Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313131353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a313131353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Gmy+HnO5FwfrizpT423pFPP8K6lv7uY109u3cMYyIkU=
Subject key identifier:   47:58:FF:40:BF:D4:EC:DF:16:E4:59:6B:1F:58:03:57:60:B5:96:5A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       163A4BD52F6168B823C621D6FB7050592F6FA819
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313131353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 11:15:02 +0000
ROA not before:           Sun 30 Jan 2022 11:10:02 +0000
ROA not after:            Sun 29 Jan 2023 11:15:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:1115::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3a:4b:d5:2f:61:68:b8:23:c6:21:d6:fb:70:50:59:2f:6f:a8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 11:10:02 2022 GMT
            Not After : Jan 29 11:15:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:16:ed:7f:89:0e:cd:5e:ec:06:6f:00:e3:
                    52:6b:4e:7d:14:46:d8:cf:3b:d7:94:5f:9f:79:69:
                    f7:4e:66:21:71:50:f7:55:47:9d:c0:2e:33:e9:ab:
                    ed:7f:32:12:86:56:1a:82:16:be:79:c5:4a:62:ef:
                    aa:d7:32:1c:bc:90:a0:18:a9:3c:b0:0d:6f:b8:e9:
                    66:2e:99:21:3e:49:95:04:65:4b:a3:f5:b8:56:1f:
                    ba:c2:8c:1a:02:1f:dc:a7:e8:cb:3d:88:c6:27:a7:
                    80:e4:07:5b:1e:8a:84:ba:d7:7e:82:b6:a8:22:37:
                    e1:59:67:11:82:06:ac:14:34:81:76:39:91:d3:32:
                    1f:19:54:4f:94:c6:9e:b9:44:1f:69:0a:18:05:1a:
                    bd:71:ca:d1:6a:e0:c4:c6:97:a7:46:0e:8d:aa:92:
                    1b:23:a6:4d:35:a8:d7:c4:4d:c8:22:1d:b9:ed:4e:
                    b8:0a:d2:e4:1a:fe:2d:3e:5c:64:6f:70:af:27:ec:
                    62:cb:f2:32:d4:0f:02:a2:93:a0:da:09:5a:07:7f:
                    ea:3d:1e:c0:26:4b:ef:15:4b:03:81:c3:75:02:b9:
                    e2:f4:b8:d7:ae:00:d8:9b:fa:f2:0a:50:41:d0:ff:
                    bb:5d:7f:99:13:8a:de:78:02:d2:4e:bc:f4:c7:3f:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:58:FF:40:BF:D4:EC:DF:16:E4:59:6B:1F:58:03:57:60:B5:96:5A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313131353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:1115::/80

    Signature Algorithm: sha256WithRSAEncryption
         8d:4d:0a:46:95:3a:8b:7f:aa:31:90:df:bd:51:3e:56:ab:aa:
         1e:a8:77:48:d8:d3:92:d3:ae:af:06:32:82:e4:a1:f8:7e:c1:
         91:28:5c:1b:c3:9a:fe:16:44:07:38:c9:75:00:da:a4:85:70:
         37:3d:03:17:03:66:e9:be:2b:a3:f2:33:7e:30:3a:81:99:8e:
         bd:af:8b:64:23:c7:82:35:f7:74:0d:ba:3c:f0:72:1d:7a:0d:
         05:ec:5d:cd:92:f1:fc:d1:ca:b1:44:9b:4f:6c:1a:33:9d:fa:
         bb:a6:23:84:8a:b1:27:3e:d8:d0:4d:ab:d9:bb:f1:bf:b4:62:
         0c:93:8b:ba:49:30:2e:ea:32:d2:cf:db:64:8c:58:50:e9:62:
         b6:d9:c4:9b:10:30:38:c8:ca:b3:7c:25:57:6a:88:40:b1:17:
         08:a2:9b:1b:f9:81:ea:64:63:b8:04:ec:bd:f8:99:ac:1f:fa:
         2c:93:f3:ee:1c:70:f8:0f:31:76:5d:64:68:12:df:4c:56:5c:
         fb:21:a0:0b:2d:c0:c3:f6:2b:fd:d6:21:50:ca:90:86:a9:bc:
         4a:f2:c5:dc:90:20:e1:09:13:6e:9f:fd:f4:14:14:1d:3d:99:
         a3:db:b0:25:10:52:2f:77:2f:f4:41:78:85:6a:33:92:8f:4e:
         d9:64:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----