Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3235353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230323a3235353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          r/ojIitibI2rfryuVATa9i3qoX9wXUWztsAs1w9RGNQ=
Subject key identifier:   94:06:AC:68:89:B2:4D:B6:DF:78:4C:00:D9:EB:05:FE:E0:49:0F:24
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       623554625DA0F60D9A8887912D8A5E9FB24B07DD
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3235353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 02 Feb 2022 02:55:02 +0000
ROA not before:           Wed 02 Feb 2022 02:50:02 +0000
ROA not after:            Wed 01 Feb 2023 02:55:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:202:255::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:35:54:62:5d:a0:f6:0d:9a:88:87:91:2d:8a:5e:9f:b2:4b:07:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  2 02:50:02 2022 GMT
            Not After : Feb  1 02:55:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:39:5a:21:96:f7:73:76:27:e6:c2:c8:8e:
                    cd:f9:cf:53:e3:45:42:4d:80:93:03:ab:10:8d:bd:
                    60:99:8e:7f:f3:75:5d:d2:73:4f:26:ea:41:41:c9:
                    ce:0a:e0:19:57:c7:4c:3c:60:ce:28:13:16:94:fa:
                    e8:30:83:4a:00:c9:29:a7:34:f2:25:1a:e6:bd:83:
                    b0:6e:e7:5d:82:f3:bf:45:96:31:c8:d8:79:ff:63:
                    e6:7b:fb:c3:c1:4b:52:8e:f8:13:bd:80:3c:e1:bb:
                    6b:3f:02:d2:3a:eb:b6:60:66:55:3c:ef:32:29:ad:
                    07:c5:59:47:71:c2:4d:84:c9:32:b4:ca:01:2f:2f:
                    b1:dc:49:09:aa:5c:e3:a1:c5:5a:17:18:f4:9f:e8:
                    dc:12:cb:2a:db:f3:6a:e8:8e:60:c4:5e:fc:5c:4e:
                    b6:87:da:69:eb:47:1b:9d:06:65:26:3d:70:5e:da:
                    f0:97:4d:94:72:ca:f4:f7:75:6e:17:cb:c9:37:01:
                    bf:ff:f7:f7:72:56:34:92:63:f7:6e:7f:2e:4a:e7:
                    71:60:f1:24:db:42:be:84:0b:0d:94:7a:35:24:ec:
                    9c:87:7e:96:76:ac:24:9e:2d:0b:88:1a:dc:fe:9c:
                    6d:f3:c0:b2:0d:e3:2b:c9:d8:09:cd:97:6c:42:b6:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:06:AC:68:89:B2:4D:B6:DF:78:4C:00:D9:EB:05:FE:E0:49:0F:24
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3235353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:202:255::/80

    Signature Algorithm: sha256WithRSAEncryption
         7e:0b:0d:c5:91:37:0f:c2:6c:9c:c5:17:af:22:00:e8:3d:53:
         49:89:cb:ee:d7:a5:bb:ff:5d:47:6f:1d:49:cc:cf:c8:6c:a7:
         d7:58:90:f3:82:f8:87:50:07:64:e5:ca:14:b2:e8:c0:15:2e:
         70:f7:bd:da:74:1c:0a:75:42:cf:02:f0:d2:5b:8b:f3:33:5d:
         92:a8:24:7a:c4:91:62:94:0b:f0:c8:cc:6d:e8:d6:e0:9e:ac:
         0b:ca:0a:81:c4:b1:90:0e:10:f9:06:fc:db:b9:55:0b:78:cb:
         44:ca:06:a7:f6:e2:24:c9:63:3c:4c:5c:8b:3a:36:8d:86:5b:
         61:46:2c:ac:2d:e7:c6:98:3d:69:98:98:f2:f9:32:1b:22:8d:
         0f:fc:ee:2a:9a:46:5b:b7:40:6a:5f:ca:c4:17:49:8c:21:20:
         9e:52:33:bc:d2:ac:cc:3a:a3:f6:4e:61:3c:3f:d7:49:ec:0b:
         ac:3d:54:52:d8:7e:59:85:e4:82:40:97:2e:45:c1:0c:3b:32:
         97:5f:4c:c9:ec:f3:f0:91:25:33:26:0c:c5:39:18:81:b9:d5:
         c6:00:11:59:19:e3:59:c4:e8:e1:86:b9:26:32:65:8f:0e:f6:
         e3:cd:86:c9:54:09:ed:45:36:f8:e9:94:81:80:cd:37:b2:c6:
         f6:ed:72:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----