Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313332353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230353a313332353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          f1MQygGyQL2PqUHGIjSbrnrYIQF+UbkCuBhGyLG4HBo=
Subject key identifier:   24:E9:36:1C:F2:C6:1B:91:80:22:6B:25:8A:E3:A6:68:84:53:79:23
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5716FF509525146304CAC3468445E869D784CE1E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313332353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 05 Feb 2022 13:25:01 +0000
ROA not before:           Sat 05 Feb 2022 13:20:01 +0000
ROA not after:            Sat 04 Feb 2023 13:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:205:1325::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:16:ff:50:95:25:14:63:04:ca:c3:46:84:45:e8:69:d7:84:ce:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  5 13:20:01 2022 GMT
            Not After : Feb  4 13:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:57:50:34:77:af:30:4b:83:09:c3:67:a8:
                    fa:8a:e2:4c:dd:36:7e:d4:d5:f8:4b:a5:5f:85:78:
                    38:16:40:eb:c0:ff:70:0d:5b:b9:59:4f:c1:1d:41:
                    89:d7:10:56:68:68:cd:7c:22:30:17:02:ee:8c:1c:
                    77:8d:90:30:ca:84:56:c1:cd:c9:cf:c4:cb:1b:f4:
                    96:e4:ee:e8:d2:4b:60:b3:f8:76:eb:ec:b3:0c:92:
                    50:f7:3d:5c:14:48:dd:53:89:3f:7b:78:74:6a:54:
                    0b:c1:ba:db:5a:c3:26:23:00:73:7d:27:1f:73:24:
                    98:00:d0:90:e6:ca:1b:8c:a4:ff:9b:91:d1:d6:2b:
                    7c:b2:99:50:17:c4:3d:df:3a:fa:5a:67:b2:e1:87:
                    f4:a2:6d:68:c3:44:05:39:37:b9:b9:2a:7d:53:a6:
                    8e:0f:9f:88:61:58:10:73:42:b0:52:fa:db:ed:0c:
                    ff:33:b7:ac:25:2f:fe:1a:bc:e4:07:4b:9f:47:22:
                    dc:d0:15:ac:d8:f4:b1:2e:6f:24:f8:8a:8c:ea:19:
                    38:74:32:1b:ae:db:6d:51:a8:38:bc:f7:b3:e0:e1:
                    55:4f:34:37:bd:2e:ac:81:b4:bc:19:e9:e1:3e:dd:
                    07:ed:2d:09:2c:6c:a6:8f:81:74:fc:4e:46:9b:18:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:36:1C:F2:C6:1B:91:80:22:6B:25:8A:E3:A6:68:84:53:79:23
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313332353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:205:1325::/80

    Signature Algorithm: sha256WithRSAEncryption
         af:08:2d:b4:e5:06:16:ae:38:c0:05:fa:21:7c:34:df:bc:79:
         4f:3a:30:79:fc:e6:41:3a:d5:33:61:da:1e:4c:c4:20:69:76:
         f9:6d:ef:7f:06:69:c4:d9:59:28:f2:ec:b8:fb:fd:d7:01:ff:
         d4:20:8c:d1:2a:cf:06:d8:2d:6d:66:42:fe:59:37:d5:3a:22:
         38:e2:3e:61:18:7d:06:c8:f9:30:f6:68:1a:c0:b5:62:4c:64:
         f4:bb:de:66:b3:39:2c:7b:f8:5e:39:9e:67:59:87:4e:28:50:
         33:88:80:f8:2e:fc:9c:ce:b0:d9:da:18:63:ea:3b:6c:34:20:
         2e:ae:fd:64:70:c9:45:c3:e4:d4:77:33:d3:83:78:f9:ad:27:
         1d:7e:ba:11:e7:fd:c7:1f:9a:0a:bb:3c:5a:8a:ef:ab:07:5f:
         0e:65:07:7c:71:35:5d:19:2e:56:c6:ac:8b:11:2b:60:74:90:
         0e:86:b5:fd:7f:a8:24:10:82:31:dd:f9:69:97:cb:07:99:71:
         6a:a0:2e:af:8d:75:2a:0c:b0:1f:db:b2:87:b2:34:0c:dc:63:
         c7:f3:73:c4:84:41:fe:3c:7a:00:88:a1:b0:63:85:c6:a4:58:
         2b:26:c9:cf:59:46:58:a6:92:22:b7:9a:c4:32:46:7c:6a:73:
         aa:df:53:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----