Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313832303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a313832303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          UlT7+4YTRtDUYiKP6EBiN3yFXYB3cF00m/Qc3MzDQbI=
Subject key identifier:   29:57:3D:B7:0E:AF:6B:DF:5C:9C:27:2F:19:7B:36:59:44:9C:54:BC
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5FA9DAC9456800A0A27A25084ADD9DF494B1A53A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313832303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 18:20:01 +0000
ROA not before:           Sun 20 Feb 2022 18:15:01 +0000
ROA not after:            Sun 19 Feb 2023 18:20:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:1820::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a9:da:c9:45:68:00:a0:a2:7a:25:08:4a:dd:9d:f4:94:b1:a5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 18:15:01 2022 GMT
            Not After : Feb 19 18:20:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:13:04:d0:d3:a1:b6:e6:49:45:f3:5f:41:
                    bf:da:6a:da:31:9e:19:9d:d8:97:9c:e6:0e:e0:43:
                    e8:b4:7f:7a:2f:8a:46:d4:9c:f7:bd:45:ea:66:1d:
                    ce:02:b4:50:6f:43:6e:31:e6:3c:b6:40:6b:dd:57:
                    17:b6:7f:56:3a:1e:65:d5:d8:47:fa:e3:94:24:41:
                    e0:92:88:75:b4:49:84:4f:a1:60:15:09:69:24:2c:
                    d1:da:5f:37:c1:3a:42:80:d1:ec:5a:bb:fe:30:4a:
                    ab:27:c4:2d:66:b6:2d:a0:3d:f8:1b:67:52:b2:ec:
                    eb:03:ea:3a:0f:48:51:b0:73:3d:25:fb:a1:13:c2:
                    d7:51:b2:7b:90:67:1d:36:2f:89:3c:2e:cf:fc:ab:
                    7f:43:a9:a1:a6:96:49:83:fd:10:3d:49:21:fe:8f:
                    28:d8:72:b3:16:90:99:27:c8:da:97:0d:be:e3:2e:
                    1d:7e:d0:ab:ab:66:c9:ff:e7:03:19:79:91:6a:4b:
                    66:cf:26:43:00:8f:97:71:6c:92:90:26:f3:fa:15:
                    70:22:a4:e1:42:d5:f8:0a:bb:6c:7a:6c:6d:cd:16:
                    e6:0e:fd:8f:7c:7f:12:b9:21:f0:8c:54:b3:79:75:
                    49:70:04:46:da:e6:ef:b7:82:fb:c2:42:8f:9d:cb:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:57:3D:B7:0E:AF:6B:DF:5C:9C:27:2F:19:7B:36:59:44:9C:54:BC
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313832303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:1820::/80

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:e3:27:80:e2:a9:43:04:13:56:1e:5a:73:14:28:ca:22:
         39:60:0d:52:9c:92:02:0d:6b:69:9f:1c:7e:d9:ea:d7:06:b1:
         f2:94:d9:52:2d:fe:99:a7:fe:3d:01:8f:33:ef:c1:27:bc:ff:
         e0:ce:28:ca:17:70:06:45:b5:be:6f:4b:f3:1b:ae:47:c3:c7:
         3e:44:29:3e:82:96:20:bf:61:5c:9c:f7:bc:4a:97:e5:2d:8e:
         df:8c:b6:c9:fe:26:bf:95:d5:d7:15:b5:ac:0f:99:0e:dd:85:
         a8:bb:ab:9b:38:49:43:bb:32:bc:37:ac:ad:5d:43:50:98:ec:
         f6:c3:5e:7b:0a:32:5a:b0:98:b2:4d:f1:4c:f4:b2:34:47:e3:
         55:4e:8d:54:c4:6a:16:42:da:48:3d:8e:39:88:1d:99:85:43:
         97:f5:32:07:2b:90:4f:e4:20:4b:cc:b6:c1:7e:6b:04:9a:5b:
         22:31:c2:f7:5c:3f:0c:ba:3e:18:99:9a:cf:61:52:6a:67:94:
         41:3b:4d:58:75:89:d8:97:0a:86:6b:12:01:d9:60:63:2e:ee:
         34:fe:30:96:d1:cf:2f:15:6d:46:28:62:8e:53:83:91:64:81:
         88:c9:4e:9f:82:cf:56:8a:63:19:32:73:e3:90:13:70:82:95:
         36:9a:6b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----