Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/AS54728.roa
File:                     AS54728.roa (raw, json)
Hash identifier:          oSnh+f0aMWentz025Gni5e+GlJVhib552IY4CRF3eI4=
Subject key identifier:   FF:76:26:A2:08:45:CC:6B:4A:EC:6D:AC:09:97:22:82:9E:38:6B:19
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       738FFB09C0251FD0C8081F315FC20B4B7D72BA5D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/AS54728.roa
Signing time:             Mon 21 Feb 2022 13:35:02 +0000
ROA not before:           Mon 21 Feb 2022 13:30:02 +0000
ROA not after:            Mon 20 Feb 2023 13:35:02 +0000
asID:                     54728
IP address blocks:        2606:4a40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8f:fb:09:c0:25:1f:d0:c8:08:1f:31:5f:c2:0b:4b:7d:72:ba:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 21 13:30:02 2022 GMT
            Not After : Feb 20 13:35:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:34:6b:8b:6f:53:0f:eb:1b:8d:f2:c5:44:ea:
                    28:9d:69:1b:5c:5b:55:36:c6:7f:0e:85:dc:c5:e8:
                    85:95:29:45:09:78:a4:58:3b:c0:97:8f:16:6a:4d:
                    3d:b6:5d:87:a0:9b:80:43:c9:f5:c6:44:7e:1f:c8:
                    c0:ab:45:b6:4d:7e:50:4c:b6:95:fd:4d:73:a2:b6:
                    26:68:ea:28:a2:c0:ae:51:71:4a:8c:39:4e:a3:31:
                    c0:df:91:04:bc:fb:88:a6:ce:db:fa:df:32:36:21:
                    21:d2:a8:d7:e3:fc:30:00:ba:1a:7d:60:68:e0:ef:
                    44:64:7c:ab:ca:1e:19:62:b4:c6:55:b7:0d:4c:d0:
                    bf:ff:fe:aa:2d:58:cf:eb:46:0a:3d:04:7f:35:89:
                    36:8a:a0:e1:53:00:e6:37:c1:9b:01:7e:ed:f7:ba:
                    d4:e9:38:0d:df:88:31:2b:b6:2a:40:a8:5c:d4:6c:
                    3a:27:ea:d1:d6:46:a4:85:91:4e:be:62:4b:1a:6c:
                    fa:3f:96:91:e9:98:d4:ce:81:98:1f:a1:b3:bb:e4:
                    4b:00:8e:e7:19:94:31:ea:3b:81:4e:fc:41:33:c2:
                    95:06:f7:8f:32:4e:d0:9d:b1:c8:7e:04:f0:5b:5b:
                    d6:65:93:31:71:4a:16:7b:3a:7a:9b:f9:05:81:5b:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:76:26:A2:08:45:CC:6B:4A:EC:6D:AC:09:97:22:82:9E:38:6B:19
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/AS54728.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:fc:a8:65:dd:3a:dc:7c:f8:46:54:96:90:06:51:07:8d:75:
         27:c4:b8:90:28:35:9b:cc:16:c2:f9:82:cb:d7:7c:6e:dd:41:
         ea:82:4e:73:ec:f4:14:6f:89:5c:dc:90:4c:af:65:f2:67:09:
         2c:33:61:eb:cf:7c:cc:52:c7:c7:36:b5:01:48:37:a9:bf:24:
         78:ef:d5:cf:a5:f8:bb:9a:6e:e5:1d:b1:fa:20:94:78:3a:97:
         2d:7a:16:8e:f8:f3:5a:40:d3:1b:f9:43:d0:a9:5b:21:15:87:
         d3:92:75:1a:22:f7:84:fd:11:42:15:3e:e3:d3:a5:e8:b3:f3:
         e4:9a:73:55:58:0b:d4:97:00:39:25:0d:9d:28:19:d8:c6:df:
         f4:b7:9a:05:fc:56:41:1b:65:ee:c7:84:ce:a1:b6:a8:93:f8:
         72:02:91:bf:50:5b:2f:11:d0:e2:53:32:90:9a:a9:d1:6f:e1:
         8b:22:a8:f4:5c:16:6f:ac:9f:0b:68:54:09:9a:1d:8f:44:8e:
         61:20:a5:5f:c5:90:04:70:03:0e:d6:f8:f1:e0:f7:58:d3:72:
         ea:36:77:e6:c4:b2:48:86:89:bc:e5:7e:f8:49:b2:e5:08:cb:
         28:08:65:36:61:91:a6:96:d0:63:f2:76:0b:47:c7:1c:bb:68:
         23:8e:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----