Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3332353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a3332353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          SuXxIL0Gs7+U6A+rlSKKv2aKo+/VGaaExPvKla02P3o=
Subject key identifier:   B4:B5:82:2D:ED:9E:00:A1:5C:C8:B5:3A:87:78:D0:61:C8:63:BD:2D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       291E62A7511A5187CB40CA6797AD0BB2660ABE83
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3332353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 03:25:57 +0000
ROA not before:           Sun 20 Feb 2022 03:20:57 +0000
ROA not after:            Sun 19 Feb 2023 03:25:57 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:325::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1e:62:a7:51:1a:51:87:cb:40:ca:67:97:ad:0b:b2:66:0a:be:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 03:20:57 2022 GMT
            Not After : Feb 19 03:25:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:64:04:5a:24:1a:ef:94:4c:1a:23:5b:29:
                    f1:bf:bf:1d:71:e8:60:3d:d3:6f:15:04:10:60:af:
                    b4:fc:f5:e0:2d:03:64:ea:fd:cf:fd:96:3b:2c:0d:
                    78:a9:40:79:1c:7c:bd:85:2a:72:0e:ee:6c:3e:56:
                    32:65:aa:a6:8f:a6:a7:61:4a:7b:25:f5:20:51:f4:
                    7c:eb:17:88:11:00:d7:9a:cd:cf:6b:88:7f:ad:cb:
                    e3:fb:e9:72:76:40:7e:92:a4:ea:0d:c4:0d:a7:9e:
                    d4:a7:77:a5:ba:47:38:e7:82:d9:66:fa:b2:43:09:
                    8f:45:5a:12:7b:ca:c2:89:4d:1d:f0:36:00:d3:f7:
                    98:34:63:99:f8:e5:13:c5:d8:42:d9:86:9d:a7:50:
                    bf:54:39:a6:e0:a6:5e:18:85:9b:f8:d2:28:f7:11:
                    93:e8:c9:e5:c1:ee:df:76:b2:47:b3:eb:28:e4:69:
                    fe:85:58:38:a6:21:a2:e7:8b:3a:96:99:88:bc:7b:
                    db:74:0e:3c:25:7f:bb:1c:b6:69:b4:ec:6f:1f:72:
                    68:59:36:b2:1c:08:7b:a4:46:9d:44:8e:0e:08:71:
                    3c:b9:42:85:2c:da:01:f7:f4:8c:0c:48:f5:bf:6e:
                    e5:38:89:2f:62:dd:8e:ee:7a:4f:41:ec:fb:87:99:
                    ca:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B5:82:2D:ED:9E:00:A1:5C:C8:B5:3A:87:78:D0:61:C8:63:BD:2D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3332353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:325::/80

    Signature Algorithm: sha256WithRSAEncryption
         a7:1c:54:f3:90:75:2b:c5:50:9a:53:aa:ff:0c:f0:0c:ac:0d:
         7f:e5:ec:e7:67:bc:49:92:2a:d1:99:b3:31:1a:d6:c8:0f:e5:
         64:0d:a5:5f:b2:43:19:7f:71:bb:18:83:27:a6:8c:81:66:0a:
         2d:80:c8:95:60:24:6b:04:61:4d:f4:49:44:00:36:d9:72:8b:
         6b:e8:e7:c9:69:c2:00:b2:f5:ea:3c:a1:b6:13:98:40:e6:a2:
         3a:50:c4:61:e3:7c:8a:e7:9f:2c:6e:6a:7e:3d:d2:68:a1:d6:
         40:15:56:9b:0b:18:1a:07:f4:65:66:fb:94:99:0b:d2:91:30:
         4d:30:3a:6a:ba:80:c2:4e:18:73:e3:a9:b2:db:68:33:4f:d0:
         56:be:88:39:d2:df:ae:1b:6a:72:e9:11:c6:86:41:a0:ca:65:
         6b:fb:d5:88:d3:8b:13:15:1d:b5:c9:88:fc:60:4b:e7:9b:1c:
         a1:67:2b:25:e8:63:d6:1f:b6:ae:b3:6c:75:f6:9f:dd:86:fb:
         f8:f6:9d:73:3f:51:c6:83:96:ed:d7:df:8c:b0:c0:2b:30:e7:
         18:d0:ea:dd:4c:93:db:e8:b3:da:92:ac:c4:d4:c2:99:3f:3f:
         8f:f1:33:ab:a0:0c:bf:39:10:e7:dc:e9:77:d8:05:a8:7c:c9:
         de:3e:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----