Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313734303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230333a313734303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          yWkh8q1i9zj/yXX3OiSVLmf5bjecPKIW9Jr71Vrm6gQ=
Subject key identifier:   45:E1:DE:CD:65:4B:28:65:F7:60:86:90:CB:33:C9:AC:1B:DA:F0:81
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2BB48FDBDBD5F5BD7E82F383B250CD9938D5FE39
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313734303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 03 Feb 2022 17:40:02 +0000
ROA not before:           Thu 03 Feb 2022 17:35:02 +0000
ROA not after:            Thu 02 Feb 2023 17:40:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:203:1740::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b4:8f:db:db:d5:f5:bd:7e:82:f3:83:b2:50:cd:99:38:d5:fe:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  3 17:35:02 2022 GMT
            Not After : Feb  2 17:40:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:ec:ec:af:6f:c2:fe:66:df:89:5c:68:94:
                    cc:6c:54:48:2d:b4:1c:ef:02:1b:95:68:7e:6e:1b:
                    bf:db:18:41:99:5d:a6:0a:d1:4d:e6:01:f2:40:8b:
                    ff:9f:a5:a9:c6:4d:bb:3f:d9:4a:f8:f7:76:58:81:
                    29:b2:f2:7d:ad:55:e4:8e:db:27:60:14:3e:2e:aa:
                    e6:58:39:34:77:93:71:d8:49:77:1e:7f:20:39:58:
                    ed:34:07:79:22:0c:5b:99:a8:c5:50:97:5f:13:5d:
                    c5:d0:33:30:62:c1:30:e2:40:8f:32:3c:2b:d1:44:
                    3f:af:e3:7d:cf:fa:32:74:b4:bf:6b:d8:9e:f6:92:
                    e4:9c:bd:f9:d4:bb:b7:c3:87:e4:76:2d:19:a1:3d:
                    cf:cc:5b:ed:14:6c:46:27:d2:c0:8c:65:84:c7:01:
                    e9:8e:93:6a:40:20:8d:89:ec:82:ae:ca:f3:96:93:
                    74:35:68:07:d1:7f:4b:62:b8:4a:35:2e:c4:38:2c:
                    51:32:4d:fc:b3:54:51:19:8c:26:80:87:5c:98:90:
                    4c:f5:52:bc:e8:e7:21:d6:25:c3:0a:58:b7:48:1e:
                    a1:ff:e6:b1:44:2d:fd:0f:8a:3a:5e:ad:61:73:c3:
                    a6:1b:51:b8:be:b7:6b:91:6f:73:04:b7:41:4c:d7:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E1:DE:CD:65:4B:28:65:F7:60:86:90:CB:33:C9:AC:1B:DA:F0:81
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313734303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:203:1740::/80

    Signature Algorithm: sha256WithRSAEncryption
         c0:6f:43:9b:1c:35:dd:27:81:eb:c5:dc:82:64:a5:42:9e:18:
         71:be:e3:43:d5:08:a0:85:bd:63:15:49:bd:be:4f:f6:58:84:
         76:fa:c7:61:ae:05:80:96:1e:f5:85:2d:4b:f6:b3:7a:f7:c2:
         0b:d9:20:3a:dc:0a:2e:25:76:87:7e:6c:62:58:86:31:70:7f:
         66:1e:51:00:cd:84:4a:79:8f:8f:a2:35:98:95:a4:ef:42:8d:
         2f:12:14:03:e6:e6:58:2d:a2:f5:21:be:94:57:48:e1:ad:7c:
         b4:84:57:bb:de:99:94:f7:be:72:a2:b9:13:10:61:d0:71:fb:
         50:f1:83:f4:fc:41:f2:0b:72:46:32:02:3f:1d:93:1a:32:b7:
         11:d4:f5:fd:91:4b:30:60:f2:d3:64:71:2b:ba:03:e9:56:e8:
         c8:fe:5a:c4:dd:f2:8e:c0:98:39:28:bb:ba:cb:36:02:dc:55:
         50:b5:fe:d8:63:27:fe:8f:87:75:46:33:a5:8a:5c:d6:67:8c:
         2b:26:13:de:f8:43:96:a2:ba:29:ad:c4:79:ad:2e:6d:56:a1:
         c5:52:55:fc:5e:99:67:c6:ba:37:3c:6e:9d:2f:5d:18:20:3f:
         c4:31:b2:10:cf:e9:3e:06:89:b2:8d:24:4e:d5:c7:77:14:55:
         4b:ec:1d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----