Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313230353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a313230353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          W6zC21xdCq7hJNPvMZg97KQcrzyQsT98AYwGZ4knBGg=
Subject key identifier:   CC:D1:B9:34:4A:7F:9A:3C:6D:4B:32:F1:79:CF:E4:70:A6:CB:8A:90
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       33A37C924CBF34364B6901BC7B9EA63DFD8232CD
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313230353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 12:05:02 +0000
ROA not before:           Sun 20 Feb 2022 12:00:02 +0000
ROA not after:            Sun 19 Feb 2023 12:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:1205::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a3:7c:92:4c:bf:34:36:4b:69:01:bc:7b:9e:a6:3d:fd:82:32:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 12:00:02 2022 GMT
            Not After : Feb 19 12:05:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:17:34:f5:34:24:b6:69:1a:e3:72:91:e9:
                    a9:62:9e:0c:6d:6e:01:42:7c:55:45:94:8d:2e:af:
                    44:0a:6d:2c:01:02:93:52:c0:52:3e:f1:f1:a3:3a:
                    ed:27:0a:27:25:91:de:e6:d0:47:98:2b:5a:f9:59:
                    9a:e6:b7:38:34:d6:2b:48:de:ee:24:fc:aa:74:66:
                    ab:87:71:54:25:c9:17:bd:97:c3:53:a7:76:d3:60:
                    8e:1c:fc:bc:5f:d8:88:1c:62:cd:73:7e:64:fe:71:
                    95:6f:b6:aa:74:08:c7:25:85:46:e4:45:81:9b:21:
                    f8:60:0d:4c:40:1a:d5:76:84:f8:75:13:51:e9:9c:
                    d2:ab:e4:a5:c3:a4:09:20:e1:7d:da:0f:d8:f8:98:
                    dd:b2:1b:53:5c:2b:f8:8f:ce:cd:7d:a7:95:a4:9d:
                    a7:87:f1:6f:32:34:e4:34:a6:42:1e:ee:45:22:bd:
                    3e:df:8b:25:6c:c7:b2:39:b1:9c:a4:93:3d:69:1a:
                    c4:a3:d8:3c:18:57:ae:0c:88:10:ae:12:20:32:3e:
                    3e:44:b7:3d:57:5f:e0:0f:87:42:a5:b8:ef:95:d8:
                    ad:6f:4b:f7:bf:f1:80:5f:05:eb:53:b2:db:75:31:
                    a0:bd:da:25:96:b4:95:8e:1d:80:85:0f:21:58:9e:
                    d3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D1:B9:34:4A:7F:9A:3C:6D:4B:32:F1:79:CF:E4:70:A6:CB:8A:90
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313230353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:1205::/80

    Signature Algorithm: sha256WithRSAEncryption
         b1:67:b2:b5:c2:0d:df:9b:47:f8:97:6b:d3:4d:b8:ea:54:80:
         44:85:9f:c9:d3:a6:1c:ac:d8:10:c9:90:89:9a:22:a4:13:ca:
         93:e3:66:9d:82:17:dc:ae:be:1c:60:5c:98:74:03:e5:29:04:
         71:60:0a:a4:eb:2f:d8:98:3d:15:da:ad:2a:38:8f:0c:29:cd:
         0b:4c:2d:16:d7:45:23:57:0c:bb:7a:df:ee:6d:7b:90:87:34:
         7a:b9:dc:f9:98:d4:13:28:0f:6a:6e:62:5a:a0:23:4a:37:91:
         cf:d4:e9:62:f4:bc:3d:f9:96:42:47:27:d6:fe:a4:e7:fe:f8:
         e2:13:14:2b:d0:f9:79:4e:3e:20:22:90:48:88:25:01:e8:42:
         ae:25:8d:72:d7:42:30:25:0c:1c:4e:67:9b:fa:90:6f:d4:60:
         e6:da:24:9f:a6:1c:de:50:04:03:d8:37:d9:85:ef:4b:50:b8:
         ce:16:46:c3:39:da:6d:d7:3f:ec:e6:18:e1:49:ea:ac:89:20:
         b1:13:53:58:c4:53:d9:86:ce:8e:6f:8a:24:70:84:39:2e:d9:
         5b:87:23:fe:7f:2d:76:8c:3e:73:3a:73:3f:1e:c8:7d:1e:09:
         1e:1e:17:c6:00:a0:07:31:eb:33:7b:44:34:7a:09:e0:35:cd:
         ab:0b:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----