Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3631353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a3631353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          93XyEAqdh/Ya4gg/+lo2OSzVaqTN0kCo+X6OsxH4AI8=
Subject key identifier:   53:6A:E4:C2:EE:B3:97:31:89:65:21:14:A8:AB:34:D7:D6:DA:FD:B1
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       130D4A246368CD9C72B5E0483160370A0FF54A08
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3631353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 06:15:09 +0000
ROA not before:           Thu 17 Feb 2022 06:10:09 +0000
ROA not after:            Thu 16 Feb 2023 06:15:09 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:615::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0d:4a:24:63:68:cd:9c:72:b5:e0:48:31:60:37:0a:0f:f5:4a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 06:10:09 2022 GMT
            Not After : Feb 16 06:15:09 2023 GMT
        Subject: CN=3082010A0282010100BDE2AEF73875958C8D8CACFB3D3277B18F44BFB4637C9350B2A144C43295FEF8F869BDF77412E836CBADF1444914775540F54BD58DAE2388AA79411FD5172DF215A6138D79B79DC601C3A7E0FB73F35AE74487C3FE1FD0431D8ADD573A28B1CF5E60C86145F80C42B0338C6B328B4C56C47491C7CEC077C7349CB58C1A3CEC8D72BFFD49A81BEEE989E71F34CE520C78566BA615C3013105700BE0547993AF3EF2DA4227E22DFC0706FD036CD657F4E059EC963E7FEFB8CE65EAF1C8A95E3C32D13CE763AAFA267452179DBDFF3CA4AD7E43638C25839CC5996BC359F39D52871A9DC60321E8F6A6845C094F1F45AD4F9739B27CBCF08F5AC71AEAAB7A32BF050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:ae:f7:38:75:95:8c:8d:8c:ac:fb:3d:32:
                    77:b1:8f:44:bf:b4:63:7c:93:50:b2:a1:44:c4:32:
                    95:fe:f8:f8:69:bd:f7:74:12:e8:36:cb:ad:f1:44:
                    49:14:77:55:40:f5:4b:d5:8d:ae:23:88:aa:79:41:
                    1f:d5:17:2d:f2:15:a6:13:8d:79:b7:9d:c6:01:c3:
                    a7:e0:fb:73:f3:5a:e7:44:87:c3:fe:1f:d0:43:1d:
                    8a:dd:57:3a:28:b1:cf:5e:60:c8:61:45:f8:0c:42:
                    b0:33:8c:6b:32:8b:4c:56:c4:74:91:c7:ce:c0:77:
                    c7:34:9c:b5:8c:1a:3c:ec:8d:72:bf:fd:49:a8:1b:
                    ee:e9:89:e7:1f:34:ce:52:0c:78:56:6b:a6:15:c3:
                    01:31:05:70:0b:e0:54:79:93:af:3e:f2:da:42:27:
                    e2:2d:fc:07:06:fd:03:6c:d6:57:f4:e0:59:ec:96:
                    3e:7f:ef:b8:ce:65:ea:f1:c8:a9:5e:3c:32:d1:3c:
                    e7:63:aa:fa:26:74:52:17:9d:bd:ff:3c:a4:ad:7e:
                    43:63:8c:25:83:9c:c5:99:6b:c3:59:f3:9d:52:87:
                    1a:9d:c6:03:21:e8:f6:a6:84:5c:09:4f:1f:45:ad:
                    4f:97:39:b2:7c:bc:f0:8f:5a:c7:1a:ea:ab:7a:32:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6A:E4:C2:EE:B3:97:31:89:65:21:14:A8:AB:34:D7:D6:DA:FD:B1
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3631353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:615::/80

    Signature Algorithm: sha256WithRSAEncryption
         b8:23:2b:ab:fd:41:44:ce:6a:48:f1:d9:24:15:f8:c5:dc:d5:
         d8:3a:69:12:cc:c5:54:35:cd:72:45:59:51:15:19:5f:29:ae:
         90:3a:48:6d:91:57:60:ae:28:58:59:9a:de:64:61:11:c2:8c:
         65:dd:ad:aa:e9:4e:4c:39:1c:1d:7b:d4:bb:dd:fa:49:39:61:
         f0:b2:ea:a9:21:ef:a4:1b:46:ce:78:fd:46:68:12:f7:5b:8d:
         b2:bb:1a:45:4c:8c:cf:77:9d:f3:35:77:9a:c8:ed:91:61:72:
         f8:fe:31:dc:d6:20:50:72:c3:2d:db:6f:15:ce:6e:d8:a8:e0:
         5a:5e:d4:a3:03:fc:1c:e4:c8:1d:e5:9c:c7:bb:ba:08:4e:e0:
         e2:65:a1:50:78:ad:cf:67:24:23:c4:ad:51:51:89:f8:5a:76:
         99:88:66:ea:ae:15:3f:e0:ce:db:f3:bf:67:3e:a2:9c:cb:e6:
         d6:4b:b3:14:09:e0:b8:97:8e:66:a5:47:27:93:5d:c1:40:b9:
         2d:ca:6a:30:51:60:08:c9:be:bd:ae:04:db:7e:69:cb:b3:9d:
         30:27:3c:f1:ff:f1:1b:61:d5:76:f0:1b:43:9f:55:8e:de:f9:
         75:a7:36:fa:aa:ee:05:d1:70:6c:0c:af:a1:52:60:a9:79:17:
         e9:16:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----