Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3433303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a3433303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          2/k34BVDieEWg8opl6VIKtDwxj8W+xByzlgiXAOweos=
Subject key identifier:   74:49:9B:EC:D1:A0:A6:DC:27:68:F6:38:21:B7:CA:A1:0C:73:C8:D4
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       54A005007F3738DE34168755703394F3FD86EEB9
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3433303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 04:30:01 +0000
ROA not before:           Tue 01 Feb 2022 04:25:01 +0000
ROA not after:            Tue 31 Jan 2023 04:30:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:430::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a0:05:00:7f:37:38:de:34:16:87:55:70:33:94:f3:fd:86:ee:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 04:25:01 2022 GMT
            Not After : Jan 31 04:30:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:1d:a5:54:7c:0d:99:01:eb:4a:3a:60:8a:
                    7a:26:98:f7:a3:8f:6d:71:f8:b1:f6:1a:49:0a:04:
                    75:ec:91:98:1b:44:64:fa:1d:30:0d:9b:2e:de:14:
                    45:9b:36:1d:0b:a0:cc:f7:84:20:61:c0:60:5e:63:
                    fc:e1:ba:0f:63:97:3f:65:a5:e7:e6:65:c1:96:4e:
                    dd:5b:6d:16:2e:7d:a7:8e:a0:53:5b:ec:13:9a:f4:
                    ce:60:05:db:84:12:9b:c3:7a:b5:1b:af:d6:9b:2a:
                    fe:7d:0b:4d:41:d1:e1:02:40:1b:aa:b2:d1:ff:eb:
                    13:56:14:07:fd:0b:ca:b6:a1:bb:5b:d8:6a:3b:45:
                    a5:93:3e:e7:38:d9:e2:cd:dd:24:8a:f7:b2:00:b5:
                    14:29:70:44:d0:86:48:38:00:db:f6:0e:28:31:b4:
                    b8:d2:d6:de:8c:66:e1:a8:69:98:13:cc:a9:b5:f4:
                    53:eb:a9:c8:dd:5f:ab:46:9c:a1:3f:35:c6:78:c4:
                    f2:6a:71:4b:86:c4:41:10:cb:56:d5:4b:df:c8:82:
                    2a:56:97:fe:af:7f:6a:79:7a:32:ac:43:12:f7:7e:
                    c1:26:38:19:c2:d7:14:17:bc:51:96:7e:4f:db:74:
                    b0:75:b7:3d:55:05:fc:c4:67:66:9c:a7:c9:0f:6e:
                    1d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:49:9B:EC:D1:A0:A6:DC:27:68:F6:38:21:B7:CA:A1:0C:73:C8:D4
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3433303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:430::/80

    Signature Algorithm: sha256WithRSAEncryption
         08:87:bf:f2:2d:f3:48:8d:5c:00:49:fb:62:5e:e7:0c:1b:0f:
         1f:9c:1f:83:af:f3:f9:3f:93:24:dd:db:4f:8f:08:c2:23:c9:
         4a:2f:b1:52:80:b6:87:6b:69:38:05:19:ab:28:bc:a8:83:32:
         3c:3f:c3:90:a6:d7:ef:30:d9:e7:cc:ae:18:b4:c8:b1:40:6c:
         a9:5c:3b:56:2d:0b:5e:f9:48:7b:88:89:08:de:76:be:13:a5:
         d2:b6:1f:29:b0:5f:49:67:38:62:6b:54:5e:cb:42:83:7a:f1:
         46:1e:47:b7:ae:e2:7d:ae:ca:13:f5:6a:52:6e:77:9f:6d:7c:
         14:c3:bb:ae:12:89:10:43:c4:e4:2f:cb:19:69:59:32:32:a4:
         4e:a1:8f:ef:e2:15:33:b4:28:f8:5d:58:de:3e:d3:94:71:02:
         42:4a:21:f3:f3:86:79:f2:fa:a6:42:3c:4d:b0:6c:63:98:1d:
         ad:ea:d1:c1:b4:6f:00:27:eb:ae:49:9a:62:fe:eb:74:32:2c:
         2d:5a:3b:ed:f6:5b:34:d2:3f:8a:b5:80:7e:ff:2c:d4:98:f2:
         55:eb:00:23:55:fd:80:87:34:6a:d4:52:70:4b:0e:b7:2b:92:
         31:d9:89:ea:fb:52:e0:3d:d0:12:cb:b9:1c:9d:f0:02:94:aa:
         1c:24:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----