Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3235353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a3235353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          b969VPXCRJt/j2h0K+tLDxDD7oLBRxr0upbLTMaLYnw=
Subject key identifier:   86:FA:9F:13:20:11:7D:AB:A2:7D:A1:5E:3D:E2:02:13:A2:B0:7B:B9
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       36068D3B8D18FA243C2714AE4A729B08A9745DBF
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3235353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 02:55:01 +0000
ROA not before:           Fri 18 Feb 2022 02:50:01 +0000
ROA not after:            Fri 17 Feb 2023 02:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:255::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:06:8d:3b:8d:18:fa:24:3c:27:14:ae:4a:72:9b:08:a9:74:5d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 02:50:01 2022 GMT
            Not After : Feb 17 02:55:01 2023 GMT
        Subject: CN=3082010A0282010100A864D86902491159C418B2D265488A33F26D5F0EBBC7CBAD6F20278DE9C83F5A62CE4A202FDD37028B310DFF4B2AC982954212E8FE3CD6C311130E9E6F7FDB9AD3B836A6194EE9CDC88DBD2758CAC050D5E76B9530409FDCBBC82F8DF5344A63F64239B5C81381C2B7ECF4D56F71CAD5E3C0C1F8CACC6C0638AD1B62C9A7700621F843666B80D75B4BE56A48D0F0266372B5D94C2A9DF402650C50218A6983B2A30B69DEDCF29EDAD1ED87D5B200206E910AC281A293A6D6B1F4E0A621CAF6E9DF73352235368C8C682E1044DB0162E0A1AD946621781D992D722D6DD9B41DD35508F0C5CC8787BA79B9E64051E10F83ED32DABD2017EF0313CE09599DFB24050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:d8:69:02:49:11:59:c4:18:b2:d2:65:48:
                    8a:33:f2:6d:5f:0e:bb:c7:cb:ad:6f:20:27:8d:e9:
                    c8:3f:5a:62:ce:4a:20:2f:dd:37:02:8b:31:0d:ff:
                    4b:2a:c9:82:95:42:12:e8:fe:3c:d6:c3:11:13:0e:
                    9e:6f:7f:db:9a:d3:b8:36:a6:19:4e:e9:cd:c8:8d:
                    bd:27:58:ca:c0:50:d5:e7:6b:95:30:40:9f:dc:bb:
                    c8:2f:8d:f5:34:4a:63:f6:42:39:b5:c8:13:81:c2:
                    b7:ec:f4:d5:6f:71:ca:d5:e3:c0:c1:f8:ca:cc:6c:
                    06:38:ad:1b:62:c9:a7:70:06:21:f8:43:66:6b:80:
                    d7:5b:4b:e5:6a:48:d0:f0:26:63:72:b5:d9:4c:2a:
                    9d:f4:02:65:0c:50:21:8a:69:83:b2:a3:0b:69:de:
                    dc:f2:9e:da:d1:ed:87:d5:b2:00:20:6e:91:0a:c2:
                    81:a2:93:a6:d6:b1:f4:e0:a6:21:ca:f6:e9:df:73:
                    35:22:35:36:8c:8c:68:2e:10:44:db:01:62:e0:a1:
                    ad:94:66:21:78:1d:99:2d:72:2d:6d:d9:b4:1d:d3:
                    55:08:f0:c5:cc:87:87:ba:79:b9:e6:40:51:e1:0f:
                    83:ed:32:da:bd:20:17:ef:03:13:ce:09:59:9d:fb:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FA:9F:13:20:11:7D:AB:A2:7D:A1:5E:3D:E2:02:13:A2:B0:7B:B9
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3235353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:255::/80

    Signature Algorithm: sha256WithRSAEncryption
         27:e4:5e:2a:d3:3e:29:eb:0d:c3:d1:02:eb:17:bb:0a:59:b0:
         c2:fc:d4:0d:de:85:8e:bc:f5:d3:02:39:de:0f:20:78:17:cb:
         b8:91:d2:b6:34:de:19:5b:c6:a7:df:f3:9a:5a:81:54:a5:db:
         ac:01:26:0c:30:b3:4e:bc:10:61:95:e4:aa:cd:b9:f4:78:d3:
         06:42:98:b8:51:da:8d:e4:8d:f8:15:f8:da:13:69:73:d8:92:
         9b:12:e2:6a:6b:40:03:25:20:a7:e9:8d:6b:f5:16:3a:20:16:
         b0:b9:4e:ed:33:ac:58:f1:c2:ef:4f:9e:a7:4b:09:47:73:5b:
         af:48:00:25:fa:83:78:75:74:08:7a:ca:27:1e:17:d0:6f:eb:
         a4:3a:5b:16:75:53:28:54:44:19:42:99:9b:77:0d:df:02:26:
         f1:47:6a:01:d2:0f:11:44:ea:0c:22:f8:c7:19:72:33:88:34:
         b7:c9:ca:1f:30:c4:8a:c5:dd:8c:44:5f:19:df:3d:84:da:11:
         5f:5d:bf:26:5a:9d:4a:4b:6c:58:b9:13:2f:b0:5a:8f:d0:34:
         0d:fe:df:be:cc:48:95:a5:fe:84:f8:73:84:1a:9f:f3:b2:06:
         61:2c:01:cf:bf:0d:19:f0:71:cf:1b:bb:8e:74:0f:c9:42:72:
         23:7b:6a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----