Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3535353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232313a3535353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          DzGIfeICKHmiFzq4nlMhRacpVlbXXyHvausgEjuDCNw=
Subject key identifier:   E6:AA:A4:EA:9E:A2:6A:56:FD:00:D9:75:D9:A0:90:AC:20:23:36:0C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4E79ACDAFAD5536665DC1CE781F50CAE3E2AA344
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3535353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 21 Feb 2022 05:55:01 +0000
ROA not before:           Mon 21 Feb 2022 05:50:01 +0000
ROA not after:            Mon 20 Feb 2023 05:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:221:555::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:79:ac:da:fa:d5:53:66:65:dc:1c:e7:81:f5:0c:ae:3e:2a:a3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 21 05:50:01 2022 GMT
            Not After : Feb 20 05:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:a1:ea:02:b4:d8:15:34:a5:30:ff:83:bd:
                    23:b9:a0:8c:1f:d2:b8:3e:02:27:82:e2:5b:66:99:
                    90:70:14:a0:6c:9f:74:69:24:29:16:98:bc:2c:18:
                    37:c9:f7:e0:01:e5:5c:65:e1:49:44:c1:c3:7a:5b:
                    da:f1:6a:dd:00:48:44:11:e4:63:b6:34:0f:2c:ba:
                    0f:d4:e5:84:b5:f7:e0:47:e9:d3:4f:08:dc:92:ca:
                    cb:34:aa:63:a6:b1:78:39:5f:7d:93:39:93:86:1f:
                    4a:4e:e7:25:b0:bd:eb:78:0e:08:d9:73:9a:1e:41:
                    2d:34:53:8b:2b:dc:3b:74:e4:8e:16:66:1a:43:a0:
                    0d:e9:33:80:ed:58:19:fd:1c:60:91:40:0c:8c:74:
                    d7:e6:fe:71:b5:63:c2:07:01:ed:ba:5e:66:63:0f:
                    6d:24:78:dc:05:fc:28:86:02:41:6f:2e:cf:b5:e7:
                    c6:66:05:b7:8d:ef:6f:db:91:05:6e:fd:7a:cf:ea:
                    15:e2:3b:3c:4a:70:07:ea:2a:a5:e9:86:27:4d:53:
                    12:c7:25:57:12:ef:06:d3:f4:ac:1f:36:88:d1:a6:
                    7b:89:72:5f:59:74:a6:e6:09:e9:07:07:02:22:56:
                    52:c7:6a:86:4d:65:16:4b:62:67:ff:fd:cd:08:49:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AA:A4:EA:9E:A2:6A:56:FD:00:D9:75:D9:A0:90:AC:20:23:36:0C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3535353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:221:555::/80

    Signature Algorithm: sha256WithRSAEncryption
         d0:8d:95:61:5b:e5:60:36:7b:e4:2b:d0:cd:c7:35:65:f6:05:
         f6:69:00:f2:91:2e:03:66:5b:53:c5:d7:f0:6b:c2:7c:df:c0:
         68:12:05:a9:0f:75:73:a5:98:a2:56:ed:21:14:b4:04:6d:f3:
         de:3c:2e:60:83:45:3d:2c:60:9e:3f:ae:c6:26:30:60:0a:ff:
         a2:be:fc:fb:75:9a:46:a9:1c:da:02:6a:73:3c:1b:2b:c1:4f:
         01:b5:43:08:29:1d:0c:ab:db:da:14:1b:cb:47:23:f2:6e:24:
         67:77:f4:93:a0:5a:1f:d4:1b:3f:3d:d5:99:b4:b3:fc:a0:d5:
         1c:c7:a6:a7:22:26:4a:3c:01:39:53:c0:f4:00:fd:bb:a2:3f:
         56:ea:d9:3f:34:3d:21:0f:b1:4b:c8:84:3d:5d:fb:47:30:89:
         47:c8:3e:b3:07:40:07:70:04:8c:60:3d:09:ce:0e:f6:00:34:
         59:51:6e:7a:69:dc:c8:55:33:89:36:75:4f:93:92:0b:95:fb:
         58:72:8d:5c:32:de:c1:41:e0:8e:27:2f:2f:89:84:aa:c8:96:
         0a:bd:c1:d9:a2:7f:b1:f5:24:e7:62:ae:fb:06:81:52:9e:f1:
         cb:34:29:02:74:d4:45:1d:d8:1b:db:cd:5b:3e:2f:ad:8f:1f:
         67:e0:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----