Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313533353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a313533353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          zioQt/Zq/r3zZZ1Lpmslpq6VEk7KBu77G838jZWQ1xE=
Subject key identifier:   13:93:BF:79:97:FE:2C:10:52:66:85:DD:94:40:D4:3B:04:84:B2:CF
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       421492A0A45523FCFF86969A36C90C7834556158
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313533353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 15:35:01 +0000
ROA not before:           Sun 30 Jan 2022 15:30:01 +0000
ROA not after:            Sun 29 Jan 2023 15:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:1535::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:14:92:a0:a4:55:23:fc:ff:86:96:9a:36:c9:0c:78:34:55:61:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 15:30:01 2022 GMT
            Not After : Jan 29 15:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:ea:2b:55:a0:72:b0:a4:42:81:26:b1:7d:
                    c3:2b:d4:69:61:4e:65:22:4f:0b:2d:ec:58:2a:2a:
                    50:fd:bd:a6:59:ef:0e:2f:9c:59:e2:d3:ec:f2:4b:
                    43:33:f3:2d:29:b2:ab:39:3c:ec:a0:0a:9d:ff:69:
                    1f:c2:a8:49:10:04:1c:50:90:ea:34:46:94:66:1b:
                    8b:8c:65:40:58:cd:62:a4:3e:a7:c6:17:d5:88:9e:
                    a2:34:16:c0:01:ca:ee:86:62:93:df:46:c9:e1:58:
                    98:41:28:d3:1f:98:e8:1a:e2:68:f2:8c:f7:db:58:
                    b2:44:b2:be:50:61:f5:7f:0f:95:80:c5:6f:bb:24:
                    74:6b:83:dd:77:7e:71:53:7f:f9:7f:2e:e8:3a:68:
                    1e:4f:55:ba:2e:3c:fc:b4:a3:ab:76:ff:13:8d:84:
                    cb:99:34:6f:9e:52:02:af:8a:dd:55:80:03:d3:16:
                    bf:ce:97:1b:52:b1:a7:68:dc:a1:12:6d:7f:ec:95:
                    b8:cd:9b:cc:c0:3b:94:85:a7:6f:15:28:cf:91:b8:
                    d5:76:14:45:ea:ca:98:44:a6:13:16:65:39:a9:a8:
                    4b:7b:d7:12:98:df:7e:0a:05:e1:65:5c:fa:cc:d6:
                    99:f5:d0:06:bf:63:42:c9:ec:44:e5:69:0d:85:e3:
                    e8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:93:BF:79:97:FE:2C:10:52:66:85:DD:94:40:D4:3B:04:84:B2:CF
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313533353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:1535::/80

    Signature Algorithm: sha256WithRSAEncryption
         86:aa:9d:46:24:89:56:e3:c8:ec:dd:cc:0d:7b:e6:14:5d:4c:
         f0:f3:60:29:d8:44:61:59:94:55:3d:88:9c:63:a8:e4:61:44:
         e3:38:3a:a6:50:46:59:cc:cd:65:b0:bc:87:de:f5:c7:d7:87:
         33:8f:17:e0:0c:cc:bd:b1:49:7a:c2:74:52:ba:6c:a0:1c:7b:
         fa:a9:a0:21:75:1d:92:8d:99:35:2e:70:48:54:70:c7:14:92:
         e8:52:5a:57:ae:76:0b:cb:a7:86:e4:b4:33:94:50:5f:a2:0f:
         4f:a8:f5:65:4d:f7:75:47:50:0d:33:1f:99:80:67:28:d4:38:
         3d:dc:4f:f2:20:04:8a:89:9d:11:80:34:5e:17:42:d1:38:a9:
         87:12:16:bc:df:f3:7f:c9:fd:f1:13:ba:0c:f7:b8:1e:d4:47:
         84:23:10:9c:19:4a:55:32:9f:5c:96:b1:dd:c0:77:1c:e6:46:
         f1:cb:18:38:33:6a:70:48:21:39:c5:e6:ed:0b:4b:38:28:b8:
         26:3d:e9:6c:53:97:28:ed:90:35:bd:68:e6:85:e3:47:ab:ee:
         23:00:cb:1e:dc:3b:82:06:11:54:1a:91:21:1a:0a:1e:52:37:
         47:e3:e5:2f:56:36:61:cd:80:e6:fb:2f:53:05:5d:9f:cd:92:
         17:e4:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----