Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313330303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133313a313330303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          4YMqV0RlDmOlUFaPHY0PVmKgYkDbF2LFD35msAC2Xvs=
Subject key identifier:   12:7F:54:E1:8B:3A:8A:97:F1:07:6D:79:B0:34:2D:0D:69:18:C5:EA
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       495D802CD461A074B35D7187BD73D9A1004EF33B
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313330303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 31 Jan 2022 13:00:02 +0000
ROA not before:           Mon 31 Jan 2022 12:55:02 +0000
ROA not after:            Mon 30 Jan 2023 13:00:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:131:1300::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5d:80:2c:d4:61:a0:74:b3:5d:71:87:bd:73:d9:a1:00:4e:f3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 31 12:55:02 2022 GMT
            Not After : Jan 30 13:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:f2:75:9d:29:35:9b:96:eb:18:43:bb:fa:
                    61:d7:a2:0d:ce:55:cf:4b:d4:fc:4a:33:fb:2c:4e:
                    fc:99:11:26:b1:91:15:a4:0a:4a:7e:31:5a:ac:c9:
                    b1:8f:79:38:7e:04:91:c7:ca:ba:61:72:8b:2b:31:
                    4f:2b:0c:03:6e:47:55:73:9e:77:9b:f0:1a:2c:f6:
                    e1:22:27:c0:50:69:11:78:ea:85:de:46:18:7b:40:
                    6a:06:9c:e8:1e:8b:52:95:c0:84:93:c1:ba:0b:b2:
                    f2:b2:cf:26:55:45:2d:34:9b:6e:1b:84:dd:20:53:
                    22:ed:0f:c9:22:80:33:42:d7:6a:15:7d:ec:e9:79:
                    71:2c:e5:72:5d:28:89:2d:c8:77:f8:d6:c6:c3:78:
                    f0:1b:b8:c4:7d:68:b7:57:2d:b2:9f:77:af:95:1d:
                    59:9f:25:f2:95:09:b6:4c:6d:da:a5:c5:b0:b2:9d:
                    60:63:47:19:7d:af:b0:d0:27:54:e9:2c:f3:1e:d8:
                    cb:26:49:05:f5:fa:91:40:83:3d:ae:a3:07:5e:59:
                    b3:df:03:0d:5f:d4:76:ee:c5:83:56:b7:57:48:9c:
                    d0:6d:b3:31:ab:9b:89:81:ad:47:35:76:06:2e:24:
                    be:6a:b3:12:3d:6a:95:36:2d:e1:16:71:28:36:79:
                    9e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7F:54:E1:8B:3A:8A:97:F1:07:6D:79:B0:34:2D:0D:69:18:C5:EA
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313330303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:131:1300::/80

    Signature Algorithm: sha256WithRSAEncryption
         ad:0e:5f:e3:4a:fd:56:6c:ba:40:2a:a8:b0:3f:10:f1:2f:0a:
         f5:9b:27:00:df:7f:a4:5c:fc:5e:c8:d3:0b:e1:86:a6:3c:04:
         79:30:d8:92:42:f5:d3:de:31:6c:87:7f:be:66:4c:e7:88:f9:
         f8:33:d6:5e:e4:5f:7f:a2:c3:be:30:c2:58:2d:f8:b9:b4:d2:
         5e:7e:73:d5:7d:03:a4:05:97:5a:4a:d2:11:b6:81:5d:b4:86:
         7d:9e:92:4a:fe:49:34:8e:f0:2d:7b:4f:9b:b0:9b:a6:91:f9:
         27:45:4e:d6:3d:9a:45:08:ff:e6:f1:e2:c6:1b:dd:22:fc:f2:
         19:0d:bd:c5:f0:90:53:56:c6:29:02:fe:d8:76:68:3e:7f:6a:
         f6:13:c2:64:00:19:6c:5b:10:73:81:3f:ae:b3:9c:d4:58:b8:
         9e:3e:a5:9e:cd:ed:39:97:35:f0:4e:79:8b:5f:b5:42:a6:9e:
         aa:bc:f7:a0:a0:32:36:5d:49:31:74:d6:00:16:d8:7f:48:31:
         84:5f:05:14:8b:28:ac:45:bb:5e:d8:9f:8e:af:82:d3:27:04:
         8a:b8:87:d9:15:84:b8:16:b9:78:c6:cf:d3:25:64:04:63:02:
         d8:3f:8a:37:8c:37:0d:cf:d9:9e:07:2f:cc:91:60:19:e2:26:
         e2:df:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----