Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313331353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230333a313331353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          zckI9XUX2GkGXOglVqxBkjVTkUWMG3JXa/tKrO3IW5M=
Subject key identifier:   F2:AE:6A:3B:19:D4:62:94:50:7D:A7:58:7A:5A:98:38:3E:4E:24:F9
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       26B396F7C643BD0533C61124DBB2D234B94E901B
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313331353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 03 Feb 2022 13:15:01 +0000
ROA not before:           Thu 03 Feb 2022 13:10:01 +0000
ROA not after:            Thu 02 Feb 2023 13:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:203:1315::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b3:96:f7:c6:43:bd:05:33:c6:11:24:db:b2:d2:34:b9:4e:90:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  3 13:10:01 2022 GMT
            Not After : Feb  2 13:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:5c:ce:22:58:8f:de:82:7b:f1:57:ce:b7:
                    fe:6b:48:b5:c9:bd:ad:04:56:f7:ee:2a:3f:0f:e9:
                    2d:ee:f5:77:b5:1b:36:ee:9f:17:e0:d5:5b:ca:05:
                    10:31:08:8f:58:69:fe:ee:2c:a2:41:cb:63:cc:75:
                    f1:55:6c:7e:e3:66:da:d5:80:ac:05:ca:46:eb:97:
                    41:9a:6c:53:e9:cf:2a:e5:39:f5:a2:d0:d1:61:b9:
                    b8:20:a1:f9:fa:84:a6:b9:55:5d:59:b4:c3:46:89:
                    48:0a:87:df:ab:50:d2:a0:01:66:de:48:db:00:52:
                    10:97:ff:c2:25:10:9e:c8:cc:83:6b:dc:0a:a4:05:
                    4f:97:24:67:68:09:cd:b4:56:66:01:2d:d8:ee:9f:
                    3a:ba:e6:99:2e:0d:6a:7c:1e:73:e7:c1:8e:0e:ea:
                    e1:0d:15:58:75:46:3e:97:c2:ba:3b:6d:60:46:82:
                    f5:74:50:3d:03:16:61:f6:f4:14:5a:4d:3c:4f:52:
                    be:df:da:a2:a0:04:34:9d:08:c9:15:48:7d:59:fd:
                    65:4f:f0:aa:c0:1e:d9:34:90:be:b7:be:86:16:0a:
                    d6:f8:ca:71:54:7a:b3:e6:e3:7e:7a:1b:0c:27:1c:
                    17:ca:26:0c:ad:46:4c:e3:71:6d:c3:24:c6:b6:89:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AE:6A:3B:19:D4:62:94:50:7D:A7:58:7A:5A:98:38:3E:4E:24:F9
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313331353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:203:1315::/80

    Signature Algorithm: sha256WithRSAEncryption
         c0:9b:e8:82:33:0d:ca:47:d2:b9:f7:7d:75:a9:21:de:72:53:
         db:a1:a6:72:6b:a6:74:cd:21:7d:42:41:c1:81:71:8a:d8:47:
         06:83:63:5f:74:e8:62:9c:3d:6a:84:60:e4:3e:f9:2e:68:58:
         fc:eb:b6:83:25:e8:aa:0e:f0:bb:8c:ae:c2:a8:f6:58:7b:11:
         11:3b:b9:ab:21:89:37:51:d2:e3:36:d0:03:37:6e:8c:5d:b2:
         72:43:40:54:81:36:63:83:d6:cd:81:3f:cc:7a:dd:1f:71:a3:
         92:de:be:6f:94:34:b7:d6:1c:6c:d5:b5:bc:07:a6:0a:21:51:
         6c:04:57:31:14:5a:d1:14:c4:42:fe:5d:3a:27:42:05:3d:8b:
         50:b4:eb:b6:42:13:37:52:26:07:0a:7c:31:d4:b3:b8:d5:4f:
         f1:7e:f0:06:eb:3f:a0:c5:d4:b1:7f:04:10:b4:cd:8c:58:ae:
         35:5b:1d:c6:24:ad:c6:be:6d:26:8d:62:55:ec:12:05:7b:7f:
         cd:ca:8c:a0:65:c7:13:86:59:74:0a:42:ee:a6:dd:e7:b5:b3:
         c5:77:88:af:d1:d6:42:fc:24:90:0a:68:fe:58:34:7f:fa:b9:
         61:aa:31:47:36:4c:b6:2d:57:45:65:28:a0:57:36:ff:a1:a7:
         43:43:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----