Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3135353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a3135353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          gF8G33EjH2K9WYOTsEYvQOeO5F3Jrgqh4gHPFf/IYsw=
Subject key identifier:   9D:BE:8F:36:6D:86:70:D9:7A:A2:96:62:4A:7B:AC:E5:DF:F3:BD:2D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       41CC1977C763E6E5DF3710CD11E7A0472984E599
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3135353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 01:55:01 +0000
ROA not before:           Sun 20 Feb 2022 01:50:01 +0000
ROA not after:            Sun 19 Feb 2023 01:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:155::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cc:19:77:c7:63:e6:e5:df:37:10:cd:11:e7:a0:47:29:84:e5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 01:50:01 2022 GMT
            Not After : Feb 19 01:55:01 2023 GMT
        Subject: CN=3082010A0282010100C574BE97D72779A45A1080476858E29BEE3A80EA88C25D5D6E5D5FE9A3997BD3FA1B78D226F5F5B113AA11D61E6EC62857BBB63264FE26DFBA19BA5E6E96C25923EF086874F6366E0C3CC86818AE73F44F2B14F22D1F134B3B7929DA9932177B2380E838A77EFF6D46419EDC41FDAA718733D15AAEBDA3CCC36AE02FD891E78EB22A7FCAF069131055A4EF68017F4127374137E24060D03A89A844DB65A5B49CB8E9A11667A67E9BA13EE1ABFACF1BA53D8C80AF4ADBFA363660CE0A49CBAD54D830CB95459436006DD1D5BAD61FAC20F02CFEF0321775836C599F2C840009C9660A7BB22C1A32B2AB47186557C14940A8FDE6064784230B8C340809024BBDA10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:be:97:d7:27:79:a4:5a:10:80:47:68:58:
                    e2:9b:ee:3a:80:ea:88:c2:5d:5d:6e:5d:5f:e9:a3:
                    99:7b:d3:fa:1b:78:d2:26:f5:f5:b1:13:aa:11:d6:
                    1e:6e:c6:28:57:bb:b6:32:64:fe:26:df:ba:19:ba:
                    5e:6e:96:c2:59:23:ef:08:68:74:f6:36:6e:0c:3c:
                    c8:68:18:ae:73:f4:4f:2b:14:f2:2d:1f:13:4b:3b:
                    79:29:da:99:32:17:7b:23:80:e8:38:a7:7e:ff:6d:
                    46:41:9e:dc:41:fd:aa:71:87:33:d1:5a:ae:bd:a3:
                    cc:c3:6a:e0:2f:d8:91:e7:8e:b2:2a:7f:ca:f0:69:
                    13:10:55:a4:ef:68:01:7f:41:27:37:41:37:e2:40:
                    60:d0:3a:89:a8:44:db:65:a5:b4:9c:b8:e9:a1:16:
                    67:a6:7e:9b:a1:3e:e1:ab:fa:cf:1b:a5:3d:8c:80:
                    af:4a:db:fa:36:36:60:ce:0a:49:cb:ad:54:d8:30:
                    cb:95:45:94:36:00:6d:d1:d5:ba:d6:1f:ac:20:f0:
                    2c:fe:f0:32:17:75:83:6c:59:9f:2c:84:00:09:c9:
                    66:0a:7b:b2:2c:1a:32:b2:ab:47:18:65:57:c1:49:
                    40:a8:fd:e6:06:47:84:23:0b:8c:34:08:09:02:4b:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BE:8F:36:6D:86:70:D9:7A:A2:96:62:4A:7B:AC:E5:DF:F3:BD:2D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3135353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:155::/80

    Signature Algorithm: sha256WithRSAEncryption
         94:55:f3:63:1e:26:82:3a:92:55:8c:0b:31:f5:39:2f:08:95:
         31:c5:8b:e1:e9:43:f8:0b:e5:cc:69:ce:d0:14:2f:42:26:56:
         04:92:63:37:82:98:41:c1:db:e7:0d:b6:73:3d:5c:c1:24:3e:
         af:12:ba:3f:9d:0e:50:50:60:51:ed:4e:f2:23:fb:4a:9a:52:
         4c:57:f9:4d:10:fc:fc:e3:45:d5:84:a7:00:ac:04:f9:95:86:
         7d:04:c4:a0:84:39:be:06:a3:9b:24:9a:e8:ce:44:e7:4f:1d:
         bd:25:9f:c8:28:af:9f:4f:3e:bc:79:58:ea:fb:91:01:9c:e3:
         d2:2d:35:27:78:84:6b:77:e2:af:01:4c:1f:f0:ca:6c:f1:8c:
         cf:6d:dc:a9:2c:05:91:e7:1a:54:3f:59:8b:1c:52:7f:90:11:
         7b:c5:21:36:d6:24:fb:c8:da:c4:d1:53:08:e7:d2:af:63:6b:
         ad:c7:5e:4a:bd:5e:98:8d:ca:d6:d8:91:18:2d:d3:0e:68:5e:
         a1:47:75:cf:32:2d:8b:90:55:97:a4:30:df:db:e7:4d:c4:81:
         3a:80:2b:0d:6f:c8:9b:f9:ba:5d:6d:92:99:8f:d6:18:e6:dc:
         3b:0f:76:de:e3:43:4b:d6:08:dc:bb:ef:ab:cf:7e:33:25:b2:
         81:23:e8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----