Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313134353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230343a313134353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          6CeMXK9IdQ5zYh0Y/W7bFLP4vQHZhcqa+AvFduHJmfc=
Subject key identifier:   93:A9:54:F3:EE:40:24:F4:8E:B0:C8:F0:BD:CA:49:0D:0A:31:60:64
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4DE6902BA6113090B19001B30C273BDEF854854A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313134353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 04 Feb 2022 11:45:02 +0000
ROA not before:           Fri 04 Feb 2022 11:40:02 +0000
ROA not after:            Fri 03 Feb 2023 11:45:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:204:1145::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e6:90:2b:a6:11:30:90:b1:90:01:b3:0c:27:3b:de:f8:54:85:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  4 11:40:02 2022 GMT
            Not After : Feb  3 11:45:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:a5:e9:28:7c:7c:91:62:05:b8:9c:06:38:
                    f9:a2:c2:2d:6c:f9:ab:73:01:b5:92:6c:c6:6c:94:
                    8f:11:1b:45:cf:e3:0d:1c:e6:92:59:2c:fb:c9:09:
                    40:52:a9:10:78:7a:6d:2a:8e:0a:9b:ad:93:d8:24:
                    3e:25:ae:51:b3:4e:95:a2:56:49:9b:b7:76:40:a7:
                    9a:23:02:fa:28:8d:e6:8f:d6:c6:13:f2:97:a1:f5:
                    e3:5a:18:ca:07:ba:78:c3:0b:56:f2:25:8e:4e:95:
                    38:63:f0:d6:1d:54:51:80:37:07:2d:20:b9:b7:a1:
                    26:a2:7f:46:ee:b2:f5:e6:09:21:c5:5c:d8:d9:66:
                    d3:3e:de:5b:4b:76:02:ce:0a:19:8d:88:2b:a9:d3:
                    2d:7c:a0:1e:f6:f8:5f:06:a3:ea:e1:5c:54:53:d5:
                    b5:36:29:5b:ce:3c:2b:6c:4f:4f:b3:ad:c5:26:35:
                    06:6b:ee:04:3b:77:2c:9f:9e:1d:f8:bd:f4:36:a1:
                    eb:81:3a:9f:f6:46:3c:a9:31:f9:7d:f6:17:c2:d1:
                    d5:8f:39:94:8f:cf:ae:60:ac:81:1a:1f:2c:a3:0b:
                    14:e3:e4:e0:14:f5:4f:11:06:ab:42:d1:71:0e:b5:
                    74:cd:ce:3f:3e:48:8d:c6:b4:31:26:d1:1e:5d:b5:
                    1f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A9:54:F3:EE:40:24:F4:8E:B0:C8:F0:BD:CA:49:0D:0A:31:60:64
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313134353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:204:1145::/80

    Signature Algorithm: sha256WithRSAEncryption
         0d:86:9e:79:d1:1c:b6:56:ed:ba:75:40:21:62:11:93:e2:5f:
         02:7e:56:41:25:f6:54:c4:c5:12:ea:d7:ab:ab:8f:e9:14:2a:
         bf:38:0a:f9:ba:3a:6c:83:e7:6b:1d:ab:8f:1a:b2:03:74:b7:
         2e:33:5b:ad:3f:c4:3b:c2:e4:cc:9b:6a:f0:3e:a5:be:17:fa:
         ba:8a:aa:00:fb:39:03:fc:ff:20:72:f8:1c:b5:dd:34:9a:73:
         13:86:07:ce:d3:dd:22:ac:1e:64:20:e9:2f:7c:cc:ad:0a:2f:
         cd:26:d5:4d:4b:c5:a4:df:be:96:e9:d0:f1:29:52:ad:7a:23:
         b1:17:d7:db:f9:3f:53:78:1e:a8:58:80:57:0d:d8:b4:9f:99:
         ff:29:1e:cb:10:67:dc:f9:10:6a:0d:37:93:49:4b:e8:02:fa:
         a8:65:6f:86:e2:31:82:0e:b9:1b:62:eb:45:eb:f0:3f:20:f3:
         5e:52:89:3b:a1:8e:a2:ac:e5:28:6a:1d:8b:06:95:cb:b3:b5:
         81:1f:5c:50:32:e0:43:72:b5:b7:5c:8e:45:fb:7b:9a:39:8a:
         15:14:06:0c:56:77:d5:dd:aa:27:04:d5:53:5a:bb:43:1f:55:
         96:26:96:a1:5c:25:6b:ed:d3:ad:57:5e:8d:39:e0:bf:cb:96:
         ef:f4:0e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----