Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313731353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230363a313731353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          EMYGLXUXX52A/fb/PTSkXZbAZmeiQGjVxXdF35yqUAw=
Subject key identifier:   E5:21:88:79:54:72:65:BA:16:0E:FD:A8:73:08:3E:CA:BC:A2:6C:C1
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       338A23D29AFA74A47C8A01B52F31307457108B64
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313731353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 06 Feb 2022 17:15:02 +0000
ROA not before:           Sun 06 Feb 2022 17:10:02 +0000
ROA not after:            Sun 05 Feb 2023 17:15:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:206:1715::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8a:23:d2:9a:fa:74:a4:7c:8a:01:b5:2f:31:30:74:57:10:8b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  6 17:10:02 2022 GMT
            Not After : Feb  5 17:15:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:88:54:5a:2f:fe:e9:58:4b:7f:a6:09:00:
                    b0:e1:4a:dc:15:0b:e1:9d:44:c6:7d:a0:50:e8:eb:
                    91:4a:d9:17:0b:79:fc:df:2e:74:c6:ac:bd:3d:84:
                    ac:41:bb:37:af:19:29:08:ec:c6:5e:e5:61:75:d0:
                    b7:7b:69:97:79:87:aa:7c:22:68:94:1c:0f:a0:d9:
                    45:a4:be:d2:82:c5:98:f3:9f:86:3d:7a:09:9e:ac:
                    d0:1d:d6:7b:5d:e2:27:4c:d1:4f:e7:0e:ec:a3:d1:
                    43:29:1a:73:1d:f2:9c:63:bd:c4:7b:83:ec:cd:1a:
                    61:e1:b9:7f:40:51:14:69:e5:c2:dd:7e:69:ec:b9:
                    ca:c9:16:c3:de:88:88:8c:78:fe:d2:aa:57:88:3e:
                    36:85:d2:ed:f5:9f:59:9c:f4:c8:75:20:7a:6b:bb:
                    f8:85:b2:eb:71:8e:33:ee:5d:35:5f:83:0c:72:87:
                    c6:b7:e0:9e:6d:00:38:03:a1:d9:3c:28:15:c3:20:
                    73:9f:1c:84:d2:ea:72:b4:a1:3a:e3:58:64:57:f9:
                    1b:6f:6c:1c:a9:4a:10:e5:3f:0f:06:9a:7f:a6:ee:
                    b9:f9:cf:04:ba:59:80:fa:47:ea:31:0b:b2:28:5c:
                    df:04:96:e6:e5:3b:cb:8e:e5:4e:75:a8:19:48:bb:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:21:88:79:54:72:65:BA:16:0E:FD:A8:73:08:3E:CA:BC:A2:6C:C1
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313731353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:206:1715::/80

    Signature Algorithm: sha256WithRSAEncryption
         d3:90:38:98:3b:92:2c:50:7e:9b:8a:6a:bf:ee:2f:f6:dd:a0:
         4c:15:d3:15:e5:e3:02:f5:6a:64:57:90:a4:3a:9a:09:d6:d5:
         18:aa:0a:65:aa:a7:0c:90:a5:27:be:c4:01:1f:70:74:b0:a5:
         d6:17:c8:ab:27:39:ef:70:28:53:99:37:62:cc:bb:2f:fc:a7:
         6e:a3:c4:9e:f1:9b:b2:4f:ab:92:dc:7a:84:2f:83:9e:a9:00:
         6b:cc:17:99:16:04:92:cd:68:f4:66:d6:f2:63:ed:d2:bc:7c:
         50:ee:fe:16:15:96:5f:24:c2:95:1a:fb:15:3c:c8:73:11:69:
         46:ee:c4:37:54:2e:27:07:ca:c6:36:a7:00:ad:ef:8c:e5:7c:
         2f:00:62:fd:e9:51:c4:60:98:95:2a:74:9a:02:cf:47:45:8e:
         fe:15:5a:19:fc:72:94:4d:6b:28:2f:32:f2:91:f6:38:88:97:
         72:80:13:8e:27:2c:1b:c6:10:d1:15:7f:98:b5:0b:c4:ae:1c:
         f8:dc:28:0e:91:c7:e6:ac:6e:73:29:2f:5c:24:32:3c:b5:ef:
         e3:2a:f5:41:81:89:d5:f4:b3:9d:cc:a7:92:96:14:50:2e:af:
         72:2b:00:60:fe:af:71:18:39:62:82:5b:72:68:43:56:63:fd:
         29:27:29:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----