:be:27:b6:2c:e3:1d:8e:9a:
                    68:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:13:77:A3:78:79:EB:DC:3A:FC:66:F2:CE:73:B5:5A:49:E5:E9:CA
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313030353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:1005::/80

    Signature Algorithm: sha256WithRSAEncryption
         d8:2a:69:b2:c3:7b:4a:66:43:1e:b1:2c:f8:c2:01:5a:ff:01:
         e1:12:5f:52:3a:54:ed:a6:c5:0b:70:68:32:7b:f7:1c:19:42:
         f6:db:4e:bf:71:4e:3a:08:71:5d:57:b6:a7:59:b7:97:e4:ba:
         c5:de:8f:38:1a:2d:f5:32:c5:71:25:ad:ea:27:f4:6d:30:4e:
         8a:1c:17:71:44:ff:e8:2e:51:24:93:6f:87:ed:6d:b4:b4:b8:
         29:9c:e6:d1:85:4d:16:38:c1:bc:83:7a:f5:9e:0e:04:38:a4:
         04:ce:94:e6:d9:ac:d4:f4:7f:cb:34:7e:8e:25:dd:6d:fe:d3:
         0c:2a:0d:5c:d7:c6:0e:30:4a:f0:30:c9:08:5b:92:cf:f2:4d:
         85:99:5b:2a:c0:cd:69:5b:f1:d2:39:84:f4:8d:94:29:de:fc:
         a2:b5:44:85:0f:b8:95:b1:98:08:f7:78:f3:05:26:73:86:27:
         1a:89:73:fc:c2:a1:8c:92:92:42:1c:24:ce:d6:1b:d7:b2:04:
         2b:e7:b2:08:7a:51:3f:f7:bf:f3:ca:e8:91:fd:f9:94:d5:c2:
         ed:f0:8a:98:33:7d:75:5c:65:0f:37:00:b5:91:0e:0b:81:bf:
         95:03:72:8c:e6:34:b9:a0:d4:91:4e:76:60:f8:af:ee:36:3a:
         3b:7e:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----