Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3530303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a3530303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          CfQm3q9Ga2+WZ1AZvP/On7BtiKq5KnvsmhpiferMLz4=
Subject key identifier:   5D:4D:55:23:44:9F:4F:ED:FE:87:AE:61:55:0E:5B:D6:BD:29:40:32
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       329925E70F8CD3C3F0392AA6AA7DF55747A534EF
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3530303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 05:00:01 +0000
ROA not before:           Sat 19 Feb 2022 04:55:01 +0000
ROA not after:            Sat 18 Feb 2023 05:00:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:500::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:99:25:e7:0f:8c:d3:c3:f0:39:2a:a6:aa:7d:f5:57:47:a5:34:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 04:55:01 2022 GMT
            Not After : Feb 18 05:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:d0:0e:ee:a6:98:0f:11:37:04:29:50:5b:
                    69:f9:56:13:f4:d0:52:75:f5:48:34:bd:9a:92:d7:
                    9a:a3:30:46:ba:2f:ea:9c:29:ae:a3:e2:21:b7:12:
                    a6:71:eb:b1:0e:13:fe:85:17:ea:d5:6b:7e:8a:dc:
                    34:d4:e9:c7:e7:0a:24:8d:e8:fd:c7:1e:fc:c6:f9:
                    7e:87:56:97:c1:cd:b6:53:da:70:20:9b:4c:d2:c1:
                    23:35:1f:0e:d7:6e:7f:99:79:66:63:e1:dd:8f:74:
                    0c:26:30:18:1e:a3:66:62:43:7a:2b:bf:8f:38:7f:
                    35:11:2b:2f:1d:04:eb:6a:42:da:7c:29:69:6a:09:
                    f2:26:7b:3d:8f:53:e6:3f:42:b9:5a:8b:e2:34:17:
                    d8:02:73:3b:c2:b1:99:ad:06:9d:66:a9:c8:2b:99:
                    be:8b:67:67:b0:a2:65:b5:6a:9e:ff:91:ea:bf:29:
                    4f:18:3f:64:83:e1:ba:4c:19:d0:14:19:78:c9:c9:
                    70:cc:fa:8a:a7:f6:9f:8b:28:cc:aa:ab:fe:e2:b6:
                    c7:06:fd:e1:32:61:8e:77:9f:b7:35:bd:e8:db:ef:
                    eb:de:06:2e:ff:cb:c0:a1:40:3d:a7:61:ba:28:dd:
                    8b:bb:a7:ae:15:48:d5:af:87:8b:d0:50:24:0a:39:
                    45:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4D:55:23:44:9F:4F:ED:FE:87:AE:61:55:0E:5B:D6:BD:29:40:32
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3530303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:500::/80

    Signature Algorithm: sha256WithRSAEncryption
         9d:d3:a1:be:b9:52:09:11:64:53:8e:ff:18:b8:df:bd:8f:a6:
         61:60:7f:76:bc:ae:7f:d8:c7:11:7e:6f:8a:90:a2:08:d8:3b:
         b6:5d:09:ca:0a:8e:67:c1:7b:51:48:c2:41:d7:b4:1e:7e:d8:
         9c:1f:e5:ff:1c:11:1e:08:37:a8:7d:62:12:ce:c4:bf:ba:52:
         d5:47:a2:da:83:4e:ea:19:73:53:9c:ca:8c:7f:a8:38:33:63:
         e9:9e:bb:7a:05:69:26:86:6e:9f:08:64:e9:e9:26:bd:7e:11:
         8b:09:82:ae:b0:75:53:d1:a7:78:c6:60:e6:85:4c:6a:e1:42:
         8d:ff:da:a5:51:a7:0c:c6:45:c2:85:4e:15:65:a6:2b:ad:da:
         21:d2:a0:be:de:63:31:c4:5d:1d:e2:d8:5c:19:e8:8a:08:72:
         41:55:a0:25:23:1b:8a:46:dd:86:24:fd:2e:f1:a5:1a:55:4b:
         ae:f5:a4:da:bd:87:d1:8f:87:76:34:dc:c4:8f:ba:ae:aa:e2:
         c6:4a:ff:8e:fa:73:df:03:45:61:09:84:73:78:39:31:ee:ae:
         aa:75:20:1b:dc:39:bd:af:2e:9c:cc:a0:13:3c:a6:13:90:d2:
         d9:12:c2:9c:ff:a6:88:8b:56:ae:13:f8:3d:dc:99:a6:b9:8c:
         d2:1c:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----