Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a3135353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133313a3135353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          PJI+mkbvZ+eT+UBcbPwNvGYEu9jZg9BXRF3dP4rrthQ=
Subject key identifier:   2B:46:CD:1A:ED:0D:90:E7:A7:31:BD:AF:0F:00:A1:64:AA:A5:03:E3
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       40F579790CDF66F28C8F08F08F5C11D0B73C6CF2
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a3135353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 31 Jan 2022 01:55:01 +0000
ROA not before:           Mon 31 Jan 2022 01:50:01 +0000
ROA not after:            Mon 30 Jan 2023 01:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:131:155::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f5:79:79:0c:df:66:f2:8c:8f:08:f0:8f:5c:11:d0:b7:3c:6c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 31 01:50:01 2022 GMT
            Not After : Jan 30 01:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:8a:84:bd:27:cf:c6:3e:00:f9:b8:68:88:
                    43:5c:a5:c6:27:97:68:c9:24:17:96:b7:fd:c4:10:
                    dd:46:1a:77:08:41:77:7b:74:f8:28:62:71:34:0f:
                    f8:01:13:0f:c5:83:ff:9c:c7:60:80:8c:0e:c9:f9:
                    d7:ba:b3:da:2e:cd:9e:9e:5a:d6:cc:31:66:bd:98:
                    a1:4b:7e:5d:b4:6c:2f:7d:ba:02:85:4c:a7:87:80:
                    0b:49:23:5d:2e:bf:90:41:de:a1:3b:a0:94:35:70:
                    89:61:b8:2d:e1:70:d7:51:08:ca:42:1e:4c:c4:31:
                    23:b4:fe:83:65:55:9f:7d:7d:70:65:7e:c6:e7:44:
                    19:58:37:18:5d:61:0a:4e:7a:c7:68:c5:b3:24:28:
                    d6:23:56:98:99:81:fa:1b:f4:2f:73:89:4f:4a:e5:
                    0f:ae:b2:f9:5c:9d:0a:ef:2f:44:29:27:a5:e3:23:
                    6a:d0:74:71:9c:c8:90:fe:1f:80:05:b3:d6:9f:0f:
                    70:f4:f0:6b:55:65:2d:3b:bd:34:a4:9d:c0:51:d8:
                    15:81:d7:48:66:4b:44:31:3e:6f:2b:00:38:a8:ee:
                    81:e9:41:82:c6:66:2d:99:72:10:c4:18:0f:c2:c6:
                    27:eb:bc:58:f4:26:9c:36:b8:58:bf:92:2f:3b:13:
                    e1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:46:CD:1A:ED:0D:90:E7:A7:31:BD:AF:0F:00:A1:64:AA:A5:03:E3
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a3135353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:131:155::/80

    Signature Algorithm: sha256WithRSAEncryption
         5f:87:26:b8:c0:8f:48:93:fa:a8:04:60:62:ec:07:8e:36:b6:
         a8:44:91:76:de:3a:7f:88:e1:8f:7b:11:3b:b9:d0:31:41:8b:
         c7:e7:07:34:9b:b5:80:85:e9:d8:bc:8d:15:d5:fa:66:87:b2:
         ed:32:4b:55:7c:60:91:e2:b5:31:ef:11:e3:68:48:6f:91:18:
         cd:27:fd:fe:6d:a5:6a:70:14:86:8e:85:64:6d:44:83:ac:ff:
         c6:43:02:ae:57:e9:1c:26:af:30:d6:02:af:d2:b6:ac:38:73:
         e1:86:15:65:03:05:28:79:f7:a0:75:56:a8:ee:28:db:db:0c:
         b8:dc:f9:43:a5:8d:b7:db:3f:0d:c8:8a:e1:b5:2e:d4:db:d8:
         b7:b0:be:e7:68:7d:8f:16:97:db:28:4c:cc:07:9f:4c:ec:e9:
         f8:74:2b:54:ae:68:fa:40:cc:92:bb:e6:f2:ff:2a:80:a2:9c:
         d6:cf:c1:51:75:82:da:ec:28:5e:07:8d:63:cc:e1:85:b9:77:
         2f:7a:6e:4d:c0:25:61:ea:4a:c3:6a:62:65:35:1b:6c:9f:4f:
         5b:d9:ce:70:48:17:41:a5:02:70:c1:ac:f0:77:db:36:1e:89:
         7c:65:35:7b:d6:c4:47:d1:3d:3f:db:ad:15:ab:82:21:1b:ce:
         87:b2:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----