Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132383a3234353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3132383a3234353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          IgNxmIfN3vhmF0QEGceLtDxFs/VVjL/M6n0gSMJP9Dw=
Subject key identifier:   03:C3:2B:0D:55:55:9B:F5:6A:06:8F:F1:1F:C4:A2:9B:51:6C:BC:FC
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0C284FC12FE3E165C596603965C01FE92E2A1453
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132383a3234353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 28 Jan 2022 02:45:01 +0000
ROA not before:           Fri 28 Jan 2022 02:40:01 +0000
ROA not after:            Fri 27 Jan 2023 02:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:128:245::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:28:4f:c1:2f:e3:e1:65:c5:96:60:39:65:c0:1f:e9:2e:2a:14:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 28 02:40:01 2022 GMT
            Not After : Jan 27 02:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:04:28:af:e0:f1:6c:4a:c8:b0:ca:e4:0b:
                    3c:5e:49:22:75:30:b9:64:d4:41:32:25:94:dc:00:
                    73:42:f7:ca:52:67:53:6d:d0:1b:1e:77:ce:b4:2f:
                    6c:cf:99:00:4e:4b:09:b8:07:9c:a7:a8:b9:af:cf:
                    d3:9a:52:08:34:3e:08:c6:98:ae:47:5e:56:81:27:
                    e9:6f:48:1d:20:e3:4c:9a:5a:2e:9b:a6:e1:3c:8c:
                    48:46:8f:f0:12:5f:f6:14:a9:8e:ae:9b:0e:2e:7b:
                    be:e1:1b:a7:d8:1c:27:27:6b:37:8b:3e:02:33:5e:
                    e3:2d:4a:94:25:2a:98:17:0e:4d:61:5c:f4:db:d1:
                    ec:00:0c:b9:79:ce:d9:72:dd:f3:6f:f7:c3:80:55:
                    f4:23:3b:ec:32:e8:3b:cd:67:8a:15:8f:57:ef:82:
                    ad:2d:0d:cd:1e:3c:59:63:5e:00:1e:39:90:9b:ce:
                    f9:8c:8c:dc:91:c7:5a:4e:84:7c:6e:c9:f3:5d:f9:
                    9f:85:a1:53:c3:8c:6b:a9:7a:6c:5f:f5:3d:27:ea:
                    d1:54:ca:d5:8d:7b:da:37:4d:68:af:36:d7:a8:e4:
                    d2:6e:a4:0c:24:ac:53:76:8f:7c:ed:5b:1c:37:a5:
                    1c:c4:c7:30:92:14:b7:fa:f2:cc:24:df:3b:f4:f2:
                    3d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C3:2B:0D:55:55:9B:F5:6A:06:8F:F1:1F:C4:A2:9B:51:6C:BC:FC
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132383a3234353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:128:245::/80

    Signature Algorithm: sha256WithRSAEncryption
         7e:69:37:0d:48:20:f4:08:ee:e2:e0:44:b9:03:b6:77:5e:0c:
         44:d4:4f:b2:e7:8c:8a:40:3f:0b:f0:66:39:86:71:2e:85:33:
         20:d3:21:07:12:e2:0f:35:67:84:13:26:d0:f0:bc:b8:69:9a:
         9e:59:50:38:98:12:fb:19:fb:7e:c9:bb:83:0b:ea:b3:23:a9:
         0b:0a:a5:cf:7e:41:00:bc:8b:ef:8f:a6:1e:50:bb:42:e1:fc:
         cd:85:be:d5:a3:17:17:70:52:bb:fd:07:16:d9:cc:40:53:f7:
         8d:65:2e:60:ce:8d:e0:06:d8:ea:41:29:bc:54:b2:91:d0:a9:
         ff:5c:40:72:d4:a4:47:44:80:00:14:66:6b:71:25:94:4c:0e:
         1a:36:c8:cd:73:58:69:fa:5a:c4:dc:f3:e7:56:b7:be:52:70:
         3f:18:3d:6d:fc:21:94:d2:55:74:9c:d2:e5:a3:5f:9f:4a:7e:
         f3:d1:fc:b4:3f:01:49:a8:71:d5:c0:cf:a1:56:69:cd:cc:f3:
         cc:0e:f4:f8:b9:c3:a2:92:71:93:9a:4e:14:be:31:39:e5:de:
         8c:b0:3e:0e:43:cf:c4:fe:a3:77:7d:e2:c4:18:52:1b:52:40:
         bc:6c:d5:c0:fd:68:78:34:fa:5c:60:54:29:a6:ec:4e:15:0f:
         7a:8c:54:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----