Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313430353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a313430353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          ZYHjW5RbWMJkUfW01mNqWbrM/BDHOSPoCVXMK06bOyo=
Subject key identifier:   19:AE:34:D5:22:96:2F:20:E1:39:FF:31:FC:FA:09:E8:B5:20:1B:8E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       26D1F4816AC2B8098091DA3CA09483D06D8756AB
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313430353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 14:05:01 +0000
ROA not before:           Sat 19 Feb 2022 14:00:01 +0000
ROA not after:            Sat 18 Feb 2023 14:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:1405::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d1:f4:81:6a:c2:b8:09:80:91:da:3c:a0:94:83:d0:6d:87:56:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 14:00:01 2022 GMT
            Not After : Feb 18 14:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:67:8a:2f:bf:94:cd:8b:08:6b:23:bd:2f:
                    52:44:24:50:37:f8:ed:21:c9:9c:4e:95:82:78:0c:
                    fa:21:23:91:77:7e:8e:c6:08:04:32:a4:25:42:60:
                    2a:9b:16:92:09:9e:5e:81:25:b9:74:5a:14:f4:e1:
                    84:09:f6:6c:6b:2e:f8:7b:f0:0b:04:f0:1f:26:6c:
                    51:a3:bb:b2:d9:84:a5:dc:69:dc:c8:95:e2:9f:21:
                    b0:4b:9f:52:c5:28:12:5c:ae:47:7d:b5:bf:9b:47:
                    cd:10:c6:fe:d1:f1:79:39:e9:f3:b6:4d:e0:12:6d:
                    fd:71:e6:64:ac:91:3d:c7:ff:ac:19:82:4a:58:0f:
                    18:f9:3a:59:20:a4:82:f1:eb:96:94:df:cc:de:9d:
                    b9:0d:68:e2:af:f7:ed:5e:c1:85:e6:02:0b:c7:bb:
                    79:49:21:a2:a5:eb:21:cf:9a:25:d2:d7:d7:0d:4e:
                    90:e3:ed:54:70:04:20:ef:c3:ce:ad:e0:5d:16:4a:
                    56:cf:f0:58:9a:60:41:8d:ee:9d:5a:3e:25:c7:03:
                    66:84:0f:ca:f5:5f:72:2e:df:e2:b8:3a:d7:27:ea:
                    34:ca:c5:9a:73:01:3a:29:36:89:a0:04:5f:6c:c7:
                    c8:1c:84:31:53:ff:8b:00:ae:f7:ea:27:1c:2e:e9:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AE:34:D5:22:96:2F:20:E1:39:FF:31:FC:FA:09:E8:B5:20:1B:8E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313430353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:1405::/80

    Signature Algorithm: sha256WithRSAEncryption
         a7:4a:2d:34:c9:62:be:2d:32:69:34:c6:60:b6:e5:0a:b1:75:
         40:db:96:d5:48:c3:87:d6:18:61:ef:d6:fa:ef:73:c0:1b:a4:
         0a:6b:dd:7b:53:f7:b8:b8:62:72:52:34:93:b5:05:96:43:65:
         12:df:bb:68:81:9a:d4:82:65:34:66:ec:62:43:bc:2f:77:84:
         5e:63:9e:ae:4d:a1:11:04:ee:54:24:20:15:cb:a7:43:77:8c:
         4f:f0:a4:6d:56:d7:77:18:52:24:d1:7d:d1:d0:be:f6:61:04:
         4a:8e:61:59:93:20:4e:f2:b8:db:93:fa:dd:03:bd:f4:7e:ec:
         53:01:f6:30:06:31:82:89:ea:03:54:b4:ad:fa:8c:33:a8:21:
         32:be:47:a5:e3:8c:fb:59:af:17:26:90:6b:4b:af:e8:2f:62:
         4a:12:63:0e:c4:6f:73:ad:08:e9:80:d8:fc:cc:3c:cf:e7:68:
         6e:da:e2:8d:4d:64:1d:8d:a5:cb:e8:f8:9c:92:66:ab:54:51:
         35:28:cf:86:d5:92:1b:fc:3c:ff:5c:6f:67:fd:98:05:17:b2:
         f6:10:28:a5:e6:15:77:b7:dd:f8:e9:8b:7d:bf:13:8a:19:1d:
         c9:27:51:9c:3f:32:c6:5d:04:e2:2c:72:2d:88:43:0a:21:a6:
         80:7f:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----