Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313630353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a313630353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Sl5edwKf8KsSaJJrI27Liu7YDKjuUMyY7jdeBbCvch4=
Subject key identifier:   27:D1:51:B8:7C:25:16:10:85:D9:11:9E:45:2B:C6:C0:CA:DC:28:B4
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5B196EF72580B842B047C2E71EC4B6993AAD4212
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313630353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 16:05:03 +0000
ROA not before:           Sun 20 Feb 2022 16:00:03 +0000
ROA not after:            Sun 19 Feb 2023 16:05:03 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:1605::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:19:6e:f7:25:80:b8:42:b0:47:c2:e7:1e:c4:b6:99:3a:ad:42:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 16:00:03 2022 GMT
            Not After : Feb 19 16:05:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:49:ee:e9:cc:fd:65:32:39:2c:98:c4:5e:
                    58:17:7a:46:b9:fb:c9:48:52:a3:b1:97:ca:94:82:
                    9a:cc:56:1d:7c:40:f9:01:4c:f1:d2:f5:ac:0b:4b:
                    ff:16:6e:c3:92:1b:15:7a:19:46:32:9b:b1:34:29:
                    0e:48:3e:3f:b7:4f:d5:48:ee:92:bd:46:9d:a0:e7:
                    45:ff:69:64:cf:69:50:55:5a:42:1d:ef:85:0c:52:
                    0a:ee:91:e0:b0:85:67:6b:3a:a7:90:e0:5c:f6:47:
                    51:92:ab:ea:a4:04:a3:c1:84:bb:98:f5:4e:66:86:
                    17:fc:5e:a6:c2:ac:08:27:ce:a8:af:2a:92:03:c7:
                    a5:c0:f1:af:81:ea:b7:ad:6b:50:d8:91:f9:73:af:
                    52:31:66:28:6d:39:71:77:53:cd:b2:d6:34:32:95:
                    7a:37:3c:42:54:2e:f7:4e:c2:89:65:ef:eb:c3:ff:
                    40:2d:89:52:c3:63:8f:7e:b8:54:2f:f5:e1:82:1f:
                    39:0e:c7:37:7c:e9:af:f8:5b:0f:33:2e:d1:d0:20:
                    6e:8a:3b:97:66:9d:31:31:98:b4:38:ba:bf:7a:01:
                    b9:69:b8:e8:24:44:b4:58:68:bc:5f:89:86:9c:c9:
                    8f:28:bc:28:36:bf:08:3d:cf:3b:f0:c0:15:8f:bf:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:51:B8:7C:25:16:10:85:D9:11:9E:45:2B:C6:C0:CA:DC:28:B4
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313630353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:1605::/80

    Signature Algorithm: sha256WithRSAEncryption
         9b:c1:86:58:31:3f:6c:54:e5:9f:f8:14:8b:3a:5e:4e:4d:2f:
         ec:de:06:0e:be:90:c1:de:19:6f:99:b6:52:e9:75:cf:17:50:
         b3:6c:38:62:74:a0:ed:bc:ef:75:07:2d:19:80:56:74:71:b9:
         76:63:af:01:ff:03:35:33:3f:cb:dc:1c:64:25:a3:8d:10:6e:
         45:d6:67:d5:ac:c6:63:44:7a:05:eb:a5:dd:52:e6:09:d0:e9:
         96:e6:95:57:4e:c9:b5:74:47:1b:5b:cd:4d:68:da:9e:0a:5e:
         c6:5f:f6:d9:97:e6:5d:33:e6:a8:1c:69:b2:08:3a:ad:1a:23:
         d2:96:e3:9c:de:5e:3f:bb:0f:1a:a5:a2:11:a1:73:a3:a3:b5:
         25:ac:dd:a6:bd:f1:b9:d7:60:b7:b7:39:88:f0:53:1a:aa:af:
         b8:d7:d8:1c:a0:00:ff:b3:25:17:1e:83:12:ce:06:0c:10:89:
         c9:17:72:78:5a:f4:76:5f:13:5a:9c:ee:52:da:d7:65:c0:8f:
         d3:7e:30:77:1b:d5:db:16:d6:87:a5:19:c5:59:b4:61:ee:0e:
         a2:94:4c:75:b9:50:6e:d4:33:d4:51:37:ed:9f:bd:50:91:8d:
         04:52:08:a8:19:14:c7:89:6e:83:51:9d:e7:1c:d5:a7:c2:ae:
         59:4f:e5:13
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUWxlu9yWAuEKwR8LnHsS2mTqtQhIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjIwMTYwMDAzWhcNMjMwMjE5MTYwNTAz
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMDkyMUU0OUVF
RTlDQ0ZENjUzMjM5MkM5OEM0NUU1ODE3N0E0NkI5RkJDOTQ4NTJBM0IxOTdDQTk0
ODI5QUNDNTYxRDdDNDBGOTAxNENGMUQyRjVBQzBCNEJGRjE2NkVDMzkyMUIxNTdB
MTk0NjMyOUJCMTM0MjkwRTQ4M0UzRkI3NEZENTQ4RUU5MkJENDY5REEwRTc0NUZG
Njk2NENGNjk1MDU1NUE0MjFERUY4NTBDNTIwQUVFOTFFMEIwODU2NzZCM0FBNzkw
RTA1Q0Y2NDc1MTkyQUJFQUE0MDRBM0MxODRCQjk4RjU0RTY2ODYxN0ZDNUVBNkMy
QUMwODI3Q0VBOEFGMkE5MjAzQzdBNUMwRjFBRjgxRUFCN0FENkI1MEQ4OTFGOTcz
QUY1MjMxNjYyODZEMzk3MTc3NTNDREIyRDYzNDMyOTU3QTM3M0M0MjU0MkVGNzRF
QzI4OTY1RUZFQkMzRkY0MDJEODk1MkMzNjM4RjdFQjg1NDJGRjVFMTgyMUYzOTBF
QzczNzdDRTlBRkY4NUIwRjMzMkVEMUQwMjA2RThBM0I5NzY2OUQzMTMxOThCNDM4
QkFCRjdBMDFCOTY5QjhFODI0NDRCNDU4NjhCQzVGODk4NjlDQzk4RjI4QkMyODM2
QkYwODNEQ0YzQkYwQzAxNThGQkZEMkYxMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJIeSe7pzP1lMjksmMReWBd6Rrn7yUhSo7GXypSC
msxWHXxA+QFM8dL1rAtL/xZuw5IbFXoZRjKbsTQpDkg+P7dP1Ujukr1GnaDnRf9p
ZM9pUFVaQh3vhQxSCu6R4LCFZ2s6p5DgXPZHUZKr6qQEo8GEu5j1TmaGF/xepsKs
CCfOqK8qkgPHpcDxr4Hqt61rUNiR+XOvUjFmKG05cXdTzbLWNDKVejc8QlQu907C
iWXv68P/QC2JUsNjj364VC/14YIfOQ7HN3zpr/hbDzMu0dAgboo7l2adMTGYtDi6
v3oBuWm46CREtFhovF+JhpzJjyi8KDa/CD3PO/DAFY+/0vECAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQn0VG4fCUWEIXZEZ5FK8bAytwotDAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMyMzAzYTMxMzYzMDM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAiAWBTANBgkqhkiG
9w0BAQsFAAOCAQEAm8GGWDE/bFTln/gUizpeTk0v7N4GDr6Qwd4Zb5m2Uul1zxdQ
s2w4YnSg7bzvdQctGYBWdHG5dmOvAf8DNTM/y9wcZCWjjRBuRdZn1azGY0R6Beul
3VLmCdDpluaVV07JtXRHG1vNTWjangpexl/22ZfmXTPmqBxpsgg6rRoj0pbjnN5e
P7sPGqWiEaFzo6O1Jazdpr3xuddgt7c5iPBTGqqvuNfYHKAA/7MlFx6DEs4GDBCJ
yRdyeFr0dl8TWpzuUtrXZcCP034wdxvV2xbWh6UZxVm0Ye4OopRMdblQbtQz1FE3
7Z+9UJGNBFIIqBkUx4lug1Gd5xzVp8KuWU/lEw==
-----END CERTIFICATE-----