Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a33353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a33353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          WiG2klcnXB42HnuHUHqA0b8YSqVSnckr0WtK552wKCs=
Subject key identifier:   29:B2:03:A2:E4:D2:A2:B7:C8:8F:D4:DB:A9:9F:79:8A:2E:34:F7:70
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6A50727C61A97FDD977FAA0E87FC78543AE38143
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a33353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 00:35:02 +0000
ROA not before:           Sun 30 Jan 2022 00:30:02 +0000
ROA not after:            Sun 29 Jan 2023 00:35:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:35::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:50:72:7c:61:a9:7f:dd:97:7f:aa:0e:87:fc:78:54:3a:e3:81:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 00:30:02 2022 GMT
            Not After : Jan 29 00:35:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:ad:9c:4c:e3:22:4b:df:de:49:2f:d4:7e:
                    57:61:9b:10:fd:81:e0:03:b7:07:06:e7:76:de:ba:
                    43:f9:bc:14:de:61:0e:04:09:fa:ae:3b:76:9e:f6:
                    08:00:8d:a5:87:93:4c:da:30:c1:46:df:be:29:5e:
                    8a:17:2c:1b:52:b4:e7:b8:aa:f1:df:10:e0:4c:db:
                    d7:57:bb:3e:a3:ad:b4:e1:98:41:f5:ae:64:6a:70:
                    ee:66:be:55:c4:61:0c:8d:9f:1b:82:db:20:aa:61:
                    77:75:f5:c5:8a:be:a9:03:25:f9:9d:e9:85:38:8f:
                    c9:07:0e:66:76:26:60:03:f9:ef:c9:c9:b1:3a:5c:
                    f1:70:66:84:2c:ce:b3:14:f0:f4:85:88:da:c6:31:
                    b5:d9:c5:60:88:38:38:96:6c:1f:a5:dd:a0:86:ec:
                    dc:71:5b:e9:83:2b:14:94:bf:9d:68:24:26:9b:93:
                    19:e6:9d:de:d7:57:a1:a2:a1:b7:86:74:8e:0d:a5:
                    54:b8:bb:a1:8c:ed:98:65:27:a9:b5:b8:ac:4a:fe:
                    90:4a:28:57:fa:00:14:f9:59:39:fc:3a:31:e8:64:
                    55:19:54:44:e0:33:1b:2d:27:45:4f:d9:6a:d2:e0:
                    37:20:1d:4c:f5:69:b6:d4:63:24:c9:a4:d5:1d:05:
                    42:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B2:03:A2:E4:D2:A2:B7:C8:8F:D4:DB:A9:9F:79:8A:2E:34:F7:70
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a33353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:35::/80

    Signature Algorithm: sha256WithRSAEncryption
         94:85:89:84:a0:b4:58:db:12:41:8e:44:4c:63:7a:2f:d9:76:
         c8:81:ba:9e:2b:c6:57:4b:61:41:4d:76:04:f0:f7:8e:88:bd:
         0f:ad:28:61:dd:37:8f:94:9d:d0:13:45:bc:95:16:45:0c:51:
         69:10:29:96:9f:88:3f:1c:20:14:19:69:df:47:e8:41:e0:a5:
         e3:af:58:e5:2c:fa:b7:3e:fd:03:ef:ad:f1:2e:17:1a:84:ed:
         37:90:7a:4f:a8:28:89:74:4e:b0:91:49:b9:59:f7:7b:31:65:
         1f:02:2e:39:49:38:14:9c:b2:19:76:6c:23:94:f5:b2:75:03:
         a3:ed:87:82:c0:d2:ea:78:e5:d0:65:61:30:a6:51:32:71:60:
         47:e2:61:92:be:8f:d8:e6:29:b0:e5:25:4a:32:73:1f:c6:98:
         25:43:74:df:d9:43:b9:40:fa:cb:14:c6:93:19:2d:c9:84:d0:
         27:6d:70:3f:b1:c7:a0:83:f8:59:8e:ea:d8:57:7a:66:8f:72:
         ea:74:a8:01:90:16:e5:b1:b7:75:ac:5f:35:c6:95:0b:71:f2:
         5d:f0:b6:14:3b:19:f2:79:a3:b3:34:2c:86:08:52:93:e9:5f:
         71:43:60:ea:9d:f8:a3:33:34:5e:be:91:07:f3:28:02:1a:0f:
         51:e1:56:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----