Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313333353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a313333353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          ECrL3QUbv/xXDOhC8ip4oqU106DtwopMFIz6VWZAvxk=
Subject key identifier:   EE:14:30:6E:8A:6F:7A:83:6A:7E:92:0B:46:09:90:AE:FB:ED:75:2D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       04AE327AD1B2AC11D38FA7F5A437B774D5F937F1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313333353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 13:35:02 +0000
ROA not before:           Fri 18 Feb 2022 13:30:02 +0000
ROA not after:            Fri 17 Feb 2023 13:35:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:1335::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ae:32:7a:d1:b2:ac:11:d3:8f:a7:f5:a4:37:b7:74:d5:f9:37:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 13:30:02 2022 GMT
            Not After : Feb 17 13:35:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:a1:3a:73:4f:52:69:02:45:ce:f0:b7:cc:
                    08:cb:0d:9a:40:79:71:cc:91:d3:72:c9:39:65:7c:
                    12:8f:56:fa:7c:79:cf:d8:6a:09:f6:27:96:0f:fe:
                    1d:55:c5:05:45:a3:d2:f4:34:ca:42:55:fc:89:e5:
                    8c:54:81:63:29:0b:bc:50:94:61:bf:c7:c8:cd:18:
                    a6:d8:06:00:90:a9:b2:dc:a9:0a:a8:19:e4:e1:d7:
                    d9:b1:96:d0:d3:14:ef:a3:85:43:6d:40:a4:33:21:
                    ed:34:fa:46:ac:bf:7d:07:cc:73:e2:f1:46:2b:fd:
                    44:6f:33:83:f4:63:be:66:cc:4c:41:8d:5d:4a:2d:
                    43:17:ee:6c:f1:be:31:2d:9f:59:b4:5d:cc:19:67:
                    42:24:2d:cf:16:e4:1a:6c:a1:31:8c:a2:05:cd:a5:
                    53:5b:46:e0:a2:a7:50:0c:77:d7:71:43:d6:3e:ff:
                    3f:9e:68:e9:2f:f0:35:bd:6f:c7:eb:5a:08:a8:bf:
                    29:75:f6:8a:60:e3:d5:f3:44:cd:29:a7:8e:83:93:
                    7b:e9:80:3f:20:9e:2a:5c:76:61:27:ce:df:f4:fc:
                    3d:78:d9:2b:c4:c7:7c:38:61:ad:75:2a:11:d1:10:
                    ee:c2:c5:cf:85:0e:08:b7:86:f9:b0:d7:76:21:e1:
                    15:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:14:30:6E:8A:6F:7A:83:6A:7E:92:0B:46:09:90:AE:FB:ED:75:2D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313333353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:1335::/80

    Signature Algorithm: sha256WithRSAEncryption
         11:78:06:03:65:63:97:38:c4:a7:fa:b7:71:19:39:d3:0a:87:
         fe:0e:61:4c:08:1f:e2:01:ce:42:c2:5c:29:a9:53:21:13:f9:
         a6:16:81:4a:a7:d2:a9:2a:18:a3:0e:86:3f:e3:f5:28:a7:34:
         bd:9e:06:1d:bc:0f:fa:74:1e:71:a4:7a:98:b2:f3:10:ad:69:
         cb:63:fe:81:52:b5:92:30:a8:96:e9:da:5c:24:ee:be:89:55:
         60:a5:55:72:36:43:1e:85:e8:59:0c:f4:0a:f0:fa:18:a3:e2:
         d4:84:18:fa:93:53:cf:1d:38:bc:1a:64:d7:d8:69:64:45:52:
         b6:88:5a:49:60:0a:e0:03:54:3e:f9:79:7a:99:11:c8:87:90:
         ac:0a:e2:e4:df:93:c3:0c:33:e2:c1:1a:90:d5:ed:92:38:3d:
         a8:8d:20:6e:af:f9:4e:37:2f:a3:cc:e8:98:a4:e7:e3:aa:dd:
         af:1a:f0:f4:93:bd:0f:30:7b:f2:87:fc:4e:86:4f:18:43:93:
         d5:5a:01:59:0f:43:e8:56:d0:b0:a9:f6:53:9b:2a:62:48:c9:
         90:81:12:f0:fe:0d:a6:57:45:ca:d0:09:b9:d5:64:69:bb:ac:
         9d:46:b6:5c:d9:ef:a0:72:fb:9b:39:a1:7a:de:7d:6c:4b:f8:
         f8:1b:8a:44
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUBK4yetGyrBHTj6f1pDe3dNX5N/EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE4MTMzMDAyWhcNMjMwMjE3MTMzNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEI0NDFBMTNB
NzM0RjUyNjkwMjQ1Q0VGMEI3Q0MwOENCMEQ5QTQwNzk3MUNDOTFEMzcyQzkzOTY1
N0MxMjhGNTZGQTdDNzlDRkQ4NkEwOUY2Mjc5NjBGRkUxRDU1QzUwNTQ1QTNEMkY0
MzRDQTQyNTVGQzg5RTU4QzU0ODE2MzI5MEJCQzUwOTQ2MUJGQzdDOENEMThBNkQ4
MDYwMDkwQTlCMkRDQTkwQUE4MTlFNEUxRDdEOUIxOTZEMEQzMTRFRkEzODU0MzZE
NDBBNDMzMjFFRDM0RkE0NkFDQkY3RDA3Q0M3M0UyRjE0NjJCRkQ0NDZGMzM4M0Y0
NjNCRTY2Q0M0QzQxOEQ1RDRBMkQ0MzE3RUU2Q0YxQkUzMTJEOUY1OUI0NURDQzE5
Njc0MjI0MkRDRjE2RTQxQTZDQTEzMThDQTIwNUNEQTU1MzVCNDZFMEEyQTc1MDBD
NzdENzcxNDNENjNFRkYzRjlFNjhFOTJGRjAzNUJENkZDN0VCNUEwOEE4QkYyOTc1
RjY4QTYwRTNENUYzNDRDRDI5QTc4RTgzOTM3QkU5ODAzRjIwOUUyQTVDNzY2MTI3
Q0VERkY0RkMzRDc4RDkyQkM0Qzc3QzM4NjFBRDc1MkExMUQxMTBFRUMyQzVDRjg1
MEUwOEI3ODZGOUIwRDc3NjIxRTExNUI1MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALRBoTpzT1JpAkXO8LfMCMsNmkB5ccyR03LJOWV8
Eo9W+nx5z9hqCfYnlg/+HVXFBUWj0vQ0ykJV/InljFSBYykLvFCUYb/HyM0YptgG
AJCpstypCqgZ5OHX2bGW0NMU76OFQ21ApDMh7TT6Rqy/fQfMc+LxRiv9RG8zg/Rj
vmbMTEGNXUotQxfubPG+MS2fWbRdzBlnQiQtzxbkGmyhMYyiBc2lU1tG4KKnUAx3
13FD1j7/P55o6S/wNb1vx+taCKi/KXX2imDj1fNEzSmnjoOTe+mAPyCeKlx2YSfO
3/T8PXjZK8THfDhhrXUqEdEQ7sLFz4UOCLeG+bDXdiHhFbUCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBTuFDBuim96g2p+kgtGCZCu++11LTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzgzYTMxMzMzMzM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhgTNTANBgkqhkiG
9w0BAQsFAAOCAQEAEXgGA2VjlzjEp/q3cRk50wqH/g5hTAgf4gHOQsJcKalTIRP5
phaBSqfSqSoYow6GP+P1KKc0vZ4GHbwP+nQecaR6mLLzEK1py2P+gVK1kjColuna
XCTuvolVYKVVcjZDHoXoWQz0CvD6GKPi1IQY+pNTzx04vBpk19hpZEVStohaSWAK
4ANUPvl5epkRyIeQrAri5N+Twwwz4sEakNXtkjg9qI0gbq/5Tjcvo8zomKTn46rd
rxrw9JO9DzB78of8ToZPGEOT1VoBWQ9D6FbQsKn2U5sqYkjJkIES8P4NpldFytAJ
udVkabusnUa2XNnvoHL7mzmhet59bEv4+BuKRA==
-----END CERTIFICATE-----