Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3635353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a3635353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          7W31xytT3FkecGJaeS58Qe65twfH1D8IfySm0CaImAU=
Subject key identifier:   9C:42:0E:DD:B3:C7:C2:55:8D:7D:26:2C:D1:45:24:57:E7:CA:84:74
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4033AE14982A5B8BF0424D040261FEEDA18D744F
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3635353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 06:55:02 +0000
ROA not before:           Sun 20 Feb 2022 06:50:02 +0000
ROA not after:            Sun 19 Feb 2023 06:55:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:655::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:33:ae:14:98:2a:5b:8b:f0:42:4d:04:02:61:fe:ed:a1:8d:74:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 06:50:02 2022 GMT
            Not After : Feb 19 06:55:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e4:00:4a:05:87:ca:49:ba:fd:1b:b5:39:4d:
                    f7:68:be:b8:f2:78:31:23:8b:72:03:f3:a9:24:dd:
                    ec:2c:56:b9:97:e8:1b:ff:7e:73:14:00:c9:53:2d:
                    33:7f:e3:23:0f:79:0a:66:1a:b9:f6:42:12:53:ed:
                    da:5f:ce:5c:c6:ee:43:e8:06:b4:38:75:2d:2f:35:
                    6c:10:51:39:df:c7:f7:f5:3b:01:45:f2:e0:09:45:
                    15:bf:2b:88:b0:c8:69:bf:d9:43:97:a7:49:b0:53:
                    ac:92:39:c7:50:0c:b7:81:84:56:77:0c:20:5e:93:
                    a7:1a:76:fe:80:57:ef:4c:fd:93:15:c6:2f:7d:1b:
                    8d:e2:e1:65:99:30:1a:49:35:a9:20:db:c3:7a:82:
                    f7:f3:a7:a3:1b:ee:52:e1:19:29:f9:3b:e3:d0:45:
                    c9:3d:b8:a7:db:6f:ea:46:90:d5:8c:f7:39:3c:8b:
                    9c:a8:b0:ef:cc:f2:f4:de:60:cc:14:74:90:18:eb:
                    2b:1c:79:df:03:34:b4:ca:a2:ea:02:79:69:79:34:
                    27:58:f5:dd:ad:f5:25:6a:85:71:7f:58:6a:12:4f:
                    28:06:d3:3b:25:30:c8:42:44:91:d4:3d:72:2e:7d:
                    1d:54:d4:af:e8:28:5b:21:b4:8d:11:27:0e:17:ec:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:42:0E:DD:B3:C7:C2:55:8D:7D:26:2C:D1:45:24:57:E7:CA:84:74
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3635353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:655::/80

    Signature Algorithm: sha256WithRSAEncryption
         21:4f:91:89:ca:11:05:aa:cc:08:47:81:d5:8a:3b:12:15:52:
         88:16:c8:e5:18:1f:18:73:a2:50:43:7c:e6:a9:81:7a:02:25:
         24:bd:b4:2c:7a:cc:96:2f:74:da:33:b9:75:6f:b4:1a:2c:6e:
         90:78:9f:09:21:2d:47:40:38:17:a2:e2:6b:7f:21:4c:1d:06:
         c8:38:96:8a:cd:18:f7:e5:88:c2:ee:d2:cd:61:2a:9d:23:0f:
         15:99:a3:03:a9:60:da:ed:0e:f3:70:74:69:9c:fe:ba:26:e1:
         8c:0a:01:72:44:3c:38:37:15:ed:e6:92:c6:8f:20:f0:9a:a5:
         13:13:85:68:c9:d9:49:cd:dd:e0:b9:af:09:18:f9:b5:22:c5:
         e7:e0:09:d8:a8:74:f2:1a:af:30:f4:ac:4f:e3:88:d4:5f:b6:
         10:87:0e:dd:08:62:1c:6a:90:0d:e3:00:47:01:b3:7c:e9:ed:
         5d:b8:59:52:a2:c7:d9:70:20:b6:e7:16:6d:28:86:c8:5e:d2:
         6a:72:eb:93:4b:63:c2:b1:7e:1b:a1:3c:7d:7b:1b:ed:78:e6:
         55:99:55:de:c9:52:26:6d:10:01:4d:1b:72:87:a5:30:44:83:
         8f:85:79:b9:8a:01:2c:5f:9a:50:20:35:a2:90:0a:09:eb:63:
         d7:66:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----