Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a3234353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230343a3234353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          02NBoBcKcRPgm7xp/QDfVPeB+eTFYE3aYaVvFuwf6iU=
Subject key identifier:   BF:00:88:CF:CF:92:87:76:39:8D:FE:D7:74:2C:84:CD:F1:26:8C:F7
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       51637484FE26D64D323EB596C09AB9EDF1AD6641
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a3234353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 04 Feb 2022 02:45:02 +0000
ROA not before:           Fri 04 Feb 2022 02:40:02 +0000
ROA not after:            Fri 03 Feb 2023 02:45:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:204:245::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:63:74:84:fe:26:d6:4d:32:3e:b5:96:c0:9a:b9:ed:f1:ad:66:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  4 02:40:02 2022 GMT
            Not After : Feb  3 02:45:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:4f:ee:38:18:59:b2:d1:d8:1d:2b:e9:61:
                    e3:1b:47:01:99:20:6e:79:69:d5:95:80:98:b9:bd:
                    a2:ae:57:ee:78:58:18:4b:1d:1d:e3:dd:48:05:0f:
                    63:fe:2a:7a:ec:b0:1b:32:be:89:fb:7d:4c:bf:02:
                    65:10:09:3a:98:e7:2d:6d:ce:5a:b5:0c:df:67:d5:
                    a3:f8:ca:fe:df:cc:59:4f:d5:64:fe:a3:63:08:9b:
                    92:13:ba:58:04:68:77:2c:be:22:c0:0b:74:ef:61:
                    e4:8c:cd:85:df:a3:6d:2a:d8:44:c3:6a:5e:f4:82:
                    68:02:3b:81:d4:2c:89:b2:34:ba:ad:15:62:f8:3a:
                    49:10:13:f4:c0:44:6d:2c:cd:29:0e:11:93:9e:d3:
                    87:ce:e5:45:19:dc:21:80:01:cd:60:61:9f:4c:57:
                    25:f3:2c:55:3f:9a:95:a6:69:b1:c6:4b:15:b1:18:
                    f4:13:63:e7:d8:94:b6:ca:ed:66:29:ad:8c:1b:a3:
                    c8:92:1b:19:90:67:9f:f3:6d:b2:a5:28:5b:c5:cb:
                    e5:20:ca:88:3e:90:dc:7c:3b:d6:6e:78:55:bd:f7:
                    b4:dc:5c:eb:ab:80:3d:42:cf:50:3c:19:e9:7c:95:
                    84:06:e3:d8:a6:18:f7:81:6c:30:69:bf:9a:e6:9a:
                    0f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:00:88:CF:CF:92:87:76:39:8D:FE:D7:74:2C:84:CD:F1:26:8C:F7
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a3234353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:204:245::/80

    Signature Algorithm: sha256WithRSAEncryption
         8e:1a:09:b6:de:de:75:d5:18:37:8f:11:8d:8f:d6:b8:83:3c:
         f1:d0:a1:b2:1c:50:29:4e:6f:0b:00:73:9d:7e:74:68:58:b4:
         be:54:06:a0:94:02:93:be:1c:49:a7:20:84:c7:b5:08:8b:0e:
         7a:6b:c8:03:dd:f2:ab:d9:7f:1c:17:5f:7e:51:d2:7a:36:09:
         bb:36:c1:7d:e2:6d:68:08:3f:f5:83:ab:f4:67:b2:a4:f4:9d:
         b4:18:b3:64:11:53:1d:16:57:e8:45:50:9f:0a:c7:b1:7f:3d:
         ed:19:f3:be:d3:84:06:a7:08:14:73:4a:1e:3f:92:18:b0:39:
         09:e4:b5:c3:db:d7:54:6e:05:d9:ed:68:b0:fc:aa:9a:85:fd:
         c7:0f:77:6b:2e:58:2b:d8:55:30:d6:83:0d:33:82:ed:a0:c4:
         10:f8:87:11:7b:04:4e:92:f1:6d:04:e8:5f:f4:4a:9b:8b:3c:
         89:6b:5e:28:93:5a:f5:d7:7c:f7:22:e9:46:eb:1b:97:62:86:
         15:8a:57:0d:28:ea:57:4a:f3:a5:6b:45:6f:ad:39:b2:ce:5f:
         ce:f6:d9:5d:9a:6d:6a:c9:75:4e:c7:b4:70:59:65:37:77:83:
         41:69:a8:cc:91:06:b1:66:60:b0:19:8a:22:21:e0:44:9c:10:
         58:44:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----