Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313435353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a313435353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          8QsyY7xdAHJHGJQV4dTWhl0crynyYVAEl00yrMHyiAM=
Subject key identifier:   E1:CD:79:DA:98:76:1E:30:02:D7:69:C9:BD:FA:79:08:C2:8A:46:BD
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7341FE9EA91F5D06968BDA015047AA9A9D9202D5
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313435353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 14:55:09 +0000
ROA not before:           Wed 16 Feb 2022 14:50:09 +0000
ROA not after:            Wed 15 Feb 2023 14:55:09 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:1455::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:41:fe:9e:a9:1f:5d:06:96:8b:da:01:50:47:aa:9a:9d:92:02:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 14:50:09 2022 GMT
            Not After : Feb 15 14:55:09 2023 GMT
        Subject: CN=3082010A0282010100C503F7799F8CB7A4BA9AC5572A27494472F18BF255225AD0AE5ED729C64087658865412764A921ED078C62989439C52DF8929A256B1AB783113CBAC1753BA9F2B2A721470408D19827F53AF4D864A09C83ADC69255559DE9E90F304F3FDF0557E01CF19E32043DDD81EE2721E59E5052E6945611BC56D16796B3D8A5A511293D1BD45D4EDDEBEB08FE70EE441047321119D4068916F8C4696B6F068C5EACAD4D581B3CA1570E2AAFB1A4C0043A69FEBD7ED99EFA8579F37D9025A90B073EDC89C558D1BF83B59D56BCD864B2F287A8CDBA1BF37D9A22AECC2FA9653C469F35BEDCBB85BD6AD275FF8547FA4FAAD78072C1800760E3870E0BE8BF167F11E3FDD90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:f7:79:9f:8c:b7:a4:ba:9a:c5:57:2a:27:
                    49:44:72:f1:8b:f2:55:22:5a:d0:ae:5e:d7:29:c6:
                    40:87:65:88:65:41:27:64:a9:21:ed:07:8c:62:98:
                    94:39:c5:2d:f8:92:9a:25:6b:1a:b7:83:11:3c:ba:
                    c1:75:3b:a9:f2:b2:a7:21:47:04:08:d1:98:27:f5:
                    3a:f4:d8:64:a0:9c:83:ad:c6:92:55:55:9d:e9:e9:
                    0f:30:4f:3f:df:05:57:e0:1c:f1:9e:32:04:3d:dd:
                    81:ee:27:21:e5:9e:50:52:e6:94:56:11:bc:56:d1:
                    67:96:b3:d8:a5:a5:11:29:3d:1b:d4:5d:4e:dd:eb:
                    eb:08:fe:70:ee:44:10:47:32:11:19:d4:06:89:16:
                    f8:c4:69:6b:6f:06:8c:5e:ac:ad:4d:58:1b:3c:a1:
                    57:0e:2a:af:b1:a4:c0:04:3a:69:fe:bd:7e:d9:9e:
                    fa:85:79:f3:7d:90:25:a9:0b:07:3e:dc:89:c5:58:
                    d1:bf:83:b5:9d:56:bc:d8:64:b2:f2:87:a8:cd:ba:
                    1b:f3:7d:9a:22:ae:cc:2f:a9:65:3c:46:9f:35:be:
                    dc:bb:85:bd:6a:d2:75:ff:85:47:fa:4f:aa:d7:80:
                    72:c1:80:07:60:e3:87:0e:0b:e8:bf:16:7f:11:e3:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CD:79:DA:98:76:1E:30:02:D7:69:C9:BD:FA:79:08:C2:8A:46:BD
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313435353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:1455::/80

    Signature Algorithm: sha256WithRSAEncryption
         50:36:1e:8f:c4:b7:9e:75:c0:3c:6e:ff:6d:ec:cd:ce:58:e8:
         9c:54:94:60:fe:de:bc:d7:2c:9a:0f:a3:66:95:b1:24:69:f8:
         37:9d:f1:fc:23:50:07:d1:0e:29:45:63:e1:f4:11:f6:99:0c:
         cf:03:5d:f3:82:9b:d7:74:b6:43:43:83:91:37:83:21:fa:6b:
         76:0d:1b:c8:15:41:c6:61:6c:ca:03:c0:c9:e9:98:41:cf:dd:
         f4:d9:d1:07:8c:2e:d2:7b:4a:84:65:10:24:71:e8:75:75:6e:
         b3:a9:66:0d:6a:d8:a2:6e:e6:e5:17:2e:f5:16:cb:dc:47:3b:
         dd:1e:a0:47:36:f2:2e:b1:d0:ae:58:62:62:79:76:b5:b4:ca:
         fb:7a:48:03:e8:37:06:01:3b:bc:d2:66:5e:b4:ec:cb:ac:e8:
         d7:92:93:9a:bc:c4:12:d3:19:d8:46:17:76:a8:26:e5:f3:78:
         39:3c:3e:0d:7c:2c:18:45:ed:a6:e7:e7:09:85:25:75:b1:51:
         4b:1a:d4:31:6d:37:a6:93:de:52:47:d5:e0:55:cd:12:6e:49:
         80:21:51:f2:c6:c3:a3:4f:ca:81:ca:7c:43:6a:84:c7:b5:67:
         e3:31:97:a1:37:61:ce:a4:a3:ce:e5:cf:21:7e:7a:a3:ca:ad:
         70:43:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----