Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3430303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a3430303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          95k3q/wbh4ZxYD3//SHD+dtSNOAMTqDMTtWFgwAFCvk=
Subject key identifier:   8B:B6:08:4F:D6:AC:E5:F4:5F:35:BE:3A:51:16:BB:7D:0C:10:77:3A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       48CBC5A13B3387C27ED72F427BB98275B86F04BB
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3430303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 04:00:02 +0000
ROA not before:           Wed 16 Feb 2022 03:55:02 +0000
ROA not after:            Wed 15 Feb 2023 04:00:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:400::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cb:c5:a1:3b:33:87:c2:7e:d7:2f:42:7b:b9:82:75:b8:6f:04:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 03:55:02 2022 GMT
            Not After : Feb 15 04:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:ed:c5:a2:82:80:f9:8e:d2:2d:cb:be:ce:
                    9c:96:68:e9:90:02:cb:21:37:99:d9:7b:e0:a3:af:
                    4c:5d:c9:62:31:8a:ef:8a:e7:f5:f7:1c:5f:44:e9:
                    02:38:09:68:ef:c3:d4:1c:b3:39:bc:09:c2:eb:37:
                    7a:eb:0b:a7:b3:61:70:d5:dd:5b:9d:4c:3d:70:91:
                    b9:bc:02:11:5f:6b:d6:8c:6b:9f:4a:d8:26:b0:85:
                    26:42:84:15:4e:cd:9c:ae:9e:8b:fd:6b:1a:d2:02:
                    1b:9a:c9:63:99:69:21:cb:af:19:89:3c:5f:fa:c3:
                    f6:03:7f:f2:1f:34:9d:75:62:08:b4:a8:39:28:2d:
                    f0:9e:07:25:30:1c:0e:96:97:1b:e4:e2:e3:69:5c:
                    c6:28:50:40:31:4d:b7:05:14:f2:cd:62:a4:d3:54:
                    e9:07:99:e5:54:04:75:4d:87:d7:f9:30:2b:a8:74:
                    56:00:8c:3f:28:07:17:4c:44:a2:9d:23:48:06:99:
                    22:4c:04:80:43:27:be:56:23:e2:b2:a4:e0:51:0d:
                    2a:6a:6b:44:8e:0a:bd:6a:11:91:21:06:3e:48:bf:
                    db:2f:40:3e:e0:16:96:9e:54:e4:a4:76:1a:a5:fb:
                    74:4f:f6:a9:4e:8b:ca:c2:04:3d:c5:eb:fc:cb:cc:
                    ff:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B6:08:4F:D6:AC:E5:F4:5F:35:BE:3A:51:16:BB:7D:0C:10:77:3A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3430303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:400::/80

    Signature Algorithm: sha256WithRSAEncryption
         1b:40:32:8e:80:d7:0e:58:9d:35:5c:ed:75:78:fe:8b:32:11:
         96:0a:cb:3c:58:b2:6c:02:da:c7:73:fa:e8:54:83:b6:92:9d:
         27:c4:84:06:a7:71:ee:a7:a7:e4:73:13:75:28:85:33:d6:83:
         ce:1c:e2:a1:b0:74:7b:97:6e:0d:16:37:14:df:89:05:fb:04:
         9c:2f:9c:c5:41:6e:47:67:1d:56:3f:18:3b:f1:c8:35:88:f9:
         07:a9:dd:43:87:ee:55:a5:15:66:57:2f:5b:2d:a7:bf:ff:d5:
         31:83:a4:d8:91:cd:28:d0:5d:8d:ed:31:11:12:51:78:cf:a0:
         47:f2:82:2a:4e:67:c4:ed:a0:9f:0b:4a:1c:4f:12:82:c6:af:
         68:e7:63:0a:7a:ef:dc:1b:b4:e5:b6:11:fd:b2:5c:98:56:67:
         1d:9b:a4:94:b2:91:dc:b3:85:71:8c:61:77:59:0e:c7:4f:6e:
         97:fb:e4:12:a5:b9:52:e6:f3:a8:62:5c:b1:bd:81:15:ca:19:
         e9:e5:40:cc:54:93:50:68:e5:d0:50:f1:b4:07:f0:14:cc:94:
         5f:f5:32:0f:15:b1:d6:58:9a:37:03:45:7d:54:f0:f5:7e:79:
         46:67:57:e2:2e:62:bd:36:70:d0:a4:c7:69:78:65:4e:32:59:
         b1:6a:34:c6
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUSMvFoTszh8J+1y9Ce7mCdbhvBLswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE2MDM1NTAyWhcNMjMwMjE1MDQwMDAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEM5RThFREM1
QTI4MjgwRjk4RUQyMkRDQkJFQ0U5Qzk2NjhFOTkwMDJDQjIxMzc5OUQ5N0JFMEEz
QUY0QzVEQzk2MjMxOEFFRjhBRTdGNUY3MUM1RjQ0RTkwMjM4MDk2OEVGQzNENDFD
QjMzOUJDMDlDMkVCMzc3QUVCMEJBN0IzNjE3MEQ1REQ1QjlENEMzRDcwOTFCOUJD
MDIxMTVGNkJENjhDNkI5RjRBRDgyNkIwODUyNjQyODQxNTRFQ0Q5Q0FFOUU4QkZE
NkIxQUQyMDIxQjlBQzk2Mzk5NjkyMUNCQUYxOTg5M0M1RkZBQzNGNjAzN0ZGMjFG
MzQ5RDc1NjIwOEI0QTgzOTI4MkRGMDlFMDcyNTMwMUMwRTk2OTcxQkU0RTJFMzY5
NUNDNjI4NTA0MDMxNERCNzA1MTRGMkNENjJBNEQzNTRFOTA3OTlFNTU0MDQ3NTRE
ODdEN0Y5MzAyQkE4NzQ1NjAwOEMzRjI4MDcxNzRDNDRBMjlEMjM0ODA2OTkyMjRD
MDQ4MDQzMjdCRTU2MjNFMkIyQTRFMDUxMEQyQTZBNkI0NDhFMEFCRDZBMTE5MTIx
MDYzRTQ4QkZEQjJGNDAzRUUwMTY5NjlFNTRFNEE0NzYxQUE1RkI3NDRGRjZBOTRF
OEJDQUMyMDQzREM1RUJGQ0NCQ0NGRkVCMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMno7cWigoD5jtIty77OnJZo6ZACyyE3mdl74KOv
TF3JYjGK74rn9fccX0TpAjgJaO/D1ByzObwJwus3eusLp7NhcNXdW51MPXCRubwC
EV9r1oxrn0rYJrCFJkKEFU7NnK6ei/1rGtICG5rJY5lpIcuvGYk8X/rD9gN/8h80
nXViCLSoOSgt8J4HJTAcDpaXG+Ti42lcxihQQDFNtwUU8s1ipNNU6QeZ5VQEdU2H
1/kwK6h0VgCMPygHF0xEop0jSAaZIkwEgEMnvlYj4rKk4FENKmprRI4KvWoRkSEG
Pki/2y9APuAWlp5U5KR2GqX7dE/2qU6LysIEPcXr/MvM/+sCAwEAAaOCApowggKW
MB0GA1UdDgQWBBSLtghP1qzl9F81vjpRFrt9DBB3OjAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzYzYTM0MzAzMDNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIWBAAwDQYJKoZIhvcN
AQELBQADggEBABtAMo6A1w5YnTVc7XV4/osyEZYKyzxYsmwC2sdz+uhUg7aSnSfE
hAance6np+RzE3UohTPWg84c4qGwdHuXbg0WNxTfiQX7BJwvnMVBbkdnHVY/GDvx
yDWI+Qep3UOH7lWlFWZXL1stp7//1TGDpNiRzSjQXY3tMRESUXjPoEfygipOZ8Tt
oJ8LShxPEoLGr2jnYwp679wbtOW2Ef2yXJhWZx2bpJSykdyzhXGMYXdZDsdPbpf7
5BKluVLm86hiXLG9gRXKGenlQMxUk1Bo5dBQ8bQH8BTMlF/1Mg8VsdZYmjcDRX1U
8PV+eUZnV+IuYr02cNCkx2l4ZU4yWbFqNMY=
-----END CERTIFICATE-----