Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3135353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a3135353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          6lcJmrIV/8YvKp67bz7G+VtAguMsuAEM0sqk3yUsPkE=
Subject key identifier:   13:E2:40:8C:B5:F2:A0:54:A4:2D:C3:2A:34:EC:20:D4:18:55:00:BE
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3484E110B08AC7E610FD33279D4AADB83A1AC118
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3135353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 01:55:01 +0000
ROA not before:           Tue 01 Feb 2022 01:50:01 +0000
ROA not after:            Tue 31 Jan 2023 01:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:155::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:84:e1:10:b0:8a:c7:e6:10:fd:33:27:9d:4a:ad:b8:3a:1a:c1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 01:50:01 2022 GMT
            Not After : Jan 31 01:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:39:d0:95:0b:49:bb:fa:f4:52:b7:2a:fa:
                    0e:58:36:70:27:59:11:9e:a6:b4:7a:1e:f8:2c:68:
                    71:69:9b:95:21:2a:69:35:0d:99:7e:8e:36:dd:63:
                    69:1e:c9:4a:21:b1:e9:bf:50:3d:f2:dc:98:f0:d6:
                    4b:aa:fb:7d:6e:51:74:eb:0e:43:60:86:13:f3:25:
                    e1:d7:0c:c5:be:ad:f6:f2:0a:ae:45:49:e8:fc:bd:
                    89:e3:1b:dd:a5:03:fc:3a:64:4b:6d:af:61:50:cf:
                    28:2c:ea:39:ff:44:19:8a:b9:ea:6c:1b:8c:4e:86:
                    83:06:c9:f0:5a:d5:37:2d:d6:43:4f:b4:ea:2b:b6:
                    1e:29:e6:25:91:39:98:a0:4c:11:0e:14:35:c3:7c:
                    b1:1e:20:77:75:7e:c2:67:2d:dd:3f:4d:61:e1:ca:
                    4e:17:3f:4b:23:7c:1d:da:73:9e:18:28:f5:5b:72:
                    e8:df:42:53:3b:7f:62:9e:c1:70:12:27:1a:48:84:
                    48:e4:a4:1a:2b:8e:22:9c:b4:c5:dd:37:cc:8c:ce:
                    27:60:c8:e1:cc:8d:d3:50:5c:a3:f8:2c:a2:42:83:
                    de:e3:e5:a6:a8:3d:ea:e3:ad:06:6f:e9:37:1f:4a:
                    cc:b2:3f:6d:ae:1f:92:9f:00:58:c0:a4:7b:85:b9:
                    90:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E2:40:8C:B5:F2:A0:54:A4:2D:C3:2A:34:EC:20:D4:18:55:00:BE
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3135353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:155::/80

    Signature Algorithm: sha256WithRSAEncryption
         d7:2d:20:86:d6:ba:cd:36:52:c5:e1:12:7a:32:60:86:47:54:
         1d:08:e7:6d:65:ac:fd:c9:c3:eb:cd:ea:85:86:cf:a4:53:1a:
         47:c9:cb:4b:99:a7:48:0e:90:5a:3b:e5:d2:82:bf:d5:33:0d:
         92:94:f9:52:f7:28:08:c7:96:d2:aa:21:ea:fd:47:85:29:f9:
         7b:6d:5b:e1:10:8b:35:3e:9f:48:9c:cc:7b:2f:05:78:91:9c:
         48:81:18:d4:48:fa:af:71:27:e8:c0:c6:5d:db:69:a6:36:ea:
         a2:20:f4:7e:8e:4b:45:e4:c0:0c:2d:ef:d7:a1:84:c6:f5:f4:
         97:6d:37:04:4a:ae:62:2b:37:ef:87:fe:96:04:18:85:23:be:
         b8:bd:c6:0f:2d:59:72:75:8c:a3:b0:28:f7:83:80:5c:23:48:
         b9:76:b5:a1:3e:f6:4c:ac:d5:cf:97:a8:98:ff:3f:8c:c5:8a:
         24:0e:4e:3a:80:74:fc:e9:c4:c1:f4:70:ec:2f:95:ea:9e:ea:
         c2:4d:79:1a:2a:0a:e0:e9:5e:3c:eb:39:0d:0d:28:bc:1f:67:
         c1:7d:e2:76:b4:4a:2d:03:c5:6f:c0:44:8c:3f:a1:78:5a:27:
         46:a7:e7:4d:51:15:b5:96:f0:43:03:84:61:30:aa:9c:7d:88:
         98:b2:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----