Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a323030353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a323030353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Kji2XSswjCqGaVvdqqbbihfLX4dss9LvPf9HEDky3hM=
Subject key identifier:   A9:8E:37:5D:5B:E3:7A:16:B0:44:74:0A:48:7B:A8:1C:2F:15:66:FC
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7AF547D1572533F52C5C666E4120BF9980515E23
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a323030353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 20:05:08 +0000
ROA not before:           Fri 18 Feb 2022 20:00:08 +0000
ROA not after:            Fri 17 Feb 2023 20:05:08 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:2005::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f5:47:d1:57:25:33:f5:2c:5c:66:6e:41:20:bf:99:80:51:5e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 20:00:08 2022 GMT
            Not After : Feb 17 20:05:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:89:e2:aa:76:90:9b:76:5a:94:fe:82:e5:
                    8f:ef:30:b3:21:0f:a4:00:55:8d:6d:12:ce:ce:e9:
                    b7:3d:12:fb:5d:44:a2:84:58:26:ad:78:1a:43:a4:
                    ec:4a:2e:31:01:18:7e:cd:22:cb:6f:c5:44:66:aa:
                    06:8a:26:9f:93:66:bd:a8:7c:41:6f:d9:49:d7:ed:
                    40:85:56:a6:24:29:34:24:38:db:c7:9c:83:a3:aa:
                    e5:85:67:77:3c:51:07:51:c8:13:50:65:19:ec:d9:
                    ca:75:c9:09:a8:87:28:4e:b1:e7:ff:4e:e9:dc:8e:
                    8e:5d:6c:e5:63:e6:3c:c2:91:a4:17:da:8a:f0:5b:
                    c5:d0:1b:3d:42:f6:b0:b0:67:a5:b4:87:96:f0:8c:
                    2c:6d:42:f4:b4:e8:49:57:cf:c9:00:15:94:b0:7b:
                    f8:1f:18:fe:df:24:a5:50:ba:88:d9:c9:86:6a:6c:
                    bd:23:8e:63:0f:3c:a0:f4:87:5d:3f:56:d5:13:6f:
                    f2:f2:f3:94:e5:c5:af:e4:7a:f1:02:fb:de:53:7a:
                    76:3e:87:d2:74:15:2f:66:84:fd:25:70:d4:a1:87:
                    f6:6e:46:ec:68:49:a7:19:06:45:d0:4e:6d:ad:c0:
                    ba:e0:66:78:6f:88:60:ac:d8:4c:23:e0:d0:cb:cb:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:37:5D:5B:E3:7A:16:B0:44:74:0A:48:7B:A8:1C:2F:15:66:FC
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a323030353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:2005::/80

    Signature Algorithm: sha256WithRSAEncryption
         1b:09:e1:b9:e9:92:a2:fa:dc:b9:95:b6:54:66:b2:6d:ae:d5:
         70:8c:2b:d4:d6:af:70:2e:b4:4a:c8:6d:33:d8:63:8f:55:d1:
         be:0d:04:96:4f:63:23:8a:07:27:2f:4b:7c:2b:b9:73:f0:70:
         9f:df:a6:73:57:d1:70:2e:10:00:8a:7a:1f:20:0b:47:a5:cf:
         07:37:29:9d:1e:0e:0b:45:4e:fd:10:f0:ca:53:e2:cf:f3:20:
         f6:88:7e:bb:81:ce:e7:d1:84:15:13:ea:ab:85:7a:26:29:eb:
         75:e0:91:31:c3:09:7b:42:c3:aa:62:5c:99:23:10:b4:5b:bb:
         70:59:2a:91:2a:46:f8:ba:05:ea:13:6e:2e:be:98:0b:32:90:
         ae:89:ab:4f:cd:a2:6c:67:60:42:8c:72:cb:11:5b:cf:28:e4:
         b8:c8:4a:a9:e5:c4:d8:0f:7a:1a:19:fa:20:d1:a5:71:b6:69:
         e7:fa:a8:a2:28:db:a6:19:aa:ff:c6:2d:99:3e:07:b7:6b:ec:
         e4:3b:46:cd:82:ba:a6:b2:e3:7f:62:f3:0f:9d:d4:9d:09:ae:
         e6:a3:e0:ba:f9:df:07:5c:df:cc:37:f9:2d:9c:bc:6a:e7:65:
         11:64:72:8f:b8:c2:1f:8e:dc:a4:15:75:73:44:48:74:f5:be:
         31:ae:9d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----