Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3934353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230323a3934353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          XoB0ENM5LBmLNOwSpNxdtwA7SehVRmwEqElOSfqqKd0=
Subject key identifier:   F6:A8:AB:E3:B6:E5:B2:FD:56:59:3B:5C:03:60:C2:98:E6:6F:F8:95
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       476F2BB5CA5BCE37373031C043993080360734E8
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3934353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 02 Feb 2022 09:45:01 +0000
ROA not before:           Wed 02 Feb 2022 09:40:01 +0000
ROA not after:            Wed 01 Feb 2023 09:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:202:945::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6f:2b:b5:ca:5b:ce:37:37:30:31:c0:43:99:30:80:36:07:34:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  2 09:40:01 2022 GMT
            Not After : Feb  1 09:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b4:ef:ab:22:bc:9a:6a:a0:99:7f:d0:ef:53:
                    9f:66:9b:29:1c:dd:98:51:ee:dd:21:8a:1f:12:b2:
                    15:16:1d:1d:0d:8a:62:80:2f:fc:16:6f:0b:c4:71:
                    f2:02:08:34:d2:50:fc:23:ab:9d:a1:3a:c8:92:aa:
                    f5:22:15:ec:41:13:f3:af:70:22:89:60:59:35:47:
                    78:19:9e:ad:24:a7:a3:70:26:a1:de:fc:ea:a5:e3:
                    d3:b1:5a:20:86:b8:06:0c:ed:49:b8:20:dc:4d:65:
                    fb:8e:a1:8f:8b:e7:40:95:25:70:96:94:9a:b2:68:
                    27:7a:55:fa:90:43:a6:fb:24:c4:c9:39:ae:68:31:
                    80:2c:c9:34:58:c9:29:f8:7d:c7:c7:a4:c2:a8:ba:
                    5d:8d:91:f0:e2:91:5a:4f:a1:92:20:78:57:28:a7:
                    ab:2c:d0:de:51:0b:a8:01:72:73:64:c5:75:73:b5:
                    3e:9a:75:a3:0d:2e:c9:0b:a3:65:dd:a9:0b:b8:33:
                    4b:00:6e:14:ba:3e:1d:e2:8c:a1:cb:6e:85:d4:38:
                    32:6a:93:f5:32:23:dc:1c:cd:54:9a:40:8c:37:41:
                    a4:ba:c2:ec:10:1a:a2:10:75:ac:d4:3d:05:da:53:
                    45:bf:cd:8b:92:de:0f:83:07:59:a1:29:8a:55:ad:
                    8d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A8:AB:E3:B6:E5:B2:FD:56:59:3B:5C:03:60:C2:98:E6:6F:F8:95
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3934353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:202:945::/80

    Signature Algorithm: sha256WithRSAEncryption
         6d:88:d5:ba:17:78:e3:95:2f:db:83:88:1c:3a:f3:9b:02:40:
         c3:e0:23:b7:39:0f:14:b9:e1:e8:75:83:01:94:83:7a:74:d5:
         2e:95:ac:79:6b:9b:44:03:55:eb:f0:e8:6a:35:15:65:49:7b:
         f3:b3:b0:5e:76:ee:6a:01:b6:ff:84:a7:c2:63:8f:d6:02:b2:
         b1:b6:f3:e7:7a:58:a4:31:a1:18:06:dc:09:ed:d8:2a:7f:d0:
         ee:8a:9a:7a:1e:b2:25:3d:49:b0:38:80:fc:48:c2:0f:83:ce:
         52:dc:61:1f:49:e6:4a:87:d5:22:35:41:b6:3b:e2:3e:b7:0f:
         bd:18:1e:bc:45:ec:b1:84:87:8d:ff:46:52:16:2e:ef:e0:57:
         31:18:73:0c:b6:88:45:bc:f9:fc:56:62:e6:a5:49:10:0f:21:
         aa:40:66:04:57:5c:64:a4:a6:d9:d0:a1:80:af:9a:a1:f4:e4:
         ca:49:f2:00:e2:c8:18:9c:ca:98:7c:a6:60:37:eb:84:0d:59:
         ad:8a:95:98:f6:09:80:24:2c:f4:19:12:93:a1:7a:dc:6e:d7:
         cd:24:ce:ed:bd:99:df:b4:96:d7:f5:fb:e5:e1:2a:5f:aa:82:
         01:cc:c1:cf:9a:94:bc:6e:0e:9c:c2:23:7a:5a:8f:8b:91:90:
         fb:5b:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----