Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3834353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230333a3834353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          QUeeV8RQcE0l9EcmJY86OZcWlz4xN9X+hrRomAWB/TU=
Subject key identifier:   D2:89:9A:13:AB:A9:DB:82:8F:14:6E:46:B2:C2:39:01:9B:B9:57:93
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       22E41055B5B9B582409C601B08A49D193B4546CC
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3834353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 03 Feb 2022 08:45:02 +0000
ROA not before:           Thu 03 Feb 2022 08:40:02 +0000
ROA not after:            Thu 02 Feb 2023 08:45:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:203:845::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e4:10:55:b5:b9:b5:82:40:9c:60:1b:08:a4:9d:19:3b:45:46:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  3 08:40:02 2022 GMT
            Not After : Feb  2 08:45:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:95:4f:f9:14:53:d5:4b:c3:26:90:c4:ac:
                    a6:db:87:1f:2e:1d:d6:3e:7c:56:eb:9c:dd:83:0a:
                    bd:f5:cf:28:91:3e:cf:fe:08:b8:18:34:14:ae:83:
                    38:b0:ce:8e:05:74:66:37:fa:4d:b3:6d:b3:66:72:
                    6f:89:75:17:29:5f:ea:f1:16:5d:91:3d:7e:b4:de:
                    c3:b3:95:00:e2:14:6c:d0:e9:e4:05:ca:6a:c4:8b:
                    5a:80:13:30:26:50:b3:3f:5b:e2:4e:5f:bf:00:82:
                    ea:f9:78:5f:a6:e8:b0:43:35:99:17:5b:1f:19:2b:
                    9b:bb:22:99:22:42:41:bb:1c:1b:f8:95:cd:c1:8c:
                    3a:08:c0:b2:9a:c6:ce:32:82:1a:2c:f7:3f:c3:fe:
                    29:06:bb:35:68:a9:dc:b0:64:67:f9:96:20:bd:20:
                    1f:e9:12:b6:43:b8:f0:c6:42:6d:56:f3:6c:40:ac:
                    a6:58:5e:15:51:d4:6f:25:af:a2:36:15:9d:a8:4f:
                    49:b0:2a:82:e5:49:e4:44:75:83:cd:10:2e:86:5c:
                    05:d6:1d:2d:0f:b0:16:de:76:19:77:29:1c:dd:45:
                    55:7e:e5:80:db:0e:ae:aa:ee:e0:a4:47:4a:cd:7d:
                    18:d9:54:e7:9f:b4:21:a6:76:77:97:37:0c:02:d5:
                    4f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:89:9A:13:AB:A9:DB:82:8F:14:6E:46:B2:C2:39:01:9B:B9:57:93
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3834353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:203:845::/80

    Signature Algorithm: sha256WithRSAEncryption
         a0:45:ff:08:42:88:4c:a8:bb:31:34:23:32:d1:39:56:f7:05:
         ec:ab:d8:d6:c9:e9:de:ad:c4:8c:03:0a:aa:89:4e:90:99:73:
         e5:ea:18:40:84:3f:e1:49:ee:28:7c:b0:af:59:a0:3f:78:fd:
         3a:02:2e:99:ca:b7:10:fa:0e:7c:f3:9e:50:17:c8:0c:5f:27:
         84:19:e2:a2:14:fe:b9:15:2d:fa:e8:bd:47:69:da:fb:10:60:
         65:e6:94:c9:e4:76:ea:d6:52:18:d8:65:dd:0a:da:41:02:91:
         3e:4c:46:4e:96:c2:b5:51:12:4c:1d:cc:5b:70:25:58:b0:7d:
         5b:8b:75:95:ca:36:64:3f:89:42:46:5a:b6:ba:9f:ab:64:3b:
         fb:85:6a:3a:66:0e:66:d3:d3:a9:71:ed:5b:19:be:08:89:44:
         16:db:95:01:74:62:79:69:f1:12:54:8a:32:17:68:71:69:a9:
         9a:ba:11:ed:c1:b2:70:29:17:26:84:6e:65:39:2c:54:f3:4d:
         52:97:94:8f:d6:66:c6:f2:8d:93:81:32:60:4d:3e:f8:20:b4:
         91:a4:6e:05:37:6b:c4:3e:22:3c:06:64:d2:88:a3:1e:5a:41:
         fe:3a:4c:dd:a4:dc:82:18:97:62:e0:66:17:39:f7:6b:52:0f:
         10:18:4b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----