Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313533303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a313533303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          0w4ZGn6wT6WSiu5UqDdGRj4ymtNI0aGs/fK1OYRacEs=
Subject key identifier:   69:11:83:66:67:3F:C6:14:65:56:36:3B:CD:E9:67:E0:6B:5D:ED:69
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       267A3022D2172AFEF1074353C35AC4AAA6EA529A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313533303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 15:30:01 +0000
ROA not before:           Thu 17 Feb 2022 15:25:01 +0000
ROA not after:            Thu 16 Feb 2023 15:30:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:1530::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7a:30:22:d2:17:2a:fe:f1:07:43:53:c3:5a:c4:aa:a6:ea:52:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 15:25:01 2022 GMT
            Not After : Feb 16 15:30:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:12:f6:bf:04:28:2e:81:4b:d3:d3:4c:91:
                    04:93:72:a5:2b:61:4b:50:f8:e1:20:2c:d4:15:2e:
                    a0:72:9a:59:b3:ea:05:27:35:e4:e2:bc:83:10:cc:
                    b6:ad:bc:21:fc:66:db:ec:d9:ba:77:82:e5:be:6f:
                    c7:bc:2e:6c:8b:11:b0:87:bb:74:28:a0:4d:50:7c:
                    13:b9:f3:a6:79:95:79:ba:aa:a9:8a:a0:29:57:da:
                    30:c8:60:32:9b:17:a3:ea:b4:57:44:7f:61:d2:a1:
                    f7:51:5e:67:ba:a3:21:48:e1:70:b5:8c:f3:e1:86:
                    9f:e2:f4:7a:77:b8:aa:7f:31:fc:82:50:f1:df:f0:
                    73:3d:d4:62:a4:32:49:76:d7:98:af:1b:53:9c:c7:
                    d7:d1:cd:bf:fa:58:1c:5e:74:dc:c3:b1:40:a0:02:
                    fa:5e:ae:7e:79:f1:33:c3:16:35:b1:70:ff:e7:1e:
                    94:62:8b:ec:0a:59:46:87:8f:9d:54:f3:fb:fc:37:
                    53:b5:14:3b:4e:c3:41:3a:c8:74:25:ab:ee:75:72:
                    e5:74:85:8a:96:4a:be:09:b3:91:80:42:ad:7b:77:
                    46:f3:55:eb:58:63:76:51:49:4e:2f:e7:b9:78:4b:
                    a5:9d:9d:9f:da:16:91:aa:03:ad:64:06:38:70:bd:
                    c6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:11:83:66:67:3F:C6:14:65:56:36:3B:CD:E9:67:E0:6B:5D:ED:69
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313533303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:1530::/80

    Signature Algorithm: sha256WithRSAEncryption
         77:b4:37:4d:75:74:7a:9d:e1:be:d7:77:30:fd:7b:95:67:1d:
         0d:df:ba:aa:de:09:d8:51:6b:5c:a3:69:8f:8b:06:1f:05:80:
         a3:93:a6:d2:71:ef:10:67:70:88:89:8c:ef:db:02:6c:8c:b7:
         ae:1c:e8:ca:b3:c0:56:b5:3e:7a:79:5d:b8:d9:0b:21:06:14:
         0d:33:4e:7e:ac:c8:06:dc:eb:58:36:b3:30:b6:4b:e5:fe:06:
         73:26:c8:f9:9d:e0:49:f5:34:e6:09:0b:01:a3:ac:a9:ab:bf:
         c9:d2:ae:e1:62:f5:ca:17:1e:f9:ee:19:ae:db:2c:d4:b2:f4:
         fc:3c:1a:aa:7a:83:72:2a:ae:92:46:1f:95:d3:8d:33:56:b9:
         a6:ba:02:d6:5e:ee:e3:b8:39:aa:76:f9:00:4d:be:ce:25:cc:
         dc:95:4c:bb:0b:94:db:b0:c5:31:4a:f8:7c:34:c4:1d:1e:4d:
         b7:03:18:51:c6:34:b3:8f:ae:26:e9:ef:d3:08:33:9b:48:26:
         c3:87:7a:73:98:30:b0:81:27:2e:0c:4b:8b:69:d0:1a:27:84:
         76:07:ce:65:a2:87:c2:fb:3d:9b:ae:ca:af:b8:39:b6:df:e0:
         0e:60:11:50:6d:e8:c1:1e:29:a1:0a:61:c3:53:b3:82:aa:c2:
         6a:e1:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----