Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a323232353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230343a323232353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          rN4GKXrGoGhI/Fm7ADIYnUSWd6qFXuRX0jqYk73bj4o=
Subject key identifier:   F7:36:F6:04:72:77:21:68:86:1B:42:53:1D:68:FE:89:80:6D:0D:E3
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       26C79C7015AADBC766B31DA5FC1CA99E98AF2E75
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a323232353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 04 Feb 2022 22:25:01 +0000
ROA not before:           Fri 04 Feb 2022 22:20:01 +0000
ROA not after:            Fri 03 Feb 2023 22:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:204:2225::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c7:9c:70:15:aa:db:c7:66:b3:1d:a5:fc:1c:a9:9e:98:af:2e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  4 22:20:01 2022 GMT
            Not After : Feb  3 22:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:4c:1a:09:57:62:51:d6:9f:25:64:15:4c:
                    e2:1a:e3:47:ee:d3:e2:d7:2a:10:47:94:64:eb:12:
                    48:a3:9e:e4:2e:82:6b:d4:8a:a0:5f:71:97:d2:f7:
                    fe:e1:f3:c5:08:ea:b7:3a:03:d5:69:60:83:13:e1:
                    86:19:2a:16:54:81:62:42:f4:e1:17:04:ab:cf:f6:
                    2c:3b:3e:5f:cc:a2:28:bf:09:f2:89:cc:31:e5:1e:
                    d1:db:bb:b4:40:87:88:3d:a4:01:3a:e2:79:e1:0a:
                    6b:f6:59:e1:f2:52:eb:44:e5:ab:90:dc:1e:9f:f8:
                    02:20:00:d0:09:ff:12:9f:3a:10:6e:1d:87:86:e6:
                    e6:10:cc:fe:00:cb:15:19:7f:44:5b:6b:8c:24:47:
                    db:d1:5a:71:10:50:2c:31:27:b3:26:ad:4f:84:37:
                    1d:00:a3:1f:98:83:bb:d2:9f:b5:1e:69:08:8a:71:
                    a5:11:06:1b:2f:22:36:8c:15:fc:66:16:47:6b:6c:
                    68:1f:b0:35:0d:74:0f:6d:4a:dc:23:53:60:02:ce:
                    c3:79:be:a1:15:af:d7:f0:40:ac:4a:84:24:3c:1f:
                    f1:05:28:fa:23:60:0c:f1:30:c3:4a:ce:4a:47:6c:
                    26:cd:76:20:5f:01:6f:52:6d:67:62:d4:3e:a0:85:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:36:F6:04:72:77:21:68:86:1B:42:53:1D:68:FE:89:80:6D:0D:E3
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a323232353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:204:2225::/80

    Signature Algorithm: sha256WithRSAEncryption
         43:12:af:5b:b5:aa:44:3e:8f:c6:b1:02:e3:b8:9e:32:1a:5d:
         dd:96:f7:6e:ed:48:50:e4:5a:da:e9:a4:61:a7:06:9a:ab:b7:
         7a:92:43:3b:94:b1:55:d9:3e:e2:7b:2e:10:95:ff:17:e7:e6:
         21:ed:37:cc:a0:ac:d3:43:6f:d2:c0:c2:cb:74:9d:b7:e7:73:
         0a:e1:7e:56:e0:24:ab:f7:c5:24:17:2d:df:d0:78:97:52:2f:
         5f:a7:50:f5:f3:93:17:3f:ba:87:16:12:55:10:cb:a9:4f:fd:
         40:91:02:ce:60:37:49:77:76:e4:6d:e1:e6:f2:ca:db:53:c7:
         4f:5b:01:43:83:68:4e:ce:44:d3:ab:25:e4:70:88:84:53:e0:
         51:0d:c3:d7:a1:83:22:2d:ed:42:33:52:4a:6d:d7:e0:f2:6b:
         85:53:f5:3f:2b:cd:c7:80:20:de:6d:87:dc:5c:f4:0c:24:91:
         d4:de:9a:a2:7d:f9:ee:02:35:aa:55:10:1f:4c:39:e3:d4:9c:
         cc:1d:9b:92:6b:b9:a8:03:da:56:81:e2:05:b2:3f:81:f9:a4:
         ef:d1:82:b2:03:4d:32:ab:f7:8e:02:e8:0e:80:02:b3:6e:3d:
         fa:90:8c:31:7d:ff:12:96:dd:e1:69:c2:3a:15:b8:8a:58:82:
         9b:1c:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----