Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313332353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a313332353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          IgoTlDQSEOr+IXQPO65q/MYgr7j8wNuPD4F8O1PS8yA=
Subject key identifier:   C2:15:39:30:BE:5F:BE:3A:C7:1E:AA:5B:E1:82:4A:1D:38:D5:7E:2F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7028229363250CE9CCA25B04D86C6BEB7ACFE7E8
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313332353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 13:25:02 +0000
ROA not before:           Wed 16 Feb 2022 13:20:02 +0000
ROA not after:            Wed 15 Feb 2023 13:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:1325::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:28:22:93:63:25:0c:e9:cc:a2:5b:04:d8:6c:6b:eb:7a:cf:e7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 13:20:02 2022 GMT
            Not After : Feb 15 13:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:9a:42:6f:3d:cd:fc:82:39:5c:d2:9c:51:
                    b4:2e:02:97:fc:38:40:13:f3:8b:93:bd:4c:f8:65:
                    35:65:17:1a:fd:90:f3:05:86:53:61:2c:2f:3f:73:
                    2e:a8:79:a5:b6:df:95:b5:7b:aa:df:55:1c:7d:c3:
                    ab:c7:b6:14:41:89:66:a0:29:45:9f:e3:81:72:bf:
                    b1:04:dd:24:69:39:33:d7:da:4b:21:a6:a0:4b:6e:
                    5b:15:da:9d:21:7e:55:4a:d7:ea:c1:b3:7a:c9:03:
                    d2:fb:34:2c:16:6f:36:b8:db:50:3c:e3:2a:b6:37:
                    10:3b:41:d0:0e:7f:a2:51:06:b2:5e:c5:d7:bd:80:
                    96:2a:4c:5f:5a:dc:3a:bb:1d:d2:ac:fd:c8:15:37:
                    6b:f7:ea:de:55:b5:4f:c8:08:7d:91:24:76:0f:e4:
                    9d:20:db:ea:97:66:c9:e6:f8:b2:5e:a7:75:fa:4b:
                    13:61:21:18:cd:54:2e:19:86:99:78:0d:43:a3:1e:
                    d6:86:6d:ac:59:af:f2:f7:0f:11:4c:1b:93:dd:a8:
                    26:20:94:c9:6d:d0:a5:16:15:c7:3b:1f:74:f5:34:
                    d9:4a:41:01:22:56:fc:de:6d:51:56:28:fa:f6:e1:
                    29:94:0f:7a:e2:b2:29:cd:c3:71:11:dc:a1:f6:b8:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:15:39:30:BE:5F:BE:3A:C7:1E:AA:5B:E1:82:4A:1D:38:D5:7E:2F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313332353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:1325::/80

    Signature Algorithm: sha256WithRSAEncryption
         33:67:51:01:3a:c6:45:0b:88:02:b1:e8:27:04:0e:ed:24:c5:
         dd:75:a4:d4:83:55:6f:81:e4:6d:d9:b2:3b:cd:e2:73:a9:b1:
         89:09:ff:e9:76:a3:d4:57:75:19:9f:51:dc:1b:a6:dc:cc:47:
         12:c5:ff:ff:aa:7c:a6:1f:06:af:36:5e:5d:51:6b:50:73:b4:
         34:32:b9:e3:7e:1d:4a:46:6c:fc:62:d2:89:61:80:18:4f:b1:
         90:89:2b:6e:6c:91:d2:d2:0d:31:58:ed:b5:c3:98:46:9b:32:
         02:8d:98:ff:28:55:8e:64:9c:ec:17:0e:36:63:e0:6c:18:89:
         ae:ad:62:44:88:c1:93:6b:fd:2e:dc:13:96:b9:e1:74:c5:1f:
         f3:25:71:05:4d:ae:7e:c0:8f:69:7d:e9:7e:22:bb:0b:02:eb:
         0a:55:6f:41:2e:fc:c5:59:b0:81:d1:7d:fd:20:af:53:ef:de:
         4d:a8:b0:d1:a7:3a:ea:26:61:88:f5:76:87:b1:0d:99:17:1e:
         be:5d:03:0d:4e:82:69:a8:89:79:65:01:65:c8:f6:7b:e9:0f:
         26:b4:c3:12:6e:da:ff:6d:96:26:04:ca:5d:b1:cb:08:db:75:
         d1:f4:6e:fd:ae:19:b1:df:2f:b4:a8:66:9d:73:08:ed:c0:14:
         b5:76:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----