Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a313134353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232313a313134353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          6ChGz2X9cPUr2YRFPAWb+32Dfe3zEn0Vy8LhpzaCTng=
Subject key identifier:   99:20:71:34:19:9C:DB:B9:21:E7:28:8E:50:74:3A:A0:D1:3A:EA:BA
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0D48B3FC5EEBD029959E86E4E8BA57DF8A2E8096
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a313134353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 21 Feb 2022 11:45:32 +0000
ROA not before:           Mon 21 Feb 2022 11:40:32 +0000
ROA not after:            Mon 20 Feb 2023 11:45:32 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:221:1145::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:48:b3:fc:5e:eb:d0:29:95:9e:86:e4:e8:ba:57:df:8a:2e:80:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 21 11:40:32 2022 GMT
            Not After : Feb 20 11:45:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1a:c9:d5:88:fd:b1:af:ed:40:66:3a:95:f5:
                    78:bb:17:ae:22:39:ad:0d:6e:43:fe:a6:42:31:5d:
                    d8:99:46:9a:a9:f1:ba:af:3f:03:f9:db:50:9f:64:
                    89:e6:ca:f2:02:d1:4d:48:fb:fa:3e:d6:b8:14:1c:
                    7e:d7:0e:9a:21:68:79:ab:4e:ae:7d:6f:e6:06:68:
                    ba:72:1d:a7:6c:e0:09:28:16:36:ea:9c:07:8b:44:
                    a2:a0:4a:81:3c:93:ec:48:47:e5:ad:bf:22:f0:c6:
                    6d:6b:1e:4e:d6:09:52:b3:ac:a8:3b:84:4c:80:2e:
                    22:17:8a:05:0e:2b:d6:48:ee:dc:eb:81:5d:6d:6d:
                    64:94:9a:cb:bd:bd:9a:d6:65:50:8d:66:a0:04:d1:
                    32:20:f9:d5:81:7a:35:c1:90:10:04:c8:ec:30:dc:
                    f6:e6:9b:8f:85:35:cb:21:88:65:12:a0:be:0b:7d:
                    db:c7:8c:e1:ca:61:50:a6:61:81:12:0e:4f:db:77:
                    f2:4b:b0:09:22:ec:d1:4a:b9:5a:57:a3:0b:b6:df:
                    78:c3:c6:8f:e6:b6:65:da:cf:c0:e1:b4:04:6b:8f:
                    df:06:0a:8b:ff:02:42:7b:15:a6:68:dd:08:3c:6f:
                    3d:d3:f7:96:f2:6f:19:08:77:ee:37:52:89:b2:b5:
                    09:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:20:71:34:19:9C:DB:B9:21:E7:28:8E:50:74:3A:A0:D1:3A:EA:BA
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a313134353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:221:1145::/80

    Signature Algorithm: sha256WithRSAEncryption
         ac:08:f5:fd:53:6d:ec:ae:b3:e0:42:99:54:4d:81:b9:09:c9:
         81:9b:e0:cb:65:bc:47:18:51:ea:d5:53:54:62:14:4f:21:b4:
         3b:9a:0a:31:91:3d:14:57:fd:90:c1:fd:42:c9:bf:34:8e:c3:
         34:61:41:96:f7:b9:fc:14:4c:bf:ab:3f:63:78:e7:35:0d:e4:
         11:e3:8b:17:44:9d:82:6c:bb:de:11:86:72:e8:06:ac:4f:c2:
         95:ee:f2:d8:34:e0:a4:91:00:ae:2b:aa:ff:9b:ed:88:83:43:
         55:2e:7e:e7:25:29:47:fd:ef:17:0e:8d:58:2d:71:35:2c:c9:
         71:1a:d1:11:26:10:2b:55:8f:6e:69:92:0d:ae:7f:8e:4b:94:
         f4:2c:64:eb:64:2e:6e:39:bd:7b:0c:99:5f:46:1a:ce:71:66:
         28:88:e8:b6:39:6a:b7:42:13:09:a6:c2:cb:ca:7c:fd:45:d5:
         4b:56:13:ea:19:ec:d5:1a:d1:53:8d:1a:72:71:a9:3a:1e:5f:
         fa:d4:3c:78:f1:9d:ce:0a:cc:c5:75:9a:a4:2e:3c:0e:ff:24:
         31:30:22:c1:f6:99:dc:d3:21:b7:ce:40:e7:09:3f:68:de:dc:
         0e:57:9a:78:68:bd:24:e7:96:2e:54:a6:a4:2e:7c:32:09:1e:
         23:ce:d1:cf
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUDUiz/F7r0CmVnobk6LpX34ougJYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjIxMTE0MDMyWhcNMjMwMjIwMTE0NTMy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEUwMUFDOUQ1
ODhGREIxQUZFRDQwNjYzQTk1RjU3OEJCMTdBRTIyMzlBRDBENkU0M0ZFQTY0MjMx
NUREODk5NDY5QUE5RjFCQUFGM0YwM0Y5REI1MDlGNjQ4OUU2Q0FGMjAyRDE0RDQ4
RkJGQTNFRDZCODE0MUM3RUQ3MEU5QTIxNjg3OUFCNEVBRTdENkZFNjA2NjhCQTcy
MURBNzZDRTAwOTI4MTYzNkVBOUMwNzhCNDRBMkEwNEE4MTNDOTNFQzQ4NDdFNUFE
QkYyMkYwQzY2RDZCMUU0RUQ2MDk1MkIzQUNBODNCODQ0QzgwMkUyMjE3OEEwNTBF
MkJENjQ4RUVEQ0VCODE1RDZENkQ2NDk0OUFDQkJEQkQ5QUQ2NjU1MDhENjZBMDA0
RDEzMjIwRjlENTgxN0EzNUMxOTAxMDA0QzhFQzMwRENGNkU2OUI4Rjg1MzVDQjIx
ODg2NTEyQTBCRTBCN0REQkM3OENFMUNBNjE1MEE2NjE4MTEyMEU0RkRCNzdGMjRC
QjAwOTIyRUNEMTRBQjk1QTU3QTMwQkI2REY3OEMzQzY4RkU2QjY2NURBQ0ZDMEUx
QjQwNDZCOEZERjA2MEE4QkZGMDI0MjdCMTVBNjY4REQwODNDNkYzREQzRjc5NkYy
NkYxOTA4NzdFRTM3NTI4OUIyQjUwOTM5MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOAaydWI/bGv7UBmOpX1eLsXriI5rQ1uQ/6mQjFd
2JlGmqnxuq8/A/nbUJ9kiebK8gLRTUj7+j7WuBQcftcOmiFoeatOrn1v5gZounId
p2zgCSgWNuqcB4tEoqBKgTyT7EhH5a2/IvDGbWseTtYJUrOsqDuETIAuIheKBQ4r
1kju3OuBXW1tZJSay729mtZlUI1moATRMiD51YF6NcGQEATI7DDc9uabj4U1yyGI
ZRKgvgt928eM4cphUKZhgRIOT9t38kuwCSLs0Uq5WlejC7bfeMPGj+a2ZdrPwOG0
BGuP3wYKi/8CQnsVpmjdCDxvPdP3lvJvGQh37jdSibK1CTkCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBSZIHE0GZzbuSHnKI5QdDqg0TrqujAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMyMzEzYTMxMzEzNDM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAiERRTANBgkqhkiG
9w0BAQsFAAOCAQEArAj1/VNt7K6z4EKZVE2BuQnJgZvgy2W8RxhR6tVTVGIUTyG0
O5oKMZE9FFf9kMH9Qsm/NI7DNGFBlve5/BRMv6s/Y3jnNQ3kEeOLF0Sdgmy73hGG
cugGrE/Cle7y2DTgpJEAriuq/5vtiINDVS5+5yUpR/3vFw6NWC1xNSzJcRrRESYQ
K1WPbmmSDa5/jkuU9Cxk62Qubjm9ewyZX0YaznFmKIjotjlqt0ITCabCy8p8/UXV
S1YT6hns1RrRU40acnGpOh5f+tQ8ePGdzgrMxXWapC48Dv8kMTAiwfaZ3NMht85A
5wk/aN7cDleaeGi9JOeWLlSmpC58MgkeI87Rzw==
-----END CERTIFICATE-----