Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3134303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230333a3134303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Aa04ZiIPptS+8yuNgyvv4ieKvDsM9JObZczfRb5SfaQ=
Subject key identifier:   EE:F7:52:01:D9:BF:F7:2E:7A:B8:D4:65:4C:E2:AE:21:C4:92:4F:9A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       31979DFAE28C49280CB80825A8A08A14E87187CA
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3134303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 03 Feb 2022 01:40:02 +0000
ROA not before:           Thu 03 Feb 2022 01:35:02 +0000
ROA not after:            Thu 02 Feb 2023 01:40:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:203:140::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:97:9d:fa:e2:8c:49:28:0c:b8:08:25:a8:a0:8a:14:e8:71:87:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  3 01:35:02 2022 GMT
            Not After : Feb  2 01:40:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:21:c7:c6:54:64:f7:be:08:96:17:7a:03:
                    0f:ed:70:31:d4:cf:db:84:15:6c:e2:cf:bd:e4:46:
                    9f:fe:5f:57:6d:0d:7a:4f:8f:78:d8:75:ff:48:da:
                    7d:7e:5d:e2:d1:37:b2:84:83:00:7c:e5:87:4f:38:
                    bd:34:57:97:e3:09:29:ae:40:4c:b6:ed:64:d1:75:
                    39:4e:ed:76:34:6e:53:a5:90:21:5c:42:e4:15:a9:
                    c3:59:1a:d0:3c:a6:8f:a4:8f:20:14:0e:4c:00:da:
                    58:d4:dd:62:4f:ed:3f:61:93:12:d7:41:d6:86:90:
                    13:62:db:0d:72:bd:f6:60:b8:c2:5b:05:2a:c2:d3:
                    a3:ce:80:06:e5:5d:ca:84:36:4d:3b:af:74:02:d7:
                    a3:79:77:14:11:71:28:30:03:db:e3:74:6f:c6:24:
                    ba:7f:d9:b8:92:4d:24:39:c8:ef:ec:ef:c4:ba:07:
                    2e:e2:52:18:6c:db:f9:cc:43:9d:fe:bf:ea:23:85:
                    2b:36:98:5f:7e:22:c3:3b:2e:1e:ac:e1:fe:05:60:
                    ae:dd:16:51:41:51:0d:20:43:9d:b7:11:ec:07:50:
                    0a:14:70:b8:d5:80:73:a2:b3:5f:a1:19:79:8b:71:
                    47:71:2c:73:b8:f4:f4:c8:e5:53:a0:d7:04:e2:6c:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F7:52:01:D9:BF:F7:2E:7A:B8:D4:65:4C:E2:AE:21:C4:92:4F:9A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3134303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:203:140::/80

    Signature Algorithm: sha256WithRSAEncryption
         22:cc:f1:1f:c4:f7:3b:46:1e:2f:f8:16:c5:65:74:cd:c8:39:
         f7:44:8c:2f:b8:ae:42:00:7c:b1:c1:c4:fc:87:03:3c:cc:69:
         b8:16:dd:41:01:b5:6b:e0:cf:98:ac:52:4c:c1:c6:d4:9e:64:
         e4:2b:99:66:bf:15:e0:ae:a5:7c:20:29:67:1c:15:2b:f7:5b:
         4c:43:7e:7f:57:43:12:1d:7b:a2:5d:97:5f:4d:f1:b5:f9:b4:
         8d:12:19:e4:c2:f0:53:74:62:31:53:a4:99:03:12:f0:f2:c9:
         88:31:d7:a0:8d:da:1c:a5:6f:8c:75:6a:08:c1:eb:68:94:09:
         61:23:0a:55:d6:af:32:ad:20:85:70:0e:50:7a:c0:e8:9d:f6:
         e7:34:0f:60:a9:99:02:25:0c:02:73:05:65:ea:e9:14:5b:58:
         54:19:5a:11:06:a7:48:d8:af:0d:6a:7e:98:60:7f:f8:d8:85:
         1d:e0:97:92:e6:ce:06:47:71:37:fb:00:7b:95:2a:78:41:31:
         59:62:6e:b6:c1:e1:86:39:46:c2:2f:95:25:3b:c0:e2:29:63:
         6a:70:fc:33:4e:0b:71:88:4b:dc:33:4f:0e:0e:12:ef:3b:86:
         23:76:71:28:f6:af:14:6b:e1:d4:97:b2:ed:de:58:5d:fb:4b:
         45:19:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----