Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a323032353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230343a323032353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          MNPmK3aRMw+lNtiPDen5GCTg+H6Ba5RN1eL7W4+OowM=
Subject key identifier:   82:07:DD:3B:FC:0F:04:0C:FA:E2:89:D2:6A:05:8F:5B:BC:11:A7:93
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6A9C582620CFEF52A5CED098069670B50A88459D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a323032353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 04 Feb 2022 20:25:02 +0000
ROA not before:           Fri 04 Feb 2022 20:20:02 +0000
ROA not after:            Fri 03 Feb 2023 20:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:204:2025::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9c:58:26:20:cf:ef:52:a5:ce:d0:98:06:96:70:b5:0a:88:45:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  4 20:20:02 2022 GMT
            Not After : Feb  3 20:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:a6:c2:17:f7:92:70:a9:e5:59:a1:ba:a6:
                    0b:51:e6:cb:f9:5a:1d:db:73:1b:f4:09:59:8d:e2:
                    7f:06:88:98:83:23:e8:72:d5:43:9b:e7:d4:cc:02:
                    7f:ff:e4:2e:59:5b:ce:12:89:2b:69:93:f8:eb:28:
                    c9:85:7e:76:06:76:90:31:d8:9f:5f:36:3c:5c:aa:
                    c5:43:c7:0f:1a:11:60:24:77:ae:c7:15:6d:1f:9f:
                    40:f1:44:05:e2:b3:fb:78:6d:8c:0f:10:3a:27:df:
                    23:da:4e:78:c7:3d:52:f3:3c:f4:0c:37:46:61:cb:
                    c7:6a:bc:15:c7:6c:7d:76:1d:0a:fa:8a:d1:72:4c:
                    f8:bd:c0:33:43:a3:f0:2f:fc:f0:cd:11:bc:0a:97:
                    97:f0:c7:88:49:3e:88:82:c0:56:fe:d5:ea:52:7a:
                    d3:00:a2:5d:f0:e3:c3:31:0e:80:4a:57:18:48:59:
                    89:45:04:63:55:0e:de:5b:d5:e2:66:c9:83:09:f0:
                    eb:02:3e:ed:4e:5e:df:1d:59:6b:c7:38:8e:ff:31:
                    36:f9:1b:a4:68:bf:f1:15:32:2f:f8:0d:d2:15:fa:
                    98:60:a0:40:15:c3:dc:2e:9d:3b:0f:c4:3f:72:49:
                    b3:c8:ee:9c:b3:01:e7:fe:18:35:98:a9:93:8e:3d:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:07:DD:3B:FC:0F:04:0C:FA:E2:89:D2:6A:05:8F:5B:BC:11:A7:93
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a323032353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:204:2025::/80

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:18:de:fc:bf:60:f0:7c:1e:2c:5b:43:51:bb:53:e1:18:
         07:77:de:0b:b1:e7:ed:29:9d:9c:1f:f0:cc:33:3d:2e:23:c8:
         fa:f6:42:92:fb:f9:af:ab:ab:00:eb:b2:9c:53:06:1c:75:04:
         d7:bc:36:5b:a8:37:7e:82:b4:e8:70:c1:8d:69:cd:ab:60:d3:
         25:a8:35:de:60:42:cb:50:7e:4b:b5:17:77:a6:99:ed:4d:28:
         70:66:af:e5:65:28:6f:4a:d7:af:64:43:54:57:5a:0c:b3:76:
         56:f0:09:48:2b:6c:72:de:1a:40:de:3e:11:c2:2e:c5:63:5b:
         fb:91:de:a5:1a:99:46:25:9b:aa:0c:11:d4:42:2c:6c:fb:14:
         09:2c:95:6b:c7:d6:17:9b:10:1f:99:86:c4:b5:b6:6a:bc:71:
         4a:2e:26:16:72:8a:ef:85:61:7c:66:58:77:87:ee:89:54:a9:
         ad:57:4a:8a:fc:b5:75:4e:b9:db:30:78:4e:ff:04:bb:bc:fc:
         87:51:12:9d:33:a0:f3:f2:f8:a4:c6:4b:6e:9f:7c:52:5b:05:
         ef:72:c6:a1:6c:b6:83:51:af:1e:44:67:e8:d0:91:b3:fe:de:
         61:da:f8:a5:c7:a3:ce:c1:d7:34:0d:0e:c1:28:42:c2:5d:74:
         e3:30:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----