Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313035353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a313035353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          EDB6/r4yp6xGqof5RW0TVNhMfLnjPjD2tKj7n3dfLrQ=
Subject key identifier:   62:31:BB:B8:56:D6:DA:5C:37:A5:CF:BE:A3:3E:0F:D4:C8:94:AA:E1
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       36EF5E373852F31378BE3FFB111BABD1C3AC84A9
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313035353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 10:55:12 +0000
ROA not before:           Sun 30 Jan 2022 10:50:12 +0000
ROA not after:            Sun 29 Jan 2023 10:55:12 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:1055::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ef:5e:37:38:52:f3:13:78:be:3f:fb:11:1b:ab:d1:c3:ac:84:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 10:50:12 2022 GMT
            Not After : Jan 29 10:55:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:27:98:18:8a:f6:d6:2b:87:68:b1:3f:8c:
                    b2:bc:fa:5e:5a:d3:d7:65:ce:91:c5:fc:01:e2:47:
                    98:62:85:da:5f:6e:81:46:f6:00:b9:61:aa:81:18:
                    40:27:ef:99:ad:40:45:18:15:27:df:5a:53:44:84:
                    e3:a5:01:a1:83:a6:86:77:c8:da:79:13:b9:a3:61:
                    d6:51:4e:bc:43:7e:dc:3c:fe:e0:19:88:cc:75:70:
                    2b:29:da:07:e5:3a:1c:da:a8:1a:cf:7d:5b:2c:04:
                    89:a9:6f:51:e8:07:ee:f2:c6:32:9c:b0:d7:c5:5f:
                    05:7e:9a:aa:83:aa:4e:72:f0:92:7b:26:18:0d:ca:
                    62:07:98:7c:f3:ff:f5:13:e4:e6:74:88:8c:84:37:
                    c1:56:62:27:96:de:6f:1f:35:7d:fb:b3:26:c9:11:
                    69:30:50:da:a0:32:8c:13:41:87:a6:f5:c8:b8:1c:
                    b3:05:1a:3d:30:40:cc:3c:41:09:be:be:d7:bf:0f:
                    6d:80:da:c5:d6:c4:0d:cd:b9:97:d2:6e:d6:d4:79:
                    98:43:2e:0d:af:a4:3d:97:b1:77:64:55:13:fe:f8:
                    3e:5b:37:d8:64:34:9f:c1:a0:19:71:6d:ab:0e:a8:
                    49:04:7c:76:98:ec:8b:a7:5a:92:cf:3b:d4:c6:87:
                    99:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:31:BB:B8:56:D6:DA:5C:37:A5:CF:BE:A3:3E:0F:D4:C8:94:AA:E1
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313035353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:1055::/80

    Signature Algorithm: sha256WithRSAEncryption
         1a:c9:9f:f7:e7:55:22:14:19:ba:e9:3c:53:d8:7d:a3:e0:b7:
         0e:82:54:7b:7f:e6:c6:f7:c5:11:8e:6d:2f:a8:fa:80:83:05:
         7c:0c:80:95:2c:69:de:12:39:a8:25:e5:3d:39:25:df:37:f3:
         51:25:51:4c:1d:a6:d5:a6:29:34:21:e4:ce:fe:a8:e6:86:83:
         26:d4:32:4c:33:09:a5:f7:5d:e2:7b:98:ce:d2:10:92:7f:a5:
         86:ea:8e:be:79:95:0a:cd:70:43:de:06:46:a0:c8:3a:19:9b:
         19:17:fa:1b:42:69:a1:20:df:65:cf:11:88:79:ba:40:da:c8:
         65:1a:da:1f:3f:e5:e9:bc:0e:c6:53:fe:af:43:15:25:8f:63:
         eb:bd:16:c8:b7:40:9b:60:1a:de:08:4e:c8:8c:96:42:c2:e8:
         1b:a6:80:13:dd:0d:0f:b6:bb:0e:fd:c9:91:b9:7c:12:97:13:
         45:9f:e8:8e:75:1f:ef:5e:f4:d2:9e:c1:85:ea:1a:7e:27:a8:
         65:86:98:26:af:85:e1:fb:b4:29:e5:9a:af:f6:26:64:e4:98:
         79:bd:2f:dd:71:17:2f:91:29:96:4c:c3:fc:2b:96:19:e3:93:
         76:91:4c:39:e1:fd:3b:07:4e:d1:3b:96:f3:a6:c1:eb:5d:e6:
         9f:12:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----