Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3234353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a3234353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          CFZdJ3myS/xBGXb/JsV6iPJSVPuNr721naz8E7cZ9B8=
Subject key identifier:   70:C0:E2:E3:CD:43:9D:1D:3B:82:A5:2F:58:4B:54:D5:38:B8:28:56
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       54938223E46F717B86A49B1993ED13E0A5400883
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3234353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 02:45:01 +0000
ROA not before:           Fri 18 Feb 2022 02:40:01 +0000
ROA not after:            Fri 17 Feb 2023 02:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:245::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:93:82:23:e4:6f:71:7b:86:a4:9b:19:93:ed:13:e0:a5:40:08:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 02:40:01 2022 GMT
            Not After : Feb 17 02:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:ca:6f:fb:41:90:0c:27:a8:22:23:8d:ed:
                    be:1e:7c:0c:aa:c5:ce:a3:bc:1b:61:f7:73:2a:7e:
                    37:f8:fa:fe:a4:ee:91:d9:2d:29:1a:6b:b1:72:40:
                    07:d4:0b:69:57:1f:9d:c7:c8:39:b0:d7:ae:49:0e:
                    d8:4c:8a:06:cf:96:a4:5d:f8:96:12:06:b7:64:46:
                    81:ec:14:08:d0:06:d3:68:89:9b:d7:47:b9:89:fa:
                    f4:32:79:c1:29:65:0d:cd:8d:9e:31:1c:fb:e0:c6:
                    d8:a3:37:74:d2:4c:22:1b:1c:07:21:10:c2:ee:cf:
                    dc:95:4e:80:da:6a:9a:20:73:7b:49:3b:f0:23:46:
                    6d:be:37:3c:39:c6:1d:65:d6:1b:0d:aa:b9:79:7b:
                    e6:1f:22:7d:81:14:ac:f4:96:11:c3:6e:5b:d1:c4:
                    d4:7d:b1:56:e5:e7:ea:90:51:7a:7c:12:e0:88:1d:
                    0c:87:75:46:d6:b1:bb:63:43:1e:83:e6:15:6f:51:
                    21:e2:7f:40:c4:e2:66:b3:6d:85:a6:6b:62:7a:16:
                    ad:e2:c4:42:c5:ff:84:8a:71:be:2a:d8:f7:6a:9e:
                    bf:83:bc:2e:dd:d9:c7:38:41:bf:18:42:f5:12:e7:
                    e0:31:d8:e6:50:02:d4:a7:1b:6b:1f:02:4c:05:1d:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C0:E2:E3:CD:43:9D:1D:3B:82:A5:2F:58:4B:54:D5:38:B8:28:56
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3234353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:245::/80

    Signature Algorithm: sha256WithRSAEncryption
         85:52:b1:79:18:b1:02:90:15:9b:6b:5f:ba:27:39:be:34:80:
         bd:7b:3f:d4:28:44:dc:b2:0e:f6:3d:fb:56:6f:2a:28:c9:18:
         7c:ba:4b:69:f4:a9:21:cc:bf:9d:d0:74:e7:3d:ae:b7:f9:0f:
         37:b5:0c:2e:d0:dd:ff:91:85:97:14:8a:b0:82:f0:bd:1f:70:
         b0:c5:52:ab:b6:c5:62:64:ea:9a:61:65:6c:43:40:f2:c6:2e:
         96:cf:01:97:9a:a4:fe:f4:a5:89:f3:96:b3:9f:f3:4a:d8:15:
         b7:6a:dc:9a:38:02:6a:bf:d7:a3:5c:cb:97:54:95:9d:1a:92:
         b4:13:ce:34:29:81:f7:89:65:e5:18:3a:66:50:c7:91:d6:d8:
         60:5f:e6:73:fe:da:e0:12:eb:90:50:1f:2d:3d:00:f0:ff:26:
         fe:c6:6e:f3:79:a4:03:b2:12:cf:31:ff:62:db:5e:21:1a:c3:
         1b:a3:c0:f7:8d:0b:d6:de:fd:8a:90:ef:24:1c:d8:6a:90:c1:
         a4:94:7e:b3:be:77:df:d0:2a:eb:b1:8c:2f:87:af:f9:bf:ab:
         c0:0d:dc:0f:80:ec:eb:cb:f2:1f:69:6b:58:de:52:7e:e2:68:
         b6:1e:1d:e0:bd:98:2e:84:6a:2d:e6:e2:bc:43:6c:0f:da:21:
         1a:9d:d6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----