Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313035303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230363a313035303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          wqS1QfhT357GBntcsPRevhyVqqXDq1hc/c1gJYLgVhM=
Subject key identifier:   32:6F:8D:8A:9F:8D:FD:16:0A:23:B9:B3:3E:93:CB:C9:C7:97:D7:B1
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3832370B58C2B8CE187A34D7887585954E31574A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313035303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 06 Feb 2022 10:50:32 +0000
ROA not before:           Sun 06 Feb 2022 10:45:32 +0000
ROA not after:            Sun 05 Feb 2023 10:50:32 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:206:1050::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:32:37:0b:58:c2:b8:ce:18:7a:34:d7:88:75:85:95:4e:31:57:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  6 10:45:32 2022 GMT
            Not After : Feb  5 10:50:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:da:54:a3:ae:c4:d2:20:73:4c:a5:5e:ff:
                    05:50:de:5f:72:c9:ac:cd:f1:a7:c5:b8:99:f2:4a:
                    52:ec:0b:b8:86:e5:1e:c3:34:3a:e9:b2:af:fd:72:
                    b3:95:a1:fd:43:52:88:5a:14:c5:84:a9:12:26:98:
                    c8:7d:08:2b:3b:63:2e:2b:9d:02:9c:7b:4d:9f:01:
                    b5:62:a5:15:4d:09:1b:af:1a:bc:f2:a4:7e:2c:51:
                    be:c1:02:2b:e7:f6:81:9a:d1:28:5d:84:e1:ba:4d:
                    f5:e9:2b:2c:fb:2d:cf:c9:08:2a:8d:ef:b9:37:da:
                    da:60:3d:e7:37:f4:4c:b5:e6:55:f4:60:11:35:0a:
                    9f:ca:7a:3d:8f:73:ce:16:16:2b:c8:46:d5:95:60:
                    d5:2f:b6:a8:09:63:00:5e:d2:dc:02:1d:c3:b2:6c:
                    fb:50:ff:8b:e8:d7:48:bd:d3:24:e2:eb:97:92:f6:
                    de:a7:a5:2d:d0:4f:30:0a:63:88:07:6b:64:77:8f:
                    4c:51:b0:ef:0e:a6:f5:86:f5:54:99:64:6f:38:74:
                    8c:01:c4:bc:a1:b5:a5:df:97:b6:5e:55:05:05:5b:
                    f3:04:9f:ca:06:69:ab:10:a9:3c:34:79:5c:2d:0a:
                    5b:43:23:5f:e7:b3:2f:f3:3f:79:5c:11:f9:58:a4:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6F:8D:8A:9F:8D:FD:16:0A:23:B9:B3:3E:93:CB:C9:C7:97:D7:B1
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313035303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:206:1050::/80

    Signature Algorithm: sha256WithRSAEncryption
         47:1d:11:01:06:8c:13:75:90:79:72:ce:35:5f:7e:df:42:0b:
         48:2e:12:66:fc:31:78:93:26:e2:98:7a:bb:66:7a:e8:9d:70:
         4e:59:d0:d4:d3:3d:3d:88:8f:62:b6:0e:16:04:4e:09:6b:fb:
         70:d4:bb:08:33:90:8f:e8:bc:ec:ef:b1:c8:68:69:4e:7e:40:
         87:ee:df:2c:9d:f4:ab:f7:aa:25:b0:5b:58:eb:47:74:f3:a5:
         4f:cd:b6:86:b5:85:a9:69:e8:07:9c:bc:73:c4:47:93:a2:b4:
         da:15:a6:b1:67:c4:97:db:b4:8f:4b:3c:a7:8b:ce:b3:53:26:
         67:b7:4d:eb:25:08:87:62:7c:9c:53:5f:79:ac:60:74:a9:f8:
         5a:58:48:ae:86:a2:cb:2b:ea:2d:b0:91:7a:9c:7d:36:b2:0c:
         dd:d2:a9:b2:04:74:74:af:09:6b:f8:b9:da:90:88:51:b6:16:
         c9:86:eb:f5:fb:7c:fa:91:4e:35:b8:47:ae:63:16:da:9a:73:
         23:7a:ee:bf:d3:ae:a9:53:89:1c:4f:db:15:32:2d:20:dc:f1:
         c9:dc:ed:dd:15:73:7b:8a:8d:de:6f:7f:2e:f4:3e:40:fc:0c:
         c3:2c:a3:56:45:15:58:60:fa:64:67:1a:0d:0a:21:4d:67:76:
         3f:2d:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----