Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3935303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a3935303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          AdurmD5VWJj0D4AXzC9dz3BtkLql1Ozp2PJhP1P3Xpo=
Subject key identifier:   AE:DF:B1:3E:CB:D0:2C:85:A6:E9:68:0D:5A:23:64:AD:BA:85:D9:5C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       381B087289A91671779DA44D601D35FE4FB2EF3C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3935303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 09:50:02 +0000
ROA not before:           Sun 20 Feb 2022 09:45:02 +0000
ROA not after:            Sun 19 Feb 2023 09:50:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:950::/80 maxlen: 80
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1b:08:72:89:a9:16:71:77:9d:a4:4d:60:1d:35:fe:4f:b2:ef:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 09:45:02 2022 GMT
            Not After : Feb 19 09:50:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:18:b4:f6:39:fa:3d:f7:fc:92:02:f0:d7:
                    b8:bf:58:07:53:b6:a7:79:47:fe:18:bf:15:81:a9:
                    ef:0e:ab:c3:ee:22:6d:5a:da:35:05:38:a3:10:5f:
                    5e:5a:fd:0e:eb:91:21:9b:37:71:01:5b:66:60:21:
                    cc:00:d0:bb:81:e8:4e:a4:e3:c9:9b:6f:dd:fe:0a:
                    07:01:6b:88:00:65:fe:c4:bb:99:f8:11:fd:93:ee:
                    e6:2b:e2:09:6b:e1:09:07:7b:6a:92:24:b3:e1:c4:
                    d7:30:1d:13:ac:be:5a:21:c3:fb:7e:a8:b6:e1:4e:
                    57:ba:f4:6d:20:fc:7d:38:88:ac:f5:34:e1:f3:9c:
                    0c:12:13:88:9d:9c:4d:9d:19:b2:9a:5a:62:72:74:
                    cb:35:0b:2b:08:85:48:fb:c3:b2:36:d1:44:b1:07:
                    ff:78:91:94:f9:cc:42:6d:d5:ec:08:1b:84:e2:67:
                    a3:d8:0a:e8:9f:fa:43:5b:61:14:9d:aa:3a:48:b1:
                    ea:7b:17:e0:5e:f9:da:79:bb:de:a8:88:0c:8e:62:
                    08:ef:ef:20:9c:f3:6e:dc:78:60:f8:94:bd:9a:9e:
                    94:ae:06:c2:95:17:c5:be:72:5d:dc:9e:ed:63:b3:
                    65:9b:fa:32:15:70:67:49:04:98:50:1d:4b:1f:ad:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DF:B1:3E:CB:D0:2C:85:A6:E9:68:0D:5A:23:64:AD:BA:85:D9:5C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3935303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:950::/80

    Signature Algorithm: sha256WithRSAEncryption
         cc:c7:11:d9:11:a1:70:14:0a:f9:46:9b:e1:39:55:4b:3b:16:
         32:6c:e6:5d:27:f8:80:e7:4a:aa:f9:80:91:78:ca:a2:65:f3:
         61:b7:67:aa:9a:03:6f:55:12:1c:c2:3b:e5:a2:59:38:6f:ef:
         5a:73:8d:23:3b:8c:7e:06:e5:5e:a6:a9:3b:88:fb:f3:bf:84:
         d4:dd:ed:c2:f7:74:35:6f:e8:3e:eb:b3:b8:fc:45:56:12:ea:
         77:aa:24:bf:5c:00:8c:85:b3:64:18:bb:56:e3:e0:29:cf:b1:
         da:1f:83:88:a5:45:0e:b0:95:d9:be:cb:56:de:d4:c6:21:62:
         d8:36:f0:a6:46:a4:2b:b5:27:2a:26:17:aa:95:cf:e0:53:23:
         29:c5:9c:ab:62:f5:f0:3b:a7:6e:c4:d5:44:06:91:9f:d5:6e:
         96:b8:f0:14:51:2a:0a:89:06:22:77:6b:23:f7:60:c4:fc:dc:
         de:4b:ae:98:a0:e6:f4:13:56:45:60:b3:1f:5e:35:a9:0f:19:
         ae:f1:58:17:4a:f1:96:b7:71:e2:4e:0e:b6:fd:e8:4d:ed:d7:
         be:51:ab:13:09:d5:68:40:fb:be:6d:22:81:0d:75:fd:7f:21:
         52:8c:06:8c:7e:34:c1:66:04:d9:19:6a:2f:d2:4b:2f:92:85:
         42:5c:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----