Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313132303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230353a313132303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          hPMSosXUCEf2oRjaqT8B9Az+K+Lxe21gSWpOHjNrYhs=
Subject key identifier:   10:66:DD:B2:55:EB:03:0E:DB:CE:09:A2:9C:D5:32:29:9B:E2:A1:18
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       24A539C86AD3549AF081209114AB4180BC87DDE3
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313132303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 05 Feb 2022 11:20:01 +0000
ROA not before:           Sat 05 Feb 2022 11:15:01 +0000
ROA not after:            Sat 04 Feb 2023 11:20:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:205:1120::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a5:39:c8:6a:d3:54:9a:f0:81:20:91:14:ab:41:80:bc:87:dd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  5 11:15:01 2022 GMT
            Not After : Feb  4 11:20:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:2b:a7:d6:8b:45:6d:1f:18:f5:b5:d3:c1:
                    60:e5:91:5c:32:47:52:d9:71:74:6f:db:c0:66:1c:
                    15:12:c9:04:2e:9c:7a:a5:b1:8b:6a:27:2c:61:47:
                    62:a4:a1:3f:37:a3:6a:e9:bb:bf:62:09:70:7c:3c:
                    85:52:a4:31:93:84:0f:08:e7:8e:31:bd:7c:f1:a8:
                    24:16:ad:c6:78:0f:c3:bc:29:3f:71:95:e8:19:b1:
                    37:81:0f:a4:81:89:16:0f:69:df:7b:5d:90:8c:18:
                    27:0b:6a:bd:ff:7d:79:63:74:e2:14:94:18:94:da:
                    14:3f:13:a1:f2:f3:36:bb:9c:61:db:8e:9e:dc:50:
                    df:24:ae:8f:3c:ed:b3:c4:76:19:3c:e7:86:ff:aa:
                    dc:b9:eb:99:01:75:07:8c:61:4a:c2:39:b2:5c:df:
                    e5:3b:63:20:68:51:35:7f:37:25:d7:20:46:ae:02:
                    4a:4b:40:59:f5:46:bb:9e:8c:74:bf:25:25:1f:39:
                    92:9f:23:c4:62:69:5d:01:9b:87:8c:d5:d3:f1:60:
                    d5:dc:00:da:d0:ee:99:bb:f1:85:68:f9:e0:99:51:
                    70:8e:52:5c:b4:0b:78:0d:ce:e0:ef:a4:be:e6:36:
                    e6:3e:ba:86:24:0f:e1:84:da:d9:5c:da:4d:0f:7a:
                    ae:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:66:DD:B2:55:EB:03:0E:DB:CE:09:A2:9C:D5:32:29:9B:E2:A1:18
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313132303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:205:1120::/80

    Signature Algorithm: sha256WithRSAEncryption
         87:23:8d:bc:c4:72:b7:d8:9c:23:63:d4:d5:43:4b:95:a9:dc:
         09:06:d8:a4:83:75:f8:53:3a:9e:4e:2e:f3:81:44:78:2b:8d:
         45:1f:2d:61:8d:f6:96:ea:6d:49:7b:c2:b3:0c:c1:12:b0:83:
         e3:6e:8e:e8:e8:1b:13:cd:1d:0d:14:1d:c0:02:67:13:5b:32:
         ba:96:a6:56:a8:1b:8c:50:1c:e0:80:65:4a:64:e9:d7:34:ee:
         29:30:01:e6:33:c8:7b:e0:1c:65:23:7d:99:da:58:70:db:dc:
         30:ea:1b:4c:8d:ff:a2:d3:97:95:cb:f0:69:a5:e9:85:5b:2f:
         0a:08:1f:6d:2f:f7:c6:8f:37:83:61:05:43:56:e9:e1:10:84:
         4d:9d:5e:ac:d5:33:ee:4a:f5:82:28:92:1d:2a:e1:31:0d:42:
         bd:37:b1:b8:9a:bb:76:2a:12:6e:65:af:b6:4f:08:37:d2:88:
         b8:a6:68:e1:ec:30:87:76:a4:ee:aa:05:9b:db:07:15:29:ed:
         45:65:3e:13:b1:2f:82:83:bf:38:39:70:d7:f1:3e:df:60:db:
         99:7f:62:c0:a5:29:f4:c1:7a:66:fa:ba:42:c2:54:d4:4a:7c:
         f8:4b:f1:f5:7f:31:6c:20:5a:d2:d1:63:02:13:fa:ff:ba:58:
         e2:e3:26:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----