Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313131353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a313131353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          F1RQ/f/zuzgaBo+nsYhqr0nzg6EeuqmyEcF4uFn3+3k=
Subject key identifier:   96:9C:03:CA:7D:8B:56:F9:E8:E5:AF:F8:8E:83:91:57:58:73:6C:0C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       56DF5D7B4BADD2974BB21F7AD4739132B0D80F90
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313131353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 11:15:01 +0000
ROA not before:           Tue 01 Feb 2022 11:10:01 +0000
ROA not after:            Tue 31 Jan 2023 11:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:1115::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:df:5d:7b:4b:ad:d2:97:4b:b2:1f:7a:d4:73:91:32:b0:d8:0f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 11:10:01 2022 GMT
            Not After : Jan 31 11:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d2:ce:67:2a:3e:71:18:6a:fd:21:73:7c:21:
                    f9:02:ef:59:22:f5:24:36:c1:b8:3b:4a:ea:51:4a:
                    f7:36:90:a0:0e:37:8b:89:0f:e0:9f:74:01:6e:ab:
                    a1:be:1a:9e:1a:0a:2e:6d:a1:00:7c:ab:c5:84:06:
                    96:90:c0:b6:c4:d6:d5:25:97:36:f0:05:30:59:bf:
                    c1:19:10:e4:1f:57:89:8d:53:d6:e8:75:bc:25:a9:
                    3c:71:98:24:04:92:bb:f3:a7:cc:e3:a7:5f:4d:8c:
                    2a:3b:20:e0:9e:98:a3:3a:8b:a1:7c:04:d4:42:37:
                    76:a7:04:c8:c1:3f:7e:26:50:9c:07:90:46:96:f0:
                    31:c1:aa:2e:a7:09:c4:8b:15:89:a4:45:40:06:24:
                    d4:15:28:90:09:0a:0d:6f:6f:7d:2d:03:7d:66:5d:
                    60:fe:a6:43:39:9d:c5:51:08:a2:ff:b7:63:e7:35:
                    06:11:0b:5d:68:e6:e0:72:5f:87:a4:d8:50:53:ff:
                    6d:1b:f4:7c:86:61:68:e3:58:88:6a:66:91:cb:16:
                    cf:5e:10:3c:15:83:aa:c5:e6:e5:5c:91:f7:6c:5d:
                    43:67:fa:36:f0:cc:3e:5e:24:08:44:f8:8d:ee:17:
                    f2:fa:08:a8:d5:1d:c7:fe:c6:f4:df:b1:9b:93:d8:
                    72:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9C:03:CA:7D:8B:56:F9:E8:E5:AF:F8:8E:83:91:57:58:73:6C:0C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313131353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:1115::/80

    Signature Algorithm: sha256WithRSAEncryption
         80:c8:9f:19:1e:3f:38:97:66:19:f6:c1:3c:cc:06:bf:53:17:
         a0:9d:18:f9:9a:68:ad:d7:c0:28:30:f4:c4:72:87:ed:28:ad:
         32:ae:bf:30:65:11:3d:fa:43:d4:6c:4b:9c:03:dd:be:c3:d9:
         50:e3:2b:4a:5a:e4:06:83:ba:45:d0:a0:47:43:e4:e8:6e:6b:
         0b:24:51:71:c2:40:e2:fa:b7:d1:2b:b7:4c:0b:68:37:86:55:
         5a:0c:a8:2c:a5:22:77:4f:a9:e1:d3:a6:9b:d1:7b:b2:e3:fa:
         a7:76:84:59:b1:38:c2:7a:9a:34:c5:d6:d7:21:9e:b7:2a:43:
         a8:a7:65:bb:cc:fe:42:c4:af:bd:07:9f:99:2d:92:3c:51:89:
         4b:2e:57:e3:e4:2d:7b:7f:75:57:0e:3c:60:f5:f9:b2:53:c1:
         b2:58:74:c5:2f:33:9f:ef:b7:99:5f:c6:69:a7:67:0a:98:f4:
         15:2c:f1:88:25:31:64:f8:7d:e0:36:dd:d1:7d:92:dd:4f:e2:
         9d:37:46:90:32:4e:92:fa:67:ef:0e:e6:8b:4d:b4:4d:e4:12:
         44:af:56:43:97:e9:91:7b:98:90:d2:b5:dc:21:d4:d9:09:2e:
         a8:83:2b:5b:81:aa:da:d0:53:e6:a9:35:32:c5:ce:e4:0d:5b:
         e8:f8:b1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----