Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a323134353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133313a323134353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          hpuN7rOZK/dqzOn/BMFwrratZZrBZpc8dURwfepv/T4=
Subject key identifier:   21:29:E3:80:B2:DB:5B:55:10:29:61:89:EA:56:41:7E:B4:20:66:CF
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       508844EC22F067E885D1F358380FA988A3A559B3
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a323134353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 31 Jan 2022 21:45:01 +0000
ROA not before:           Mon 31 Jan 2022 21:40:01 +0000
ROA not after:            Mon 30 Jan 2023 21:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:131:2145::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:88:44:ec:22:f0:67:e8:85:d1:f3:58:38:0f:a9:88:a3:a5:59:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 31 21:40:01 2022 GMT
            Not After : Jan 30 21:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:0a:93:35:f2:b6:a1:7b:46:86:1d:28:57:
                    e5:1d:25:9a:80:c7:c6:17:25:fe:f1:92:b9:4a:a9:
                    d5:6a:46:5f:cb:ec:c9:27:53:34:eb:dd:13:d9:b7:
                    51:c4:d2:07:7b:c0:67:07:ef:00:b8:e3:ff:0b:e7:
                    d2:2e:15:eb:a9:fa:d1:ac:6d:96:3b:bf:2e:e5:53:
                    22:36:78:49:58:1e:e4:34:34:78:2c:20:43:c5:30:
                    9c:3c:a0:a7:40:c4:18:23:81:3c:e2:00:18:29:bd:
                    17:12:55:c8:f1:23:5b:71:46:27:d1:e6:ed:ed:8f:
                    76:fe:ab:b7:a9:31:cc:dd:a2:58:a7:75:4b:5d:02:
                    ec:35:91:d5:ea:06:a2:b9:52:1e:2a:a5:4d:92:96:
                    04:a5:03:09:7d:af:11:c1:0f:b4:95:fd:69:20:7a:
                    33:34:74:bb:49:e2:1a:b1:66:e2:f9:47:a3:26:48:
                    90:9d:39:7e:91:8f:64:6b:1b:aa:c6:da:18:35:39:
                    9a:93:11:90:6a:2c:9f:2f:26:4f:f0:87:56:ba:c3:
                    30:85:9b:47:7d:c1:09:4a:a1:73:4a:e6:04:54:95:
                    b5:2c:22:bf:48:ad:35:e5:9d:7e:64:1b:30:4f:a3:
                    89:0d:06:03:fc:42:45:fc:85:8b:c5:58:fb:a9:2f:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:29:E3:80:B2:DB:5B:55:10:29:61:89:EA:56:41:7E:B4:20:66:CF
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a323134353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:131:2145::/80

    Signature Algorithm: sha256WithRSAEncryption
         99:d2:8f:f4:89:64:71:9a:d3:d7:0d:ca:68:06:d5:4f:ba:f6:
         87:8a:dc:17:f2:d0:4d:4d:a7:ea:9c:07:60:cf:0b:10:4d:57:
         e7:90:2f:6f:00:08:cc:fb:84:ff:18:5b:89:6a:5b:58:c0:b2:
         ca:cf:f1:72:27:49:eb:b4:64:83:b2:55:a0:77:d3:4e:66:7e:
         81:e8:df:fe:f4:2f:a8:32:d6:6f:8b:b1:f5:28:ea:50:31:1c:
         0c:6b:de:2d:58:d4:be:15:6b:34:9a:e6:85:e1:95:1b:c0:ed:
         b0:d3:98:5f:c5:d4:99:37:5f:96:bf:97:86:81:e0:57:60:ce:
         d9:a0:b6:19:5b:52:8b:a3:1f:4a:3e:aa:83:f2:d6:e1:51:23:
         3f:8c:57:63:41:c4:a6:0d:a4:be:8b:57:25:a5:af:f4:75:e1:
         ed:11:3e:8b:0a:c2:76:06:82:d1:51:d9:6b:58:0b:76:6f:0a:
         6e:1c:d2:7b:81:cf:4f:7c:aa:23:34:de:e3:b1:63:f7:e9:78:
         80:43:ab:14:23:dc:26:30:fa:e4:a6:a1:ab:c4:62:47:3b:8f:
         34:cf:4e:9a:72:5e:43:d0:f0:d2:81:b0:9b:2e:dd:49:42:72:
         fb:1c:03:cd:4d:84:8d:16:b0:e1:28:41:ca:a8:14:14:33:3e:
         45:cb:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----