Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a34303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a34303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          13vLdvVkhtf16g+7kfP1zp/TuIzKSluEBOhMhWQ4SyE=
Subject key identifier:   E0:FB:CF:41:3A:C6:9C:B8:2E:8C:1B:89:AE:19:5F:33:A7:9E:84:C6
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3F870F78F35643B63805C26DC83E21072085E301
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a34303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 00:40:01 +0000
ROA not before:           Sun 30 Jan 2022 00:35:01 +0000
ROA not after:            Sun 29 Jan 2023 00:40:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:40::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:87:0f:78:f3:56:43:b6:38:05:c2:6d:c8:3e:21:07:20:85:e3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 00:35:01 2022 GMT
            Not After : Jan 29 00:40:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:54:41:79:9a:9d:25:9f:6d:3a:d9:2c:1d:12:
                    29:dc:16:d2:b0:57:85:16:3e:70:69:dd:5a:03:c6:
                    7d:e2:a7:a0:0f:59:84:1b:56:5b:cb:52:d6:64:9d:
                    ad:21:44:1c:53:9d:2d:1a:9a:24:b0:c1:ad:61:f1:
                    bb:28:4c:a2:d2:e3:5d:7e:f5:b2:0c:1e:b0:21:19:
                    71:ab:aa:92:ca:46:6b:06:46:a8:ce:aa:06:4d:2f:
                    da:07:3c:e3:15:16:4f:db:c3:0a:c5:cc:aa:29:00:
                    89:24:b9:ef:97:6d:9e:6d:f3:ad:a6:6c:84:5c:2f:
                    a1:11:fd:f5:6f:76:ee:4a:80:ed:21:76:6d:b8:2b:
                    55:68:e0:5a:46:da:a6:50:e2:98:eb:22:4d:b0:44:
                    c3:eb:b0:a0:37:90:4d:31:90:8f:2b:31:02:58:cf:
                    e4:f2:55:85:2a:c2:b5:d5:63:e7:05:03:6d:d8:b3:
                    10:89:e5:f5:5d:28:48:d0:92:0b:86:1c:47:30:c6:
                    34:24:03:63:e9:93:d1:97:69:ce:07:26:a8:fa:ce:
                    40:45:37:d8:22:e9:56:14:48:c2:d0:99:89:ad:d8:
                    bc:7e:5d:c3:98:94:2e:97:5f:b6:5e:37:c5:d7:d1:
                    78:45:ad:cf:28:3d:85:4b:da:f9:86:c2:ce:e3:4e:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FB:CF:41:3A:C6:9C:B8:2E:8C:1B:89:AE:19:5F:33:A7:9E:84:C6
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a34303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:40::/80

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:34:1f:f1:8e:87:5c:a5:42:50:04:14:f1:13:41:dc:57:
         1d:76:24:99:98:16:31:e8:6e:09:c1:88:20:4e:f4:09:5b:54:
         84:4e:72:3f:41:0a:a5:c0:1b:44:33:04:85:84:66:34:43:e6:
         1b:b5:0a:7b:17:fe:4c:ec:58:84:33:5c:69:99:14:20:fe:a2:
         91:2b:7d:a1:d9:29:a7:31:93:ac:98:1c:de:f0:7b:e0:9e:fb:
         5e:13:8d:5c:1c:7b:94:72:dc:26:8e:c6:22:39:19:5b:1e:61:
         31:90:c0:6b:92:26:83:3e:bc:6a:d9:99:1b:9d:ad:f1:9b:67:
         29:d8:e6:e1:1a:c8:b4:c1:20:8c:4e:a6:92:ca:dc:66:1a:82:
         31:8e:f6:89:67:1c:5f:dc:f3:8f:b7:b0:20:56:65:c0:1c:8a:
         68:ff:95:8d:b3:43:8e:bd:95:27:68:4a:fe:c9:94:f3:26:fe:
         5e:0c:19:95:6e:d5:f6:55:29:1e:88:52:fc:7b:e7:3c:6c:3d:
         5b:ae:6a:24:97:10:c0:38:20:e1:43:6f:3b:8a:4f:d7:07:2f:
         59:83:dc:85:40:4e:41:b7:50:c6:4c:61:98:d6:3f:79:ac:ab:
         84:53:fe:86:b6:72:d5:ad:78:0d:fe:07:aa:f5:fe:dd:45:c6:
         b5:3d:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----