Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3232353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232313a3232353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          +7fvK9qGXNJwSfl/LrxlfBmIMbWg1gUWGVaSR3mdXo4=
Subject key identifier:   0B:77:45:CF:F0:77:FF:0B:3A:4F:F8:19:9A:B0:6E:1C:C8:54:55:23
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5291DC8155D9F206777770E074FEACE784092B02
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3232353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 21 Feb 2022 02:25:01 +0000
ROA not before:           Mon 21 Feb 2022 02:20:01 +0000
ROA not after:            Mon 20 Feb 2023 02:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:221:225::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:91:dc:81:55:d9:f2:06:77:77:70:e0:74:fe:ac:e7:84:09:2b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 21 02:20:01 2022 GMT
            Not After : Feb 20 02:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:36:2a:39:b4:1a:05:dc:0d:76:85:6f:b3:
                    b9:ad:51:f6:3b:1f:af:30:2c:b4:a2:11:14:bf:c2:
                    fd:a8:68:56:92:50:54:67:25:fb:a9:0e:a4:6f:6f:
                    c9:71:dd:42:38:d7:60:bb:13:1b:10:e4:04:5b:49:
                    4d:62:db:c1:82:4b:94:65:57:da:d3:56:b0:1e:72:
                    a8:95:a5:5f:e2:99:6f:73:ca:59:1b:af:af:55:77:
                    d4:fb:4b:d1:f6:a2:9b:9c:cd:c2:af:38:0c:75:b1:
                    e0:79:1a:d8:3a:21:a6:4a:d0:fd:18:e9:22:c7:32:
                    19:21:30:76:53:70:2b:6c:6f:3b:95:88:33:6c:5a:
                    38:d3:5c:93:17:c4:6d:a1:a8:b4:22:67:8f:c4:84:
                    f6:5e:2a:32:a4:dd:d6:06:02:cc:ff:68:90:fe:b9:
                    6a:87:06:7f:f7:e3:a6:3b:8d:6c:41:cc:da:ba:5f:
                    e2:d8:44:5e:4f:de:77:7a:23:3e:01:78:95:1d:60:
                    69:7e:41:ca:05:2e:b8:6f:c0:2d:a4:3b:ee:9a:13:
                    11:bf:87:f6:7a:41:78:a6:1e:b7:38:e9:a1:f5:b8:
                    bb:7e:e5:14:3d:6d:d2:b4:3f:d8:f4:4c:31:c7:38:
                    d4:bd:ea:ec:df:53:fe:07:8e:85:0d:9d:77:7e:f7:
                    c6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:77:45:CF:F0:77:FF:0B:3A:4F:F8:19:9A:B0:6E:1C:C8:54:55:23
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3232353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:221:225::/80

    Signature Algorithm: sha256WithRSAEncryption
         69:df:20:39:3d:07:95:2b:a7:bb:77:c4:fe:e1:d4:64:4b:26:
         c3:d0:71:80:59:4b:03:77:69:df:6d:84:5e:14:a7:d5:a2:cf:
         14:84:1b:fc:67:bf:eb:22:06:6f:5b:cc:dd:34:23:c0:a4:b6:
         21:44:c9:be:bc:a9:1f:52:99:11:a3:39:3c:1f:3e:ea:51:25:
         b3:8e:68:36:01:06:99:2e:2a:db:fa:ae:f0:6f:68:ce:be:5a:
         4b:b8:e8:71:9d:96:33:8f:07:6f:cc:11:6a:d9:89:ba:4d:95:
         95:e0:45:0d:fa:d0:7f:30:f6:d0:85:02:e0:b0:26:18:9a:6d:
         05:90:87:d7:46:5f:7f:62:f6:87:cc:b2:b3:70:60:24:0e:62:
         b4:f8:d0:18:f3:b6:58:60:1d:e2:bc:ea:7d:04:13:52:3a:fb:
         44:6b:8b:fd:78:ed:da:96:9a:f2:7e:4f:e4:4c:8f:9c:f0:e3:
         c2:e8:4a:9f:d6:7d:db:f0:22:81:ed:9d:3b:dc:55:6a:8d:35:
         9b:b9:95:21:6d:8d:cb:50:4e:2a:63:d1:83:97:f4:ac:5a:64:
         5c:f2:1b:f8:4d:f7:2c:dd:5a:89:c4:fd:d5:a3:32:4d:1c:ca:
         e4:0a:47:f7:0d:86:33:92:80:9c:77:c8:b2:db:06:a7:2d:91:
         44:3a:58:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----