Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a323332353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3132393a323332353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          pZxDMdvX2bJcbQwQVsr+iPHdv6blVKswmZ50WSUBtXY=
Subject key identifier:   F8:D9:16:2B:2A:6E:21:11:5A:5C:AC:23:36:19:85:D3:4C:AE:17:CE
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6F00B093C64E0B72194C0155D0BC9ABA45B38B8F
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a323332353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 29 Jan 2022 23:25:01 +0000
ROA not before:           Sat 29 Jan 2022 23:20:01 +0000
ROA not after:            Sat 28 Jan 2023 23:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:129:2325::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:00:b0:93:c6:4e:0b:72:19:4c:01:55:d0:bc:9a:ba:45:b3:8b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 29 23:20:01 2022 GMT
            Not After : Jan 28 23:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:60:e5:d7:88:ee:61:33:1c:fc:fb:aa:07:
                    69:d2:88:ff:f8:0d:2c:95:f9:67:03:c2:fc:2e:9c:
                    93:13:5e:75:42:49:61:0e:61:93:c5:65:08:c8:5e:
                    1f:cd:83:72:9d:d3:45:a2:66:19:80:02:f4:12:07:
                    1e:34:a4:8d:7f:eb:35:aa:84:1e:ce:29:45:07:39:
                    63:41:71:5a:8a:92:2e:2c:84:84:6f:4e:bd:e5:da:
                    67:79:3f:e2:a2:bd:35:3d:9a:c9:03:3c:c2:ba:25:
                    e6:e5:86:3d:c5:01:e2:97:d5:1c:5e:15:ff:14:3b:
                    10:9d:e2:64:b7:c3:38:46:45:49:8c:57:00:7c:d4:
                    e3:e7:13:24:47:30:f1:de:de:76:16:7c:d6:12:63:
                    cf:bb:62:8e:50:39:08:06:cf:93:c6:2a:5d:48:5f:
                    63:31:27:11:3b:0c:24:03:5d:32:a5:87:3f:b6:8c:
                    da:47:2b:bc:73:d1:9a:49:57:1a:61:0d:9e:14:82:
                    d6:84:28:b4:6d:a5:7f:0d:90:3b:b0:8f:c0:ef:db:
                    7c:b3:79:87:50:45:74:ba:79:91:8c:56:6e:55:fc:
                    0c:c0:93:ce:46:74:f4:e8:62:fc:6e:94:03:9d:20:
                    66:db:fd:65:14:4c:87:84:cb:d3:8c:8a:bf:13:13:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D9:16:2B:2A:6E:21:11:5A:5C:AC:23:36:19:85:D3:4C:AE:17:CE
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a323332353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:129:2325::/80

    Signature Algorithm: sha256WithRSAEncryption
         d6:4f:1e:61:c3:b9:ef:84:9e:68:ec:07:e3:16:5c:54:a5:57:
         42:84:6a:18:09:50:df:16:8b:ef:9c:81:3a:45:1c:2c:a3:fc:
         94:69:6a:00:2d:ad:e3:59:4a:ac:71:47:6a:16:70:8d:e6:df:
         e4:c2:09:25:8e:e4:e7:95:3e:6a:d8:7a:cd:09:d4:a9:4b:9e:
         91:4d:71:ba:f7:af:a2:2b:cb:b6:39:6a:52:98:04:14:20:a6:
         97:7c:e8:d6:65:b3:74:3f:de:e9:d9:a1:5b:e8:47:b6:85:64:
         5f:d5:05:17:07:53:a7:1a:5e:1c:69:8e:92:39:ab:b4:ba:a1:
         c1:c8:51:d8:46:59:56:34:01:eb:2b:a6:4b:23:60:6b:11:b2:
         08:8a:b8:f2:6d:1c:4d:6f:b4:41:8e:64:0b:29:a4:cf:29:fc:
         26:44:f4:19:22:56:c5:a3:65:cd:88:fc:cb:f6:df:e2:8e:07:
         44:f5:fd:fe:5e:e3:5b:d0:ee:5f:e0:e2:8f:cb:d3:97:b1:d3:
         de:71:ff:39:0a:ca:d8:38:95:21:f4:1d:b2:5d:7c:0a:50:b2:
         48:fa:e3:32:99:62:9f:d5:f7:31:f3:67:5f:a5:f2:ee:89:26:
         df:64:44:08:7f:62:0b:23:1a:ab:59:b7:5b:a5:b7:88:3a:bd:
         d8:8b:6d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----