Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313335353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230343a313335353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          o2zQNmM+OKayczyOztKy/3PH1vFIKLR7TSQ6AOmEsuQ=
Subject key identifier:   21:48:D0:20:72:D3:31:95:7E:BE:B1:5F:95:69:C3:0D:16:16:EB:17
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7A7017EECBFB9C860915A049F50659AF0FD4C940
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313335353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 04 Feb 2022 13:55:02 +0000
ROA not before:           Fri 04 Feb 2022 13:50:02 +0000
ROA not after:            Fri 03 Feb 2023 13:55:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:204:1355::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:70:17:ee:cb:fb:9c:86:09:15:a0:49:f5:06:59:af:0f:d4:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  4 13:50:02 2022 GMT
            Not After : Feb  3 13:55:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:02:a2:27:81:56:f1:70:94:c5:b6:8f:02:
                    f5:3d:33:ab:1d:02:67:5d:b1:e1:98:33:49:b4:e6:
                    d7:7f:02:65:10:3b:cc:a0:a4:fc:fb:12:d6:be:a2:
                    c4:de:64:48:81:55:26:a9:28:2e:01:a5:8d:f8:57:
                    04:36:68:d7:22:ea:d5:e8:79:4e:93:81:56:23:b4:
                    b0:94:a7:f2:91:63:31:b5:1f:7c:ae:9f:63:50:86:
                    2c:93:6e:23:f4:04:f4:a5:51:33:af:10:40:00:6e:
                    65:c4:2c:88:11:27:9b:bb:75:13:df:de:f1:ee:a7:
                    a8:c7:4a:d1:c9:70:a5:68:f4:45:95:61:8c:3c:01:
                    3e:9f:c5:2e:dd:63:35:03:55:ef:d4:aa:5b:b6:39:
                    6a:47:3c:1a:b8:e2:9a:8e:7b:72:a7:a6:a1:fe:0b:
                    92:76:64:12:5b:fd:de:2f:f0:56:56:61:97:45:c6:
                    42:34:85:f9:8e:6b:c5:1d:98:be:de:c4:e4:22:4f:
                    52:16:b3:eb:b5:f3:c6:c8:2c:17:d6:15:56:36:15:
                    c5:4e:63:c0:c1:ae:8f:3e:5e:65:db:d7:34:2f:ba:
                    82:aa:c2:03:7d:f8:95:0b:7e:77:a9:00:8b:20:dd:
                    f7:84:3e:08:e6:f3:b1:2f:53:ff:8c:6d:0e:9c:94:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:48:D0:20:72:D3:31:95:7E:BE:B1:5F:95:69:C3:0D:16:16:EB:17
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313335353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:204:1355::/80

    Signature Algorithm: sha256WithRSAEncryption
         54:7c:69:fb:63:53:8c:60:49:6f:df:fa:c3:f0:3f:5a:7c:69:
         b7:93:ef:34:ac:e0:dd:7d:40:75:b8:5f:f5:66:53:ee:da:73:
         f0:07:a9:e9:4e:8d:27:dd:22:94:58:04:28:5a:24:aa:7e:50:
         27:5f:86:18:4c:fe:85:45:ed:72:98:9a:f2:ef:9e:8b:1e:ed:
         0d:ae:65:4c:bb:10:44:b3:01:33:95:31:be:c1:80:54:ac:8e:
         bf:bb:3c:74:68:9f:07:eb:0c:7a:b6:10:51:32:a6:6e:1f:83:
         c5:a7:f4:fc:cc:96:39:bb:85:d9:3f:22:82:c3:77:ee:a1:33:
         9d:0e:2a:9d:ca:30:95:52:24:64:77:06:9d:f1:6a:e0:1a:55:
         08:6d:0d:55:0f:ab:16:a3:c6:e1:8f:c8:b9:60:66:c1:57:24:
         15:a0:d3:55:dd:d5:70:a4:4e:9d:7c:01:f6:e5:28:b8:9c:09:
         56:4c:89:db:c4:00:8c:ad:6c:e1:ee:57:f0:1c:42:50:41:29:
         36:ba:dd:65:8a:8e:9d:39:cd:70:83:a0:84:4e:d1:25:fb:10:
         64:b3:43:17:8b:5a:aa:a0:ae:c7:c6:9e:16:b1:41:50:a7:5e:
         dd:a3:d0:34:ed:24:04:db:cb:53:a4:85:3e:6c:16:44:59:aa:
         2a:bb:2a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----