Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3631353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a3631353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          0Tmg4UypXY9I+JFxFMci/0ZZsbYk7Gv17z4p3Yf197I=
Subject key identifier:   30:16:BB:36:B3:72:90:0E:44:3D:0E:9B:45:D1:2F:C4:29:51:8F:68
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       79A2E07D17241A105227C52D96446FB31D251BF1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3631353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 06:15:29 +0000
ROA not before:           Wed 16 Feb 2022 06:10:29 +0000
ROA not after:            Wed 15 Feb 2023 06:15:29 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:615::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:e0:7d:17:24:1a:10:52:27:c5:2d:96:44:6f:b3:1d:25:1b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 06:10:29 2022 GMT
            Not After : Feb 15 06:15:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:6f:61:bd:8b:02:96:2a:f5:2f:2f:65:df:
                    d1:dc:8d:a8:9e:ec:2a:8a:c2:da:0e:8a:c7:3d:aa:
                    4e:5d:04:37:2e:55:03:ef:1a:5a:9c:60:e6:6c:19:
                    ef:15:9a:b2:f2:62:36:57:4c:ef:fd:4f:80:96:e5:
                    bf:be:23:16:27:d3:39:84:f8:ce:19:5c:87:70:72:
                    d7:d4:0d:48:1d:f4:65:39:34:04:4a:fe:eb:fc:8e:
                    4b:d3:6a:f3:c2:47:90:73:07:61:4e:92:9c:e1:99:
                    b7:3f:e0:69:82:da:93:8a:0d:ba:2c:05:7b:ed:cb:
                    31:54:1b:00:b0:94:a9:a3:65:32:81:1e:fa:e5:24:
                    bc:8c:5c:ab:08:b6:47:a6:66:f9:a8:1d:d1:7c:e6:
                    28:b6:53:73:c6:7a:fb:05:77:30:33:30:83:6a:9a:
                    fb:37:2f:75:c9:06:36:68:3c:bb:29:78:ef:ac:00:
                    d4:d7:00:66:33:b2:66:32:19:b6:99:41:44:70:4a:
                    0c:3f:31:89:a2:00:99:91:1e:3e:1a:e3:0a:cb:bb:
                    80:c7:0f:6f:3d:ee:9f:d1:b2:ad:b3:7a:b4:9a:c4:
                    8f:a5:6d:2d:16:6f:1d:9f:9f:02:9b:27:a6:a5:91:
                    3e:4b:19:ca:a3:71:bb:82:70:1c:9c:01:f2:0c:bc:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:16:BB:36:B3:72:90:0E:44:3D:0E:9B:45:D1:2F:C4:29:51:8F:68
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3631353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:615::/80

    Signature Algorithm: sha256WithRSAEncryption
         bd:b3:1f:7b:9c:a3:44:c5:3f:36:56:c0:3a:f2:0c:25:84:01:
         56:93:a5:fb:e3:c5:e0:9d:72:45:47:ae:94:26:3d:48:44:ed:
         be:ef:f4:34:f3:1e:29:06:da:72:8b:19:53:a9:11:cc:42:e3:
         99:d5:03:fb:f6:cf:0c:a9:63:72:3c:ba:55:6a:2b:92:7c:67:
         b7:49:1e:8e:c0:88:49:b7:2b:a0:5d:59:bf:09:59:e8:c5:3c:
         0f:80:51:e2:84:9b:9d:ac:75:7a:df:7c:93:f6:a0:e7:82:22:
         5a:32:bf:7c:4b:1f:47:4e:8d:16:87:59:07:a3:11:ac:d8:01:
         63:f9:82:da:e6:e2:d8:85:69:11:a9:58:16:be:53:fc:56:f4:
         81:ba:83:e4:6e:f3:87:bb:be:44:82:9f:4b:98:2d:ea:3a:51:
         4d:21:b4:ca:00:94:c5:2a:b5:9c:f7:36:91:b8:db:23:88:97:
         05:4c:ef:08:6c:ed:94:43:ba:aa:99:89:a7:62:e0:b3:62:c0:
         db:83:bf:70:e5:17:1e:e9:21:fc:64:a9:de:72:97:dc:62:c4:
         82:ca:76:4a:61:06:a1:02:3a:bf:dd:c6:6b:2a:bf:d9:f8:b8:
         01:78:9a:29:63:88:d3:17:ae:1b:a9:26:49:f2:d2:28:07:e2:
         fc:5b:01:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----