Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a35353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232313a35353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          w/XIxEQD7738navIwjBBzG/IrlSqz+f7IUG0dbh9XCc=
Subject key identifier:   D9:29:00:E3:90:D0:E5:D0:05:6B:B5:88:D9:1A:94:D7:A6:05:FF:6A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       79FCF7106F1C34038E62585CBD0783ADBA06A2CD
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a35353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 21 Feb 2022 00:55:06 +0000
ROA not before:           Mon 21 Feb 2022 00:50:06 +0000
ROA not after:            Mon 20 Feb 2023 00:55:06 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:221:55::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fc:f7:10:6f:1c:34:03:8e:62:58:5c:bd:07:83:ad:ba:06:a2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 21 00:50:06 2022 GMT
            Not After : Feb 20 00:55:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:a4:cf:ac:32:dc:c7:9e:05:22:e9:d1:f6:
                    ad:d1:1d:67:95:52:74:c0:40:5f:55:2e:f8:7e:67:
                    a9:e6:34:1b:d5:22:dd:4f:66:77:56:16:e5:c6:33:
                    b9:3d:06:52:43:f3:16:2d:ab:01:f4:4d:de:b1:a6:
                    21:6a:96:55:88:cb:38:79:b0:0d:cf:1b:6c:6b:1f:
                    01:eb:02:1e:ad:00:1a:9c:e5:21:82:0f:10:84:0d:
                    fa:d0:55:a6:9b:7a:fc:44:2f:5b:ec:c0:7f:36:b2:
                    73:32:8e:28:f4:c6:2b:06:2e:89:ad:42:c4:16:fd:
                    53:26:32:a9:d3:db:92:e1:a2:2d:29:89:90:8f:08:
                    51:bd:cc:20:79:8b:12:71:20:5b:00:e6:75:25:50:
                    10:53:4e:8e:c4:3f:96:d9:16:02:a5:7d:35:05:24:
                    ae:3f:0c:fc:a8:42:c9:e2:d0:0c:d7:c6:76:46:d5:
                    2d:f7:a6:c6:0f:d3:f9:3e:08:3c:e0:c6:b3:f6:e5:
                    03:fa:90:47:06:bc:c7:34:1f:6a:17:91:ac:a5:10:
                    5e:76:f0:59:58:05:51:2f:e1:12:49:1e:be:ba:2d:
                    30:2a:32:b4:ff:5e:4b:7c:4f:a1:72:6f:b4:56:52:
                    75:35:73:ca:22:f7:31:bb:38:a4:12:a6:a2:10:8a:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:29:00:E3:90:D0:E5:D0:05:6B:B5:88:D9:1A:94:D7:A6:05:FF:6A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a35353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:221:55::/80

    Signature Algorithm: sha256WithRSAEncryption
         34:0a:e5:1e:39:c5:91:89:e4:77:88:5d:4e:f7:25:58:6a:5e:
         8e:34:2b:21:66:5d:70:2c:bd:69:ff:13:44:ef:63:b8:ca:a0:
         f0:87:42:fb:a6:f9:ee:a9:fb:87:fa:7a:4c:ed:bb:30:22:1a:
         76:39:c2:92:3a:a8:55:25:0e:ea:a6:c1:34:c3:aa:fe:6b:09:
         f6:fa:5e:6e:09:0e:7a:29:47:33:e1:23:e5:c8:0d:dc:f2:57:
         e3:60:1f:48:5a:ef:eb:92:46:70:66:91:5b:19:1f:83:54:89:
         f1:e6:0f:45:f2:04:94:8d:fe:af:85:c2:17:b0:65:2d:a5:31:
         6b:b9:78:59:9e:0f:7e:98:03:01:eb:cf:1f:55:1f:4e:19:6d:
         69:8a:ea:8d:e1:3d:0c:6d:81:ec:d4:dd:1c:74:4b:56:4a:7d:
         69:e6:39:71:2c:b3:ae:14:d4:8a:01:6b:f1:bc:23:79:2c:2f:
         6f:3e:81:04:9e:8d:02:b5:97:61:cb:70:ef:1c:ee:22:ef:23:
         8a:82:9e:b0:f1:1b:18:e0:7b:b8:b1:2d:15:82:e9:a4:70:ff:
         24:69:64:5c:9b:a9:0d:97:33:69:07:87:5f:2d:42:31:c4:cd:
         36:10:fd:7b:8f:bc:57:39:81:53:6f:81:9b:42:e1:d2:42:eb:
         7d:ea:02:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----