Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313531303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133313a313531303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          8iO+R6BtkxtRecodezS4gSd5QCXjhmRu4olLyS/+D9U=
Subject key identifier:   27:B0:17:77:0F:37:0F:4F:A3:52:B6:D0:A0:84:4D:2D:12:3E:FD:51
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       63641AA9CCC14F4B28A2BC1156D6CA549EE081F3
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313531303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 31 Jan 2022 15:10:02 +0000
ROA not before:           Mon 31 Jan 2022 15:05:02 +0000
ROA not after:            Mon 30 Jan 2023 15:10:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:131:1510::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:64:1a:a9:cc:c1:4f:4b:28:a2:bc:11:56:d6:ca:54:9e:e0:81:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 31 15:05:02 2022 GMT
            Not After : Jan 30 15:10:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:29:e2:c8:86:58:37:2d:0c:14:ee:3c:91:
                    08:0f:d2:27:ce:34:05:8f:67:d1:46:01:e9:4a:d2:
                    a0:f9:ae:55:ea:29:6f:50:56:ed:30:43:57:36:98:
                    c1:f4:d3:e9:a2:89:bb:13:39:ae:ef:48:e5:8e:ea:
                    7f:c0:d6:31:33:58:68:1a:42:d5:0d:b3:57:b8:c4:
                    e0:80:55:c9:4b:bc:9c:62:68:55:15:05:78:45:f8:
                    e4:f0:9c:7d:d8:8c:62:47:0e:7c:4e:64:5e:ba:85:
                    d4:c4:d0:08:a6:1e:47:18:0d:d3:99:1a:a3:df:68:
                    29:f1:f3:38:88:43:77:03:45:23:0e:e6:0c:a5:2f:
                    38:d7:01:64:66:83:5d:03:14:fe:6f:5d:f6:83:bb:
                    17:23:42:cc:0b:77:f9:ea:5a:5b:de:64:f1:78:cd:
                    70:8f:fa:32:bf:26:c1:13:b1:d8:26:7f:ee:9a:26:
                    92:f8:4f:83:72:fd:6e:b8:bb:ae:89:56:2e:d4:6d:
                    b5:73:db:69:7b:13:67:6a:3f:a7:75:5d:66:6c:74:
                    04:b7:9d:cb:5b:90:fb:38:b0:b0:38:b3:77:fe:94:
                    a6:8b:76:30:e3:f4:a8:f3:0c:cf:6a:7c:b7:61:21:
                    dd:3c:2d:33:2e:c6:1c:d6:ef:16:4d:1d:c3:c8:9a:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B0:17:77:0F:37:0F:4F:A3:52:B6:D0:A0:84:4D:2D:12:3E:FD:51
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313531303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:131:1510::/80

    Signature Algorithm: sha256WithRSAEncryption
         19:ab:34:6e:30:04:47:f5:c2:28:22:7f:61:08:27:5e:6d:fc:
         24:f1:ce:0f:06:34:25:cf:69:2d:23:d2:fc:34:e1:14:19:96:
         18:7a:eb:25:8c:b7:b5:36:85:e6:05:3b:76:a7:c2:8f:b7:cf:
         e5:c4:13:2f:a3:96:c4:2a:ce:63:20:8c:6d:22:db:a0:38:5b:
         b5:59:97:21:7f:c2:7b:e6:9b:ed:f9:c4:9e:4c:70:27:df:f3:
         80:b6:f0:13:a4:de:8d:52:0b:95:23:af:bb:3c:5b:81:d1:1e:
         e8:2d:47:89:b8:3d:b9:b2:82:c2:f7:eb:a4:32:bd:d6:31:7c:
         49:ce:76:ef:a8:74:2a:ad:7f:66:06:e9:b7:a8:19:32:13:27:
         18:fd:14:fe:74:71:25:9b:d2:f1:91:b2:b3:e4:4c:d5:f3:e3:
         b4:9e:e8:e2:5e:2d:e4:c9:fb:d5:8e:dc:42:93:a6:57:09:23:
         c6:c7:64:54:33:9a:84:72:95:5c:a3:cc:d0:72:7b:d7:f9:16:
         84:b7:61:9f:79:09:07:6f:2b:a4:8b:7b:8e:fb:ca:46:1f:c7:
         61:79:6f:e0:68:8d:45:9b:9c:1e:a3:4a:7b:1c:58:f4:67:06:
         d9:84:cf:9f:6b:0d:2b:f8:33:da:a7:f2:30:f6:a0:7c:4c:05:
         dc:22:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----