Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313833353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a313833353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          2zHJUCgonp3SxB9IX4WZN08mGxKO+ygq3moBsFeIXro=
Subject key identifier:   C5:6F:F1:34:E9:A5:AA:EF:7C:A8:43:3F:30:28:FB:F0:C1:26:4B:18
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       05CD5C112E53F4FCB58308EE1BE628A327177E6F
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313833353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 18:35:01 +0000
ROA not before:           Sat 19 Feb 2022 18:30:01 +0000
ROA not after:            Sat 18 Feb 2023 18:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:1835::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cd:5c:11:2e:53:f4:fc:b5:83:08:ee:1b:e6:28:a3:27:17:7e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 18:30:01 2022 GMT
            Not After : Feb 18 18:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:7f:8f:a5:22:0f:37:ba:c2:40:98:4a:2e:
                    af:0f:ed:93:59:c3:f2:e0:c3:14:b3:29:13:77:7a:
                    46:e0:e8:8f:13:93:17:43:a5:c9:81:64:53:8c:86:
                    7e:0c:4d:62:a1:52:5b:90:8f:b9:0f:83:49:36:95:
                    36:da:6b:f3:6f:ac:7e:d7:66:05:41:58:03:af:29:
                    b1:c0:7e:0f:ff:14:73:2a:b6:60:31:7c:53:4e:28:
                    86:f8:3b:99:7c:56:c2:11:0d:ae:9c:cb:86:78:73:
                    2e:59:fe:d3:fa:3d:86:10:0a:4f:dc:c3:45:fc:a1:
                    26:d1:d5:31:03:3e:bd:79:58:dd:d1:6a:8e:18:e4:
                    58:e4:01:1b:d4:ca:a0:43:66:98:ce:99:3f:f4:86:
                    0e:e6:39:16:df:14:89:9c:81:60:d7:02:66:e3:4b:
                    35:c7:3e:39:b9:23:8d:73:7c:8e:b7:3f:3c:8a:a0:
                    d5:59:15:5e:b3:aa:fc:f5:a3:ca:b9:0c:8f:93:38:
                    f5:d8:e1:3d:37:83:b4:e2:e1:6b:ff:3b:39:5d:16:
                    d8:c4:a1:7c:3f:bb:e0:dd:29:ef:41:0a:03:ad:11:
                    65:45:bd:4f:3f:76:2c:b7:55:67:13:4c:87:89:f4:
                    13:56:70:7c:8f:22:a0:fc:86:7b:29:73:6b:e0:b2:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6F:F1:34:E9:A5:AA:EF:7C:A8:43:3F:30:28:FB:F0:C1:26:4B:18
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313833353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:1835::/80

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:79:80:12:3b:de:fa:d1:c9:73:58:39:b7:70:b2:44:1a:
         b2:e8:f8:85:3d:ba:48:bc:e3:c0:2a:c0:b1:33:96:3a:bf:93:
         c7:10:03:1a:2f:23:ef:92:dd:fd:b5:c2:9f:ff:e2:d5:19:5c:
         48:60:9f:f5:a9:3d:08:d4:ef:4e:b8:d7:f6:60:17:ea:91:1f:
         e9:00:9d:90:b1:01:fa:33:fb:c8:69:18:54:55:02:ec:ef:4c:
         6c:19:b1:0e:7a:f8:73:59:93:8c:55:82:e2:37:02:d8:62:ee:
         05:b8:1e:2e:34:46:b5:e7:80:b5:fe:48:76:ae:05:c2:a9:b6:
         11:35:b2:32:23:b0:c9:28:50:93:d1:45:84:89:5e:c3:67:99:
         5e:da:cd:73:db:fa:a3:de:0b:79:78:02:34:e8:f8:f3:25:17:
         da:bf:e0:17:ef:97:87:59:3e:d2:85:bc:09:a9:64:41:45:9e:
         9b:3e:b5:27:6e:e7:08:85:76:5e:55:59:4d:a4:3b:a6:da:d4:
         31:41:3d:fc:05:4e:0f:59:13:a7:82:47:5a:aa:48:d6:ad:b6:
         0a:3b:07:22:c6:eb:d7:23:ae:22:ba:78:65:c9:f4:a0:f9:ed:
         63:5d:7b:ba:77:14:83:91:82:20:14:a9:2f:28:5c:a4:05:93:
         ba:d4:9e:51
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUBc1cES5T9Py1gwjuG+YooycXfm8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE5MTgzMDAxWhcNMjMwMjE4MTgzNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEI4RTI3RjhG
QTUyMjBGMzdCQUMyNDA5ODRBMkVBRjBGRUQ5MzU5QzNGMkUwQzMxNEIzMjkxMzc3
N0E0NkUwRTg4RjEzOTMxNzQzQTVDOTgxNjQ1MzhDODY3RTBDNEQ2MkExNTI1Qjkw
OEZCOTBGODM0OTM2OTUzNkRBNkJGMzZGQUM3RUQ3NjYwNTQxNTgwM0FGMjlCMUMw
N0UwRkZGMTQ3MzJBQjY2MDMxN0M1MzRFMjg4NkY4M0I5OTdDNTZDMjExMERBRTlD
Q0I4Njc4NzMyRTU5RkVEM0ZBM0Q4NjEwMEE0RkRDQzM0NUZDQTEyNkQxRDUzMTAz
M0VCRDc5NThEREQxNkE4RTE4RTQ1OEU0MDExQkQ0Q0FBMDQzNjY5OENFOTkzRkY0
ODYwRUU2MzkxNkRGMTQ4OTlDODE2MEQ3MDI2NkUzNEIzNUM3M0UzOUI5MjM4RDcz
N0M4RUI3M0YzQzhBQTBENTU5MTU1RUIzQUFGQ0Y1QTNDQUI5MEM4RjkzMzhGNUQ4
RTEzRDM3ODNCNEUyRTE2QkZGM0IzOTVEMTZEOEM0QTE3QzNGQkJFMEREMjlFRjQx
MEEwM0FEMTE2NTQ1QkQ0RjNGNzYyQ0I3NTU2NzEzNEM4Nzg5RjQxMzU2NzA3QzhG
MjJBMEZDODY3QjI5NzM2QkUwQjI1NTk3MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALjif4+lIg83usJAmEourw/tk1nD8uDDFLMpE3d6
RuDojxOTF0OlyYFkU4yGfgxNYqFSW5CPuQ+DSTaVNtpr82+sftdmBUFYA68pscB+
D/8Ucyq2YDF8U04ohvg7mXxWwhENrpzLhnhzLln+0/o9hhAKT9zDRfyhJtHVMQM+
vXlY3dFqjhjkWOQBG9TKoENmmM6ZP/SGDuY5Ft8UiZyBYNcCZuNLNcc+ObkjjXN8
jrc/PIqg1VkVXrOq/PWjyrkMj5M49djhPTeDtOLha/87OV0W2MShfD+74N0p70EK
A60RZUW9Tz92LLdVZxNMh4n0E1ZwfI8ioPyGeylza+CyVZcCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBTFb/E06aWq73yoQz8wKPvwwSZLGDAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzkzYTMxMzgzMzM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhkYNTANBgkqhkiG
9w0BAQsFAAOCAQEAcOV5gBI73vrRyXNYObdwskQasuj4hT26SLzjwCrAsTOWOr+T
xxADGi8j75Ld/bXCn//i1RlcSGCf9ak9CNTvTrjX9mAX6pEf6QCdkLEB+jP7yGkY
VFUC7O9MbBmxDnr4c1mTjFWC4jcC2GLuBbgeLjRGteeAtf5Idq4Fwqm2ETWyMiOw
yShQk9FFhIlew2eZXtrNc9v6o94LeXgCNOj48yUX2r/gF++Xh1k+0oW8CalkQUWe
mz61J27nCIV2XlVZTaQ7ptrUMUE9/AVOD1kTp4JHWqpI1q22CjsHIsbr1yOuIrp4
Zcn0oPntY117uncUg5GCIBSpLyhcpAWTutSeUQ==
-----END CERTIFICATE-----