Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313135303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230343a313135303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /yE2lmw5aq5lU/HX+9YsPRawLkhJK8aoaH+lI9tGLsA=
Subject key identifier:   9F:C7:6C:F7:B3:CD:83:EF:DB:80:4C:08:92:87:05:0D:D6:A4:D5:B0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7C71995E79C8035E944F63CDA2877995E8741496
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313135303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 04 Feb 2022 11:50:01 +0000
ROA not before:           Fri 04 Feb 2022 11:45:01 +0000
ROA not after:            Fri 03 Feb 2023 11:50:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:204:1150::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:71:99:5e:79:c8:03:5e:94:4f:63:cd:a2:87:79:95:e8:74:14:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  4 11:45:01 2022 GMT
            Not After : Feb  3 11:50:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:af:5c:fb:8d:27:a6:cf:b3:35:36:7d:cc:
                    24:18:3c:f6:f5:89:16:b4:74:1a:0b:fb:34:36:b1:
                    19:52:b1:47:fb:b2:c6:12:d5:0b:05:3f:2a:43:d9:
                    bd:38:b6:bf:13:88:87:84:e6:bd:b7:b5:09:86:0a:
                    2c:ea:94:6a:c1:ff:48:5b:19:f3:4f:3c:1c:cb:05:
                    0c:db:8e:6e:6c:d2:36:65:18:f0:59:bf:e3:c3:5b:
                    ff:1d:88:36:32:01:9c:1d:3a:41:89:87:ce:e9:79:
                    d8:19:26:ed:25:eb:64:39:89:c7:90:48:ff:f2:02:
                    cd:62:30:fe:7d:c3:45:5e:d1:00:30:65:a2:85:30:
                    08:cc:92:7a:71:ea:e0:84:ba:54:4c:cd:9f:ca:63:
                    18:e9:52:7d:ed:7b:b3:90:c3:01:1c:d4:d6:f2:3b:
                    74:86:76:93:97:4e:02:75:3f:2f:3d:d3:92:ff:e8:
                    15:2b:56:a8:91:d4:a0:3d:20:ca:c8:1f:b4:a2:d9:
                    6c:e0:ac:4f:5b:1a:d6:40:55:d3:92:8a:ae:17:ab:
                    ee:0a:83:a7:d4:ac:4a:99:39:73:40:19:65:b7:95:
                    37:c5:13:fd:15:00:89:f7:bb:e5:65:f9:06:94:c3:
                    04:5c:cf:b3:25:f3:7c:76:8c:db:22:9e:37:14:4c:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:6C:F7:B3:CD:83:EF:DB:80:4C:08:92:87:05:0D:D6:A4:D5:B0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313135303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:204:1150::/80

    Signature Algorithm: sha256WithRSAEncryption
         78:ba:fb:8a:4e:4f:eb:73:30:aa:8e:c9:03:fd:ee:5b:bd:d4:
         50:73:2f:d9:83:98:93:d7:51:c4:26:45:46:91:fc:49:f7:59:
         52:c4:6e:7e:b2:bf:24:a2:15:7a:cf:4e:54:38:64:45:15:3f:
         22:62:90:09:30:6d:3f:e6:51:67:b1:36:a3:49:9e:55:a7:54:
         ad:cc:77:c0:a2:76:16:22:d5:18:85:a9:22:e4:ee:62:55:b3:
         73:53:0d:cd:a7:09:04:19:6a:82:43:59:18:46:81:20:54:8e:
         fb:3e:9a:27:17:62:b6:73:9c:27:ba:8f:56:9a:44:68:7e:a6:
         0c:1d:e2:db:4c:e9:34:c9:e5:67:ac:6b:a7:1d:18:35:83:5c:
         65:a4:89:7b:52:bb:c5:22:0c:d7:ab:5b:1f:a0:d0:db:ec:d8:
         f2:ce:4d:8a:ab:c4:0d:4d:9f:30:6d:7c:f2:56:f3:d1:a5:f3:
         9c:41:5c:c8:be:6e:0c:ea:97:e3:9b:ae:f4:d8:3f:97:c8:64:
         90:08:67:81:c7:11:e4:a8:77:5b:2a:5b:02:b3:47:33:e2:d3:
         1e:d6:70:94:8d:c6:c1:15:d2:9c:a6:6a:ec:c4:7b:ce:bc:de:
         cc:c8:61:69:5c:b9:cc:59:72:e3:69:a3:13:ee:a5:e6:67:7e:
         db:40:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----