Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313532353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230333a313532353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          1W+ffLMHRWDUJrM2uhvsoU5BERzXCCv/PvvaWAWziLM=
Subject key identifier:   5D:62:62:59:17:E2:72:FA:8D:85:69:DB:E0:86:FE:0C:27:CE:26:07
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       636C122024E6F3A72F94C3858B9218AA8B4F02AB
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313532353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 03 Feb 2022 15:25:01 +0000
ROA not before:           Thu 03 Feb 2022 15:20:01 +0000
ROA not after:            Thu 02 Feb 2023 15:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:203:1525::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6c:12:20:24:e6:f3:a7:2f:94:c3:85:8b:92:18:aa:8b:4f:02:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  3 15:20:01 2022 GMT
            Not After : Feb  2 15:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:84:c4:02:37:77:15:4c:4b:f2:1f:49:22:c1:
                    d5:25:13:a7:9a:03:ef:d0:90:5e:dd:ce:a2:b0:01:
                    a8:e9:54:39:e4:40:8b:ac:fa:c3:88:1e:dd:c5:7b:
                    ad:21:14:3c:6d:ec:cc:18:eb:4f:25:8e:95:c6:4a:
                    2d:24:f9:49:6b:9f:65:39:e6:0b:13:7d:fb:c4:09:
                    1a:76:c9:96:f5:8f:68:84:ff:d1:34:c8:b9:65:31:
                    c8:af:2a:7b:e0:86:fa:e2:e5:60:5a:ef:02:e4:1a:
                    87:6f:6b:0e:16:54:5b:f9:f9:bd:a8:7b:91:92:ec:
                    ff:aa:87:e5:06:e9:2e:0d:45:fa:d3:14:ed:66:58:
                    fe:58:ab:ee:67:eb:95:f9:7a:10:33:2d:62:10:32:
                    cc:29:91:2a:9c:56:31:be:00:48:16:de:31:6c:32:
                    2e:0d:49:68:81:f0:43:be:05:f4:11:50:c3:df:a4:
                    b4:4c:c2:ff:87:47:42:0b:06:66:37:45:70:83:1d:
                    62:5c:bd:66:4a:86:88:c6:cd:cb:3d:90:63:1c:d7:
                    91:b7:bb:54:ea:70:dc:72:d3:f8:af:88:c3:b4:d5:
                    d3:53:e6:7e:81:8b:f4:fe:23:c5:86:11:44:59:52:
                    32:b4:c2:24:52:3b:70:ee:ba:84:85:fe:35:fb:2b:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:62:62:59:17:E2:72:FA:8D:85:69:DB:E0:86:FE:0C:27:CE:26:07
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313532353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:203:1525::/80

    Signature Algorithm: sha256WithRSAEncryption
         49:9d:27:0d:3c:3d:70:9a:5b:f5:c3:39:6f:9d:59:47:27:ea:
         16:12:1f:e6:cb:f7:b4:b6:1b:a1:68:a0:2d:9b:25:de:12:76:
         a6:1e:fa:0a:8d:f9:50:a5:af:72:e1:61:a3:9e:6b:65:3f:3e:
         b4:bf:16:f4:dd:2e:87:2a:9e:1d:d9:2f:59:d4:3c:0e:96:4c:
         91:04:1d:fb:db:0b:f5:4e:41:af:54:09:15:ae:6b:c8:d0:fe:
         3f:bb:8f:33:15:bf:9a:f4:cd:6e:c2:34:24:77:b1:f9:ca:b8:
         36:2d:e3:f6:26:92:7a:a7:8e:06:ab:3b:3b:a6:44:fa:83:ed:
         43:e6:25:89:35:ff:ab:ca:2e:10:a8:9e:84:a0:c9:32:54:0c:
         74:c9:cf:36:a8:69:f2:2d:4f:8b:25:e0:4d:c0:ad:25:10:d5:
         d2:d2:aa:10:7c:9a:1e:73:2f:2c:e6:1f:c5:81:c9:93:1f:4b:
         d4:b5:87:c1:e7:b1:37:a8:5d:76:b6:f6:c0:ee:0d:af:73:21:
         29:26:9f:ff:73:5f:2b:f5:24:cd:46:6b:04:a9:1a:93:db:a4:
         97:69:ae:22:c2:72:06:dd:a5:36:f9:63:3e:b3:ea:c4:98:94:
         a7:d5:1d:f0:bb:14:ab:f9:e8:f7:9c:57:89:c5:bc:9a:fd:63:
         d9:30:8d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----