Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3131353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a3131353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          5za74dH4U+ZHMn/zJ+XHom+lRWVx0KjjkTK4epeyd38=
Subject key identifier:   E8:33:72:F6:69:3C:95:16:87:3A:87:26:21:EA:C5:35:18:02:FF:0D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       018A3C7FCEF01B52384EF9280A72EE0C70B111CA
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3131353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 01:15:02 +0000
ROA not before:           Thu 17 Feb 2022 01:10:02 +0000
ROA not after:            Thu 16 Feb 2023 01:15:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:115::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3c:7f:ce:f0:1b:52:38:4e:f9:28:0a:72:ee:0c:70:b1:11:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 01:10:02 2022 GMT
            Not After : Feb 16 01:15:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:0a:1c:13:02:d6:36:4d:af:ec:cf:34:41:
                    07:93:dc:8a:fd:e7:7a:f9:3d:1a:ce:77:e2:7a:62:
                    12:2a:c0:9c:60:9c:36:0f:71:f4:d9:c8:eb:c2:c5:
                    b9:b5:c1:7a:2c:5e:1e:fe:2e:f7:47:d1:2b:ab:47:
                    d0:1b:e4:50:f7:8c:af:3f:82:1e:28:9d:14:66:00:
                    93:be:83:71:fb:23:79:72:84:0b:1f:e1:23:16:ee:
                    f7:52:11:d0:71:3a:8a:30:45:92:2d:be:08:93:4f:
                    ca:0d:50:07:48:53:b4:e8:44:9f:c5:7b:3d:66:ea:
                    51:88:f6:8a:bb:7e:e0:87:bb:36:4d:03:d0:1d:85:
                    fd:40:10:75:21:4e:6c:0c:1f:94:40:5d:ab:d9:3a:
                    62:34:18:fb:6f:70:49:44:ca:f7:c6:33:e3:d6:68:
                    65:dd:04:c1:d4:e5:67:0f:86:3f:10:7c:2a:9b:48:
                    35:b4:3d:2c:ca:18:85:e0:7b:2d:df:76:1b:fd:d0:
                    81:da:53:bc:25:42:24:af:78:99:d2:a2:5a:bf:e1:
                    c0:a7:f3:ad:d9:c9:5e:94:27:52:9f:ae:2d:af:dd:
                    27:72:35:38:0b:e5:43:bb:20:a4:f3:8a:48:4a:0e:
                    3c:e8:66:ef:01:f2:85:a2:7f:94:6a:08:ee:03:63:
                    1d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:33:72:F6:69:3C:95:16:87:3A:87:26:21:EA:C5:35:18:02:FF:0D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3131353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:115::/80

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:54:2d:18:b7:04:bb:ed:f5:b9:2b:de:a5:c8:79:a6:bd:
         ee:6b:40:36:3c:c5:6d:9f:e3:a8:64:a2:3c:c2:01:49:be:bf:
         d5:5c:6a:ea:2d:97:c8:18:60:74:c5:d5:0d:7d:a5:c8:9f:93:
         dc:21:0e:79:92:13:32:bf:dc:aa:99:99:64:51:cf:30:24:b7:
         60:fb:a9:a7:f3:13:90:63:0b:70:df:a6:27:c7:40:01:91:75:
         17:30:6b:ba:26:e4:70:56:27:c7:b5:93:90:da:5e:88:6e:a6:
         69:14:52:69:3b:85:97:12:cc:db:fc:d5:6b:62:18:f1:ba:2d:
         b3:c1:06:04:48:bd:16:49:4f:17:19:69:4a:09:cd:31:81:f0:
         93:81:c8:60:73:4f:4c:bd:00:c6:1e:0e:fa:a1:d0:22:81:c7:
         4c:a6:4f:a9:7d:4d:65:0a:b5:7d:a4:a5:8d:98:c9:d0:79:fb:
         37:46:a7:e3:e7:77:11:c3:f9:f3:5f:8e:6c:6e:f0:19:23:40:
         80:31:83:6f:34:da:ac:1d:f8:a0:8c:1f:d8:2b:0c:e8:de:a7:
         71:81:aa:99:bd:c2:12:bc:94:53:a2:35:2b:58:0f:70:83:fd:
         99:57:c8:08:04:59:24:5d:e3:2c:2c:6f:29:81:89:42:81:07:
         ae:43:06:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----