Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a33303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230343a33303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          8NZc7MisZR59KQ+BUDL5sI5OP1HX4i2Flhrvumco4ig=
Subject key identifier:   77:48:53:59:91:25:D9:CE:C2:67:E3:EB:36:1D:32:36:57:E9:38:8C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       025E9FA077B4BF9A168629EF38DE63A94380EBCF
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a33303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 04 Feb 2022 00:30:01 +0000
ROA not before:           Fri 04 Feb 2022 00:25:01 +0000
ROA not after:            Fri 03 Feb 2023 00:30:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:204:30::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5e:9f:a0:77:b4:bf:9a:16:86:29:ef:38:de:63:a9:43:80:eb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  4 00:25:01 2022 GMT
            Not After : Feb  3 00:30:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:c1:75:dd:1b:a7:31:d4:13:73:18:1f:ff:
                    ad:b3:64:c0:9a:e0:c1:e2:24:e6:91:8d:37:eb:84:
                    dc:d7:66:2f:52:95:5a:98:9c:d0:5a:c9:8a:01:64:
                    cf:17:53:55:42:b5:a5:fc:7a:51:30:ec:5c:41:7b:
                    be:d6:cd:6a:73:1b:77:0c:33:c0:f6:26:48:39:51:
                    a0:25:94:6f:30:1c:79:c0:69:65:f6:44:8c:87:02:
                    e7:e7:bc:9d:65:c6:7a:b5:1b:25:fe:5d:51:99:bd:
                    6d:2e:49:cc:eb:71:e3:47:7b:04:2e:2b:1f:8e:0e:
                    53:b6:fe:98:b5:46:9c:5b:72:b5:d1:d2:e5:99:45:
                    9a:e8:f6:0f:ef:9c:30:f5:6b:6e:13:f7:67:3c:67:
                    c3:4c:ba:be:31:80:39:38:72:15:0f:3e:1c:37:2d:
                    2f:58:00:d7:d0:e1:bb:3a:8e:90:74:eb:bd:ac:50:
                    68:fa:95:94:12:96:fd:ae:20:07:f3:c4:d3:a6:b0:
                    55:7b:53:7d:19:46:d0:99:56:a3:96:0d:48:44:f2:
                    67:d0:83:07:9c:49:e0:11:f0:4f:42:d7:73:4d:ac:
                    8b:af:41:df:ca:ce:cd:92:57:d5:a0:1c:73:1a:41:
                    56:f8:95:8d:b1:2d:9e:4c:e6:eb:ea:f9:6f:7e:45:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:48:53:59:91:25:D9:CE:C2:67:E3:EB:36:1D:32:36:57:E9:38:8C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a33303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:204:30::/80

    Signature Algorithm: sha256WithRSAEncryption
         8a:3c:f8:19:a6:73:ff:ab:20:1b:5f:1b:fa:7b:6d:52:40:e2:
         09:f2:7b:bc:1f:6a:d7:05:20:38:01:95:1d:65:03:90:65:04:
         a5:bc:22:67:ca:bc:d6:c2:12:f7:b6:01:39:75:2f:ad:38:97:
         12:9a:45:0f:52:39:57:8d:60:cc:6a:81:8b:dc:d5:f1:9c:ad:
         fc:9d:54:ac:40:ca:b2:86:45:e6:16:3a:2c:c4:12:93:80:70:
         09:87:67:61:d8:da:a4:e2:2e:c5:e6:ac:bc:5f:be:90:0f:4f:
         08:5a:aa:b5:91:bf:e6:8e:d8:19:99:a1:be:b9:5d:ee:44:ce:
         90:dd:59:1a:59:d9:a1:ba:1b:04:98:16:49:bb:98:7e:8c:56:
         b3:f3:9f:8f:94:ab:32:1c:77:82:f7:a1:2e:07:de:21:8e:70:
         3f:d3:41:ba:f0:77:bc:2a:6f:7b:e6:64:96:0d:4d:c6:5d:23:
         1f:8d:b6:40:3d:2e:f3:74:1d:99:28:a0:e0:db:11:d6:7b:57:
         c4:65:15:12:69:15:04:44:42:18:ed:a7:00:70:7c:5e:40:04:
         55:7c:8d:c7:1d:4e:57:13:bb:e3:9c:58:6e:76:e3:3f:4a:34:
         c4:fa:3c:26:25:59:a2:09:4f:15:4a:ef:f3:de:55:42:5e:86:
         47:2f:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----