Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a3634353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230353a3634353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          A3SbV739ydljAJaASiU3/keKWGQLQftbb/RV/NEbnYM=
Subject key identifier:   29:75:96:FD:00:87:F7:79:17:7D:2D:FE:85:AF:B9:02:D0:7D:D8:30
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       64D54FBDD00E4087A35166C9F6636ECB993C943B
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a3634353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 05 Feb 2022 06:45:01 +0000
ROA not before:           Sat 05 Feb 2022 06:40:01 +0000
ROA not after:            Sat 04 Feb 2023 06:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:205:645::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d5:4f:bd:d0:0e:40:87:a3:51:66:c9:f6:63:6e:cb:99:3c:94:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  5 06:40:01 2022 GMT
            Not After : Feb  4 06:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e5:d6:f2:e7:de:0b:6b:f5:05:c6:c3:f5:84:
                    5a:7b:1e:94:f5:96:40:4b:2a:a0:56:32:52:c6:a6:
                    d0:d5:cb:59:23:67:e1:6e:1f:b5:bc:fe:04:13:a9:
                    6c:3a:ab:b8:af:2d:01:53:76:bd:a9:34:f8:b7:f6:
                    0e:1b:10:d7:59:5f:a6:98:40:20:80:ed:c2:72:e5:
                    ef:7b:3a:31:33:49:85:fd:13:82:44:a9:d3:76:e3:
                    2a:ec:4f:c5:e4:9a:69:ee:0c:c0:03:e9:7d:09:94:
                    8f:77:27:03:0d:45:41:c7:3f:7a:3b:2a:f2:f4:b7:
                    96:7b:b4:d0:ce:42:d7:78:b9:71:c7:a4:f9:53:ec:
                    12:6e:bf:96:d2:a9:54:b7:cd:3d:32:72:38:21:75:
                    66:cb:dd:26:cf:0a:eb:e4:5a:8e:33:d1:f9:f6:c0:
                    6e:62:92:5d:b0:92:04:81:e3:df:59:85:77:fa:bb:
                    2b:e7:fc:d2:af:24:5e:bc:55:15:6a:5c:46:92:49:
                    16:9d:b0:b0:92:af:36:45:ba:e7:12:01:2b:ac:53:
                    b9:05:2b:7b:97:3e:47:87:3c:a5:a3:34:01:21:47:
                    ae:5e:0a:66:1e:59:f1:2d:56:5f:6c:4f:ae:cc:f4:
                    6f:70:12:6d:5c:42:45:3b:d1:91:43:aa:d4:48:b9:
                    26:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:75:96:FD:00:87:F7:79:17:7D:2D:FE:85:AF:B9:02:D0:7D:D8:30
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a3634353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:205:645::/80

    Signature Algorithm: sha256WithRSAEncryption
         83:64:b1:d4:fd:ac:59:ed:ac:48:47:a3:a9:3d:18:1e:12:60:
         80:69:25:cd:b0:5f:ec:32:09:32:c9:90:6b:7e:1f:b8:98:82:
         bc:0f:bf:71:d2:60:f7:eb:c0:ab:c5:d6:03:82:0a:00:04:01:
         ce:83:3d:99:72:78:eb:40:af:0e:08:14:8f:cf:7a:81:f8:cf:
         f2:dc:33:9d:ba:36:d1:d1:32:d5:be:87:7d:a8:a8:17:3e:56:
         66:2d:94:3b:24:f2:13:ef:5e:7a:bd:bd:76:e4:e6:e1:5a:b5:
         10:e2:ea:ba:7a:f9:4f:7d:ca:23:88:22:96:99:2c:43:62:f7:
         9e:11:69:8c:75:cc:b6:c3:13:3a:ee:d8:34:b4:e2:92:70:40:
         7a:2b:98:58:be:01:af:79:61:6c:3d:03:75:ac:75:dd:f0:ee:
         28:1b:c9:f0:3d:4c:a1:e4:8b:54:61:35:e3:96:ee:b4:6b:11:
         9b:b7:53:30:26:6b:75:e8:57:3f:9f:2f:9d:df:cd:70:4f:a1:
         2e:22:a9:34:e4:1c:2e:f4:2e:f5:c1:9d:67:3b:d0:94:d7:e9:
         9a:ef:aa:d2:ac:76:73:bb:48:ae:13:54:6a:6e:6b:7f:af:34:
         52:70:d9:1a:94:3e:95:30:ee:40:73:cf:65:9d:5c:67:bd:5e:
         97:1c:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----