Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313732303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133313a313732303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          POPyHVCuJp/075qlOQbykkEmpYxCBpXJyopG9XxAuls=
Subject key identifier:   64:B7:39:CF:EE:E5:D9:B1:1D:2A:9F:FD:6C:22:17:5C:1D:A7:FA:C0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       746216C9650A3235AEA7995616EF430116EF5CD4
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313732303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 31 Jan 2022 17:20:02 +0000
ROA not before:           Mon 31 Jan 2022 17:15:02 +0000
ROA not after:            Mon 30 Jan 2023 17:20:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:131:1720::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:62:16:c9:65:0a:32:35:ae:a7:99:56:16:ef:43:01:16:ef:5c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 31 17:15:02 2022 GMT
            Not After : Jan 30 17:20:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:9c:a3:9f:a0:9d:16:0e:ff:57:dd:2f:49:
                    7f:26:0a:ce:4e:87:d2:24:53:77:a7:62:d7:5d:3a:
                    81:65:4e:94:d3:3a:8a:b0:f9:1e:f4:bd:54:2e:b5:
                    77:58:28:45:9f:d4:f5:0e:d5:4a:29:bd:aa:50:a8:
                    51:f8:b8:c8:89:c5:46:e2:1a:e2:7e:43:1d:a8:03:
                    9b:36:95:27:75:5e:67:9e:19:e8:45:71:06:a5:96:
                    23:62:26:65:6c:65:f9:78:c5:9b:67:19:82:97:6c:
                    5d:16:17:ee:c0:10:76:57:63:52:be:28:c8:c8:2c:
                    05:97:c3:be:54:a7:97:8e:f1:e3:09:f7:a6:22:4e:
                    f0:7e:9d:23:fc:be:ac:3d:63:14:4d:6b:6e:5d:c4:
                    78:52:7c:59:7c:3a:81:ba:0c:c9:89:e0:e2:59:b7:
                    df:c9:55:90:13:89:6c:f3:70:1b:d2:a6:84:4f:c0:
                    f4:b3:04:9a:a5:d3:c8:95:f5:c2:a7:7a:70:d9:71:
                    bd:29:45:d3:87:85:bf:44:8d:b5:e1:92:e6:7e:17:
                    15:31:8f:bf:cf:e8:be:4b:4b:22:22:cf:a1:11:79:
                    b7:aa:cd:6c:65:7c:27:7a:9f:59:b1:f8:98:cc:64:
                    fe:27:56:3c:53:be:e9:6f:a2:c1:3b:f0:99:a7:b5:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B7:39:CF:EE:E5:D9:B1:1D:2A:9F:FD:6C:22:17:5C:1D:A7:FA:C0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313732303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:131:1720::/80

    Signature Algorithm: sha256WithRSAEncryption
         1d:14:87:18:bb:5d:0c:18:f8:55:86:be:0a:97:e2:22:a5:02:
         d1:56:0a:fa:da:a9:a3:c5:07:3f:61:c7:8e:9b:fc:6a:dc:d1:
         15:14:72:83:8d:24:f1:87:15:bb:47:67:72:bd:cf:11:fe:f6:
         3e:26:7f:b6:0e:d7:af:ca:31:99:74:fe:21:7b:84:64:b3:4c:
         ab:7c:76:fe:5e:06:09:11:82:65:47:07:2a:ff:84:23:35:4f:
         ad:35:25:ff:e1:ce:9d:98:77:52:04:af:2f:68:12:24:2f:d1:
         dc:14:24:c2:dd:86:d9:85:37:92:c6:cd:e5:ad:25:f5:6f:11:
         87:6a:e3:54:50:fc:ac:e0:42:49:93:f2:d0:19:e2:11:97:31:
         03:8b:6e:16:a9:0b:c0:a0:57:16:db:f0:99:59:f2:61:68:11:
         96:ae:aa:11:6e:e5:41:c1:a0:97:0f:d2:8f:60:fe:06:35:f7:
         72:b5:7a:78:ff:93:50:a9:c5:11:31:95:c2:d0:b8:37:ff:08:
         6d:ff:29:4b:2b:36:34:dc:2c:d2:f4:6c:90:bf:22:98:ac:a4:
         01:3b:e3:19:84:3a:24:7a:b8:76:34:a3:9e:86:05:8d:b9:2f:
         7f:67:71:9d:90:db:8c:98:18:a0:20:87:63:51:a8:cb:a4:c6:
         e6:03:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----