Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313330353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230363a313330353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          wgjS/6gLUJxFWfQfLHhYT5IFlv2CMLWNcA6pHEXAEQA=
Subject key identifier:   05:A5:79:9F:79:88:5F:36:99:0D:17:AF:51:86:90:9C:DD:B8:F1:53
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       13E6FA00A26C2647F30B0D2F148CBBE4C3BD70B0
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313330353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 06 Feb 2022 13:05:02 +0000
ROA not before:           Sun 06 Feb 2022 13:00:02 +0000
ROA not after:            Sun 05 Feb 2023 13:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:206:1305::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e6:fa:00:a2:6c:26:47:f3:0b:0d:2f:14:8c:bb:e4:c3:bd:70:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  6 13:00:02 2022 GMT
            Not After : Feb  5 13:05:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f1:1d:47:34:76:18:97:51:06:50:51:b0:74:
                    76:ec:7b:8f:bc:a2:5b:c2:d0:73:41:76:50:3c:98:
                    3b:6d:60:43:c6:4d:4b:84:1f:ab:18:d2:4c:00:c3:
                    d9:70:93:67:e8:cd:fc:cb:42:d5:de:18:fa:65:7a:
                    78:7b:49:5f:cd:2e:34:12:3e:9e:71:96:6f:eb:66:
                    8c:7d:ef:2a:01:25:d3:06:9e:8b:11:bd:35:9c:06:
                    06:c5:f4:f5:f8:5c:74:0b:54:cc:1e:79:bd:22:c1:
                    3a:6a:73:27:af:4c:83:19:d6:55:e4:74:a6:13:be:
                    5d:c5:0e:fc:e0:ec:f6:0a:5f:e5:a8:86:71:b4:18:
                    ef:13:f7:eb:2d:36:70:16:2a:1b:59:ca:ed:9f:6a:
                    42:7c:9c:e9:25:8f:8f:b5:fb:5e:83:dc:3b:5f:cf:
                    f7:88:e3:d6:a7:4a:42:6b:12:96:69:c5:7d:a8:56:
                    f9:8a:3d:ba:2e:41:f9:06:79:40:4c:ea:62:91:17:
                    6e:71:d5:1c:89:cf:9c:e0:4a:cb:c0:a4:01:fe:0f:
                    aa:74:31:2e:dc:9f:d5:d0:92:88:32:2c:da:08:80:
                    74:ac:fd:91:85:1f:7d:8f:67:35:28:6e:cb:11:0d:
                    55:ac:c5:dc:85:f1:ca:96:20:75:e5:46:f3:f5:75:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A5:79:9F:79:88:5F:36:99:0D:17:AF:51:86:90:9C:DD:B8:F1:53
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313330353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:206:1305::/80

    Signature Algorithm: sha256WithRSAEncryption
         2f:8a:8c:3f:c8:9f:b3:96:66:9e:6b:87:96:32:59:45:56:d1:
         32:00:d2:26:e8:ae:a7:5a:f3:38:2d:96:d9:4f:04:b3:8f:91:
         35:14:d3:e8:5f:cf:5c:92:40:44:ea:64:05:b1:09:bd:ed:d7:
         22:cf:38:b3:f0:9c:3a:17:23:14:7a:04:7d:ab:7d:fc:b9:ed:
         36:75:f3:ac:ea:01:19:65:84:3e:62:73:f4:2a:0f:3b:3c:24:
         f9:1e:72:46:98:62:b4:bb:e3:34:a2:8d:f3:4f:0c:4e:1b:22:
         a3:36:e7:b6:8c:8e:78:d0:b8:d5:53:5c:68:4d:f5:8d:a2:d8:
         63:07:e4:16:c7:b8:3f:76:ad:9d:59:be:d2:92:58:d6:e7:64:
         1d:f4:c6:ba:24:37:61:1d:ef:d7:1d:31:fc:0d:9b:79:f0:d1:
         ea:e1:b9:d5:11:4a:37:fe:73:a6:49:c2:d8:14:64:0d:75:15:
         90:63:11:48:38:f1:dd:b6:48:fd:d3:5b:d9:3a:9c:7e:75:71:
         e4:c4:d1:0c:c9:a8:a2:ec:76:2b:58:20:4d:22:51:bc:d8:e5:
         89:c9:76:82:0d:d2:11:30:e4:7a:f9:37:30:6d:cc:86:3f:95:
         9e:24:3a:b6:12:b9:8b:97:f5:e1:92:64:5a:26:b9:a0:bf:ba:
         7c:d0:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----