Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a3434303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230353a3434303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          g0utsL+qk9TqpoCLZcdXSSUJRpLiIcENtoLA9zlvJzg=
Subject key identifier:   62:A3:24:EE:0A:43:DD:D7:7C:E9:A1:CD:D3:47:E4:92:C5:E1:DD:1B
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       11994BDFFC34B07C8B7911F7365786C546AD217A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a3434303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 05 Feb 2022 04:40:02 +0000
ROA not before:           Sat 05 Feb 2022 04:35:02 +0000
ROA not after:            Sat 04 Feb 2023 04:40:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:205:440::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:99:4b:df:fc:34:b0:7c:8b:79:11:f7:36:57:86:c5:46:ad:21:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  5 04:35:02 2022 GMT
            Not After : Feb  4 04:40:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:5e:0c:43:ac:6f:7b:68:62:52:79:80:bd:84:
                    73:91:8b:4d:0b:f9:02:8d:15:4a:a4:4d:50:2b:56:
                    bc:43:05:71:b6:bf:1a:69:fc:d5:e3:b7:a6:44:6e:
                    97:8d:6e:14:e1:23:e6:87:48:fb:1f:69:df:11:20:
                    00:79:f2:af:38:12:eb:dc:dc:e1:69:58:64:07:47:
                    3d:40:49:10:da:ee:78:33:ca:24:74:af:e5:a0:61:
                    fd:c7:f5:3e:04:ac:38:21:70:1b:9f:19:73:f4:ec:
                    ca:76:62:79:aa:12:f3:4c:48:87:a1:fb:83:9a:5c:
                    6e:4c:06:d1:4b:d4:51:91:8d:49:95:e7:44:16:d2:
                    db:3d:a4:13:f8:b2:7b:d3:31:1d:04:c9:85:95:92:
                    b8:95:f8:26:c1:1e:4e:36:7c:47:ac:5a:7b:f2:fd:
                    fa:7d:39:f6:30:7a:3b:90:a2:a3:1b:08:ff:af:76:
                    ad:a0:75:4d:77:37:ba:b5:78:31:de:1d:d1:be:0d:
                    74:f4:17:6d:01:57:6c:10:2f:0b:bf:46:d0:94:29:
                    f5:4e:c0:c7:eb:5d:ef:50:89:cc:5c:77:bb:d7:d7:
                    e5:2f:1d:1b:e5:32:08:62:3a:34:f0:74:29:e8:ee:
                    2d:c6:fa:47:1c:d7:49:52:e9:fd:ce:27:91:77:ab:
                    fc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A3:24:EE:0A:43:DD:D7:7C:E9:A1:CD:D3:47:E4:92:C5:E1:DD:1B
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a3434303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:205:440::/80

    Signature Algorithm: sha256WithRSAEncryption
         73:56:ae:95:fa:98:01:d1:95:72:56:93:8f:aa:40:90:ab:71:
         22:10:fa:76:41:fc:e0:d9:6e:d6:7e:1a:fe:dc:05:c8:a8:71:
         81:ce:9a:41:7d:d7:a9:21:2a:05:af:c9:57:b4:7f:89:71:fd:
         f9:db:df:a4:f4:9a:73:d3:c2:19:05:3a:69:bb:c4:0a:8d:c2:
         c6:b1:fe:72:c9:12:f8:1d:99:28:62:ae:b3:d2:f4:78:ca:f8:
         a6:30:16:5b:71:a5:d0:35:75:30:ef:c9:72:a3:57:9a:ef:77:
         28:9d:3c:69:1a:e3:46:cb:f6:59:9d:63:47:1d:88:34:8f:88:
         e9:6d:92:ec:e5:dc:51:a9:4d:87:57:0d:01:af:5a:5e:61:0f:
         36:4b:3a:b7:a9:66:50:97:f5:be:f0:e9:eb:82:3d:89:6c:f0:
         ae:23:a3:df:c5:32:9c:c5:e5:0e:3a:43:59:38:36:cc:65:73:
         03:d7:2d:0e:9b:85:1f:6c:5c:97:0e:7d:8c:09:ec:ba:59:0f:
         21:f8:7f:23:a9:53:8a:30:67:8e:0f:fd:9e:da:d1:62:94:f3:
         02:d4:2a:00:94:99:eb:13:6a:ec:19:f7:e1:22:ab:95:ce:fb:
         8c:68:e5:e5:c8:10:2d:54:eb:4d:49:27:57:87:94:c3:38:59:
         86:b0:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----