Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3634353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a3634353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          4qduE/zFTetc10CQr6zS6iRxdHSxPqVTEQacmvu6DBc=
Subject key identifier:   A8:A5:1A:71:2A:BF:34:B4:98:7D:4B:D4:08:CA:ED:B6:47:1C:1D:72
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4F8AABD230E27FD0122172E6EEBD0C0A5DA8E747
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3634353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 06:45:01 +0000
ROA not before:           Sun 30 Jan 2022 06:40:01 +0000
ROA not after:            Sun 29 Jan 2023 06:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:645::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8a:ab:d2:30:e2:7f:d0:12:21:72:e6:ee:bd:0c:0a:5d:a8:e7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 06:40:01 2022 GMT
            Not After : Jan 29 06:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:2e:4f:59:b2:05:b3:58:9d:33:18:2e:87:
                    a7:e0:cc:27:99:2d:15:22:55:04:19:84:57:00:42:
                    51:d6:de:52:a7:bf:57:15:e9:d0:ec:03:35:e6:ad:
                    da:a4:40:5d:05:86:e8:37:a6:c4:0c:40:64:39:45:
                    54:43:f3:96:ef:6d:51:a2:07:95:c5:ad:2e:b7:6e:
                    64:07:87:c8:d6:8c:f9:42:cd:eb:7a:d6:d9:5f:e3:
                    ad:0c:5d:5d:5c:81:3f:d2:3e:6a:56:3e:a7:79:03:
                    92:8c:a0:43:0b:36:f0:73:90:01:c9:25:a8:5d:12:
                    b4:d2:3e:07:3a:a1:ca:32:be:ac:90:f9:01:a4:b6:
                    ea:43:cd:78:7d:df:3b:06:45:fa:6c:e0:75:8e:97:
                    47:be:5f:5e:41:ea:7b:97:11:4f:b8:d4:e0:51:dc:
                    18:ce:a4:d0:4a:44:ca:08:11:01:6f:d0:fe:0b:f3:
                    a4:70:51:c3:aa:ab:3e:91:96:fc:6d:f0:4e:3a:4f:
                    23:38:6e:9c:c6:67:82:22:b6:67:c4:9e:2d:d6:f0:
                    01:e8:ac:93:10:87:0b:f6:07:87:58:f0:17:76:5a:
                    d6:a7:c4:79:2f:ce:d7:89:42:43:4a:0a:f4:7d:c5:
                    1a:5c:33:bf:73:11:c8:30:db:05:65:cf:d6:02:15:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A5:1A:71:2A:BF:34:B4:98:7D:4B:D4:08:CA:ED:B6:47:1C:1D:72
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3634353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:645::/80

    Signature Algorithm: sha256WithRSAEncryption
         9d:9e:d5:8c:cf:59:e2:56:e8:89:45:56:b0:ff:f1:88:5d:de:
         99:a6:71:1d:3c:59:d0:41:e7:d2:6c:08:d9:b5:2b:2e:a9:04:
         6c:09:2a:48:73:3f:51:5e:36:6f:23:1e:f2:f9:c6:47:c8:71:
         4e:d5:3c:34:f2:ff:23:c5:84:f1:8d:46:ae:e3:55:63:96:0e:
         59:1e:bf:02:8b:e7:d8:52:40:ab:03:56:4b:66:dd:89:b8:7e:
         99:ff:0c:6f:c5:7c:a7:13:26:2a:3d:98:42:2c:19:a7:a1:20:
         04:2c:49:7e:a4:a2:5a:d2:46:6c:40:2f:dc:0f:b4:a9:4a:5f:
         97:19:41:2c:b5:db:af:40:d8:ee:87:84:dc:0e:0d:2a:38:6a:
         97:ae:a6:bb:73:87:ef:71:5f:d0:05:61:53:73:ce:6d:a3:5d:
         73:1f:34:07:77:81:01:5c:80:ba:b5:02:1d:36:d6:08:f1:81:
         82:f6:20:ec:22:21:6c:43:a5:8d:39:d2:81:bb:c8:c9:ce:ab:
         af:7e:2c:3d:db:86:af:bc:f7:ab:29:09:bb:25:2a:7c:56:07:
         84:21:c4:fe:dc:c0:c7:92:00:48:72:33:3e:a1:c3:9b:ca:11:
         9c:ab:87:30:1a:e5:c5:50:63:36:0d:d2:74:ce:1a:2e:25:9c:
         5a:ad:e3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----