Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a323035353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a323035353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          2awzLUecpZLfcHmdxYjCat+ABDnefd2E2dNbUt8cZ40=
Subject key identifier:   85:84:22:CE:1E:BF:7A:58:65:03:D6:7D:05:B3:A6:0F:A8:23:03:24
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1D8E53141AFB742CA4FC91CBE8D3CA2365721EFA
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a323035353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 20:55:01 +0000
ROA not before:           Wed 16 Feb 2022 20:50:01 +0000
ROA not after:            Wed 15 Feb 2023 20:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:2055::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8e:53:14:1a:fb:74:2c:a4:fc:91:cb:e8:d3:ca:23:65:72:1e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 20:50:01 2022 GMT
            Not After : Feb 15 20:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:71:c7:78:b4:c3:40:8d:d1:c5:d0:db:d8:
                    6d:6c:a9:31:30:c6:21:7c:1d:00:65:3d:4f:cc:97:
                    d3:54:39:44:2e:b6:c3:49:59:dc:00:dc:77:5c:0f:
                    38:48:8f:f1:a5:71:b2:c0:a5:f6:7e:e3:d4:f1:49:
                    62:ca:17:6a:62:92:8c:98:3b:be:66:7a:f8:c1:6b:
                    7d:0b:8b:5d:5a:87:51:8e:82:6a:ed:a3:fb:3a:d5:
                    2d:e0:f5:7c:ac:25:7c:e2:5d:67:02:e9:7e:c1:65:
                    f5:51:d6:d6:df:71:ed:09:36:4f:48:fe:3e:32:f2:
                    0a:cf:52:e7:2c:e6:da:09:e7:b6:c3:00:4c:7e:66:
                    87:18:fe:86:13:64:d2:26:ea:10:aa:73:24:43:37:
                    1e:18:4f:ce:4b:82:0f:35:69:90:a8:4a:e3:8a:7b:
                    fb:d7:89:1f:bb:6f:22:64:b8:e9:84:fa:84:ef:a9:
                    8e:21:0c:7d:4c:da:cd:79:21:c9:f5:11:f1:87:3b:
                    c0:b3:97:f3:32:6a:c0:cd:d3:aa:ee:f1:8c:ef:b7:
                    1f:22:20:b4:06:c4:71:a0:0d:46:40:ec:1c:df:be:
                    b3:5b:c7:a3:12:2e:88:2a:74:52:1b:85:f9:90:ff:
                    43:b4:96:c5:e7:85:ac:8d:98:bf:f4:62:ad:51:b4:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:84:22:CE:1E:BF:7A:58:65:03:D6:7D:05:B3:A6:0F:A8:23:03:24
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a323035353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:2055::/80

    Signature Algorithm: sha256WithRSAEncryption
         cd:0d:e0:2d:6e:b1:cd:80:3b:55:a6:c1:04:63:50:91:8f:7d:
         0f:5a:1a:d5:94:5e:2b:3c:31:6c:39:e5:48:0a:89:3b:3c:45:
         2c:40:49:cc:ec:e7:3a:36:a1:e8:d5:4e:63:73:5e:97:ae:71:
         3b:c5:21:25:e4:4b:b1:3d:e6:dc:c8:63:2c:7d:86:74:47:3b:
         e6:92:c0:1b:7c:a9:5a:75:a1:e1:5d:43:82:0d:d3:44:84:fd:
         f2:5a:2e:e6:b8:a1:b2:7f:23:34:72:77:49:be:48:45:c5:b6:
         a6:aa:40:48:0a:dc:a9:96:ad:1c:41:f3:8c:16:4b:41:e0:9d:
         1f:17:b1:ec:62:62:ab:af:78:d2:7a:09:52:2d:4c:bb:0d:1b:
         e4:a9:7a:61:c8:dd:ac:2e:61:39:63:c3:68:29:eb:a3:ae:2a:
         b4:2b:eb:7e:db:86:1d:2d:f3:b1:13:94:12:a9:3b:e4:ee:2d:
         ee:a0:5c:a7:4a:d9:90:4d:69:a5:03:ea:a0:63:73:bb:7e:09:
         bb:2e:85:39:1c:a6:fd:bb:d3:ca:3c:de:3c:ea:8c:bb:1f:dd:
         7a:35:cb:1b:b0:61:60:75:41:68:e0:f9:c0:86:fa:c2:53:c1:
         5a:7a:df:cb:78:94:a9:7c:c9:c4:f3:b1:ac:d2:d3:13:16:5d:
         82:90:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----