Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313531353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230363a313531353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Gp1npq2gsl3FI7rP9IByWBXRNoZLZxnXgpBTW9YZFeg=
Subject key identifier:   17:1E:1C:AA:FE:AE:4D:10:43:B1:F5:49:ED:E4:14:52:2D:41:E8:14
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       18A4C0EF195FA2B6C95A7FB455BD823F73205D7C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313531353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 06 Feb 2022 15:15:01 +0000
ROA not before:           Sun 06 Feb 2022 15:10:01 +0000
ROA not after:            Sun 05 Feb 2023 15:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:206:1515::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a4:c0:ef:19:5f:a2:b6:c9:5a:7f:b4:55:bd:82:3f:73:20:5d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  6 15:10:01 2022 GMT
            Not After : Feb  5 15:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fe:4d:d4:2a:75:9a:f9:66:04:dd:f7:5d:6b:
                    2f:09:27:c2:de:a1:4a:54:b2:e3:9d:83:8d:60:88:
                    5c:1d:35:06:44:6a:66:e6:d4:79:7f:58:8d:c0:33:
                    bb:08:89:9b:7b:97:42:e6:27:1b:56:5d:d4:a1:ef:
                    f4:57:ad:66:09:e2:1b:9f:de:b0:76:28:78:72:0d:
                    ac:1e:5a:3d:f2:4f:fa:34:ab:0a:86:2f:d7:39:e3:
                    4e:17:30:f5:a9:83:ee:be:07:b2:04:c9:c0:b2:5b:
                    54:cd:b2:a4:d8:82:99:82:7d:00:21:02:b2:9a:e7:
                    46:dd:17:9c:bb:dc:67:8a:ea:87:81:64:2c:87:e4:
                    32:11:92:66:33:e9:84:2f:d0:28:59:2a:1d:13:00:
                    fc:97:83:15:d5:6b:43:d1:ce:71:6d:31:f9:cc:98:
                    e7:76:3a:ab:14:9a:77:24:39:bd:09:c4:ed:6e:bf:
                    6b:79:8b:8d:5b:56:4e:52:7d:19:60:90:4b:9c:83:
                    94:37:88:ac:49:dc:9d:11:a0:c2:03:b1:66:01:a2:
                    ae:98:4e:48:d0:9e:9f:f0:2c:dc:c8:c2:5d:c3:2e:
                    cf:19:41:0d:84:40:66:86:8d:cc:a3:89:9a:42:74:
                    72:87:0a:ff:05:88:99:54:7c:79:00:f9:e5:0c:ad:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1E:1C:AA:FE:AE:4D:10:43:B1:F5:49:ED:E4:14:52:2D:41:E8:14
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313531353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:206:1515::/80

    Signature Algorithm: sha256WithRSAEncryption
         02:42:47:7b:7b:6b:c2:a1:ea:b3:fd:97:b5:fc:15:31:c8:99:
         ad:3d:2d:b9:96:34:31:18:cf:d7:25:22:b5:2d:dd:7b:15:80:
         f2:fc:cb:1c:dc:16:b2:b4:b6:f2:c0:78:ad:50:dd:03:83:dc:
         0e:72:98:67:57:c7:a7:09:77:93:a8:61:32:a1:e1:e0:2f:1c:
         69:25:f5:bf:a7:4c:9b:43:be:b5:6c:80:ee:e2:e3:40:13:84:
         1c:b4:ed:84:7a:0f:f1:9b:58:1e:3c:20:8e:d1:8b:66:b1:5e:
         71:7d:86:a0:1c:7c:11:50:dc:40:a9:0c:b0:4c:1f:b2:4f:c8:
         dc:a4:24:20:da:cc:99:22:aa:05:3d:bb:db:6b:7b:ed:a2:df:
         b2:01:bb:79:98:40:6a:41:6a:92:17:72:7b:8e:b2:24:fc:f2:
         e3:f4:ce:ca:4e:6a:fe:97:df:26:92:0e:d9:44:d8:85:d4:66:
         e9:0e:81:b2:88:d0:10:e9:30:ad:32:3c:f8:67:3f:11:bc:19:
         a5:26:a0:3c:ef:80:df:54:f3:a7:d8:9c:44:e8:c9:b0:79:1f:
         76:d4:2a:9f:2c:3a:51:6e:21:06:23:be:6e:80:a7:55:8e:92:
         d2:b2:d4:d6:5d:af:2a:7b:68:5e:ff:89:8c:35:67:74:f7:80:
         13:2e:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----