Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313035353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230363a313035353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          pIOdH0b0j2FtAr2GlGuNMfiO40wlmGU+NCTmndLBOr4=
Subject key identifier:   BA:84:5D:C7:C7:A5:94:8D:52:2D:18:C8:1E:7D:D9:D4:58:26:5E:EB
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0A09A646AAB1CA56F48AD5F63FE8A87B9D9D76DD
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313035353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 06 Feb 2022 10:55:01 +0000
ROA not before:           Sun 06 Feb 2022 10:50:01 +0000
ROA not after:            Sun 05 Feb 2023 10:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:206:1055::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:09:a6:46:aa:b1:ca:56:f4:8a:d5:f6:3f:e8:a8:7b:9d:9d:76:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  6 10:50:01 2022 GMT
            Not After : Feb  5 10:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f4:a4:23:8f:15:77:74:ab:3d:51:50:73:41:
                    39:94:6b:bd:d9:25:11:98:b2:c8:10:80:1e:42:22:
                    94:ff:b3:d2:8d:8c:d8:9d:9e:4c:81:68:3b:97:d3:
                    e0:7c:fe:48:4f:14:21:5f:25:cc:6e:a3:fb:34:da:
                    cc:7f:80:dd:fe:93:a1:90:6e:fb:cc:91:a8:74:f9:
                    a9:8d:0c:64:89:67:2c:67:81:0d:b4:cf:ae:77:4b:
                    de:cb:d8:f0:ec:0e:c1:bb:5c:40:80:16:c3:c9:09:
                    85:f8:f7:b7:c4:3d:0c:5e:4b:88:cb:3a:2c:74:ae:
                    90:2a:11:16:cc:95:96:a8:3b:95:73:0d:19:23:6a:
                    49:50:19:45:7e:f0:ae:c6:c8:ed:88:3f:14:7d:6d:
                    83:b0:85:79:14:59:d4:e4:8e:11:5f:d9:7f:59:f7:
                    f2:ad:0a:63:05:ee:7d:e4:63:44:78:b2:1b:b2:9b:
                    f8:92:0a:6e:4a:75:b7:41:7d:7b:7a:e1:c5:9e:b4:
                    15:57:39:24:f6:f4:60:92:89:f8:93:07:72:45:67:
                    28:c8:23:62:25:d8:aa:0d:c2:3f:0d:94:57:87:7d:
                    f4:fe:73:85:c8:1d:03:6c:e3:32:2f:bc:cf:20:df:
                    45:4e:8a:82:26:77:48:d2:ef:4e:12:aa:9e:f3:43:
                    7f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:5D:C7:C7:A5:94:8D:52:2D:18:C8:1E:7D:D9:D4:58:26:5E:EB
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313035353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:206:1055::/80

    Signature Algorithm: sha256WithRSAEncryption
         1c:f7:e2:d6:d0:72:5b:7d:7c:8e:b3:9c:a4:e7:6f:0f:fd:d2:
         6b:96:ea:d1:d2:70:51:04:43:8a:cc:09:b7:86:66:7a:45:d6:
         71:c2:d9:15:e1:86:f5:4d:d8:a9:bb:5b:bc:1d:9e:b9:74:15:
         06:cc:f5:e6:d2:30:97:38:8d:09:e4:3a:b1:11:76:1d:8d:70:
         75:e7:3e:c0:1f:66:24:8a:0c:33:a0:6c:52:5e:1e:db:d8:6d:
         45:c6:b6:1a:53:c0:82:02:69:71:52:0f:8b:c8:22:1c:f5:17:
         3f:40:ad:59:63:c7:61:6c:3b:21:16:e8:05:92:dc:92:f4:a6:
         ac:e1:c7:79:82:d2:87:58:73:e0:2c:3b:49:6e:08:dc:13:19:
         89:d7:cc:20:fa:cc:cb:dd:06:06:5b:da:85:de:73:54:17:02:
         6b:41:2b:5b:b2:b1:81:4e:97:6f:64:75:39:49:2d:fa:3b:e5:
         e3:ed:44:48:36:9a:f0:45:51:96:d2:aa:f8:15:1f:92:73:4a:
         bf:d4:cd:7c:31:1d:0a:ad:22:23:55:ab:94:7f:4e:2c:e4:7e:
         a8:2c:d0:aa:e6:8c:57:52:77:90:66:ea:33:55:71:2b:5e:99:
         17:dc:9f:fb:ee:59:ca:cc:d3:1f:cc:b2:cb:69:f0:d6:b5:1d:
         15:c8:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----