Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3330353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a3330353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          TCGkaRQBNKR7pvQpz/A54NicmsTJHLDIdW1Zd3SflVg=
Subject key identifier:   63:8B:12:14:A3:C8:05:A9:DD:3B:15:2A:4B:49:D8:CD:17:57:6B:8A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       58CC7BD2822658D4C66470637C3E4E64E42D95B3
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3330353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 03:05:01 +0000
ROA not before:           Sun 30 Jan 2022 03:00:01 +0000
ROA not after:            Sun 29 Jan 2023 03:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:305::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cc:7b:d2:82:26:58:d4:c6:64:70:63:7c:3e:4e:64:e4:2d:95:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 03:00:01 2022 GMT
            Not After : Jan 29 03:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:b3:ef:e1:14:e9:8c:cb:5d:a4:88:1a:da:
                    69:0f:6f:a7:39:2b:9c:ce:11:a9:31:d5:46:d1:19:
                    a1:e5:08:4e:45:19:2c:d0:4e:9b:34:d9:f9:c3:ca:
                    86:ba:72:e6:77:09:6a:f6:28:37:c1:0d:c3:1d:1c:
                    33:45:2b:7c:75:20:b5:e4:9b:1d:e3:12:73:9c:9c:
                    e6:9d:7a:77:55:30:31:4f:89:39:07:02:8c:c4:b7:
                    b2:34:59:52:a0:c1:0d:3e:c2:ad:fd:ee:40:cf:23:
                    6c:29:ad:0c:c6:22:09:0f:98:ff:6f:69:38:ab:b6:
                    d6:bc:1b:bb:af:24:27:5d:bd:39:c3:9e:28:b1:8c:
                    44:df:76:8b:a8:bc:2a:79:45:93:99:25:e7:44:c2:
                    a8:8e:22:8d:48:2f:ea:f5:fc:88:b3:69:54:04:5a:
                    34:02:b3:b4:19:57:9b:98:e4:89:2d:ca:0b:13:8c:
                    08:43:15:d2:45:07:50:86:16:77:be:77:33:81:cc:
                    a6:da:4a:96:04:49:7d:00:22:9d:95:47:2d:42:40:
                    d6:32:31:7f:fc:e3:4c:ab:7e:cb:75:48:42:09:58:
                    cb:9b:15:a8:aa:a7:0d:6f:9d:c9:f6:f6:59:50:9e:
                    fb:49:6b:bf:0f:02:77:91:72:1c:33:4a:0e:de:aa:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8B:12:14:A3:C8:05:A9:DD:3B:15:2A:4B:49:D8:CD:17:57:6B:8A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3330353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:305::/80

    Signature Algorithm: sha256WithRSAEncryption
         aa:89:4d:3b:74:9f:88:ff:fa:be:0f:bc:f0:66:ee:1f:d4:c8:
         b9:33:33:fa:b0:5b:42:e1:cb:dd:00:97:8a:c1:63:16:77:15:
         10:f8:3e:b6:71:ed:bd:d3:f0:cf:c9:06:ce:67:6a:92:b4:95:
         0f:d7:12:84:46:be:66:c5:5a:cb:8a:f0:a3:74:52:ef:3e:81:
         33:e8:5f:39:09:e6:09:20:46:76:11:a2:14:e8:13:62:6d:82:
         d6:6c:19:ba:7e:0b:cc:c1:31:84:1a:07:32:98:42:90:83:58:
         67:7a:9e:f1:47:2e:ff:9b:1d:97:4a:9b:5f:82:a7:72:55:4e:
         3b:16:71:fd:c6:b1:08:17:b8:a8:51:58:0c:13:9e:23:d9:9d:
         07:a4:8d:9a:e4:3f:54:de:83:b6:e9:50:c2:7e:59:ef:45:52:
         e7:0e:36:c6:ff:6e:37:03:68:46:7a:e1:22:fe:fd:ca:1a:1e:
         68:d1:73:22:ed:19:d9:41:ec:f3:1b:6e:dd:db:36:a6:fb:c2:
         10:43:14:c1:98:af:12:e6:12:96:85:4c:f2:f6:f7:2f:88:f9:
         73:dd:fa:9a:1a:7f:34:77:bd:8a:f5:62:54:b2:44:6b:9d:0d:
         fc:5f:cf:77:a9:06:b1:5c:03:2e:d3:e5:b9:85:92:df:2b:a6:
         c6:33:b2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----