Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313631353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a313631353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /Uugq0LGNq38QE4cZHHDfRhOTXTmdG424QrJXX6SwdU=
Subject key identifier:   5C:77:BE:FB:7F:80:07:20:7C:40:FB:43:6E:9F:F2:5B:02:C6:66:B1
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3D937DDFE64E0C9E9745FC2369FA0A455202316C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313631353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 16:15:01 +0000
ROA not before:           Sat 19 Feb 2022 16:10:01 +0000
ROA not after:            Sat 18 Feb 2023 16:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:1615::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:93:7d:df:e6:4e:0c:9e:97:45:fc:23:69:fa:0a:45:52:02:31:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 16:10:01 2022 GMT
            Not After : Feb 18 16:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0c:d6:75:97:91:36:43:0e:44:db:3d:d4:fc:
                    58:84:dd:fe:34:0e:a4:9a:dd:6b:d2:c3:df:3b:30:
                    70:4a:74:ef:20:d7:9b:67:7b:4b:6a:9f:02:30:4c:
                    09:c3:df:4b:e7:ff:0d:e0:18:80:42:2c:c0:37:eb:
                    04:d1:30:6f:6d:48:4c:b6:fd:a9:8d:fc:68:51:03:
                    aa:5a:f0:3b:d2:07:26:04:4a:55:49:f5:a4:93:ec:
                    c7:1a:91:f6:69:00:4f:2f:14:7d:2e:b8:0b:9c:33:
                    89:8a:6f:99:80:3a:09:3e:72:d6:8f:4c:12:98:61:
                    fb:f6:4e:9e:5a:49:23:f7:c7:ed:f2:d8:1b:25:ff:
                    bd:c6:3f:4e:74:06:ca:d4:fb:ae:bb:d2:7e:33:d8:
                    73:13:8f:ed:ed:4a:6b:6f:27:8f:d4:ae:97:e3:6a:
                    e9:d0:86:52:3c:a8:2e:d1:44:e8:5a:54:44:63:40:
                    2b:d7:66:a4:2e:38:41:a5:bc:fa:9c:e8:51:8c:45:
                    4a:9f:f6:90:e3:fd:1b:f7:e6:43:1b:bf:e5:7c:4d:
                    6e:61:7e:63:29:fa:16:81:6d:fb:da:66:be:2a:68:
                    5d:72:53:c9:4e:39:1f:08:25:c9:4c:c9:01:c1:47:
                    a9:fb:76:66:03:23:09:d3:38:dc:ba:c5:30:e6:fa:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:77:BE:FB:7F:80:07:20:7C:40:FB:43:6E:9F:F2:5B:02:C6:66:B1
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313631353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:1615::/80

    Signature Algorithm: sha256WithRSAEncryption
         d2:82:77:f6:cd:b8:cd:11:5d:a3:69:20:89:b7:f0:9c:6b:f3:
         9d:53:c4:5d:95:b7:1b:28:e7:79:8f:1e:21:db:75:d3:8c:bd:
         65:eb:ca:69:f1:70:4c:57:05:9c:51:6a:e0:ba:b0:e1:ae:cd:
         28:ec:9a:03:ae:b8:b5:61:92:0c:91:ee:8c:ef:f4:20:ac:25:
         b4:dc:6a:d6:69:59:2c:fd:54:be:73:81:a0:7b:2f:3c:35:6f:
         82:4e:79:58:5b:b2:62:8a:b8:33:9a:10:47:a3:7d:dc:22:f6:
         f6:21:a4:0a:83:ca:c8:a7:c9:0f:58:12:15:02:38:5c:4a:a9:
         f9:6d:d1:93:aa:d8:5f:39:c5:6c:cd:b0:3a:51:ce:32:bb:dc:
         aa:af:c5:10:13:ae:ff:a2:41:63:bb:5a:59:0b:58:4b:8a:09:
         34:09:44:ad:1d:c7:55:9f:2b:a4:51:b0:3d:2b:09:61:b9:e4:
         fa:d7:02:13:33:ae:38:52:6d:ae:6d:07:5d:43:98:88:30:4f:
         62:b1:7e:fc:db:1c:4e:c5:29:b8:47:31:c8:e1:7d:af:6d:4c:
         d2:20:9d:dc:36:a8:5c:40:d1:5f:82:4c:d9:9a:45:2d:1c:ff:
         0b:a0:86:00:b7:86:9f:e1:66:95:0c:dd:6a:3e:53:96:f2:cf:
         56:d6:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----