Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313330303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a313330303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          5FaTwV7emkiE4oATOq1eOi+qtQshzH/WwQt5lxO+zCo=
Subject key identifier:   17:35:79:8E:3B:4A:36:0D:40:DF:67:F8:27:2F:83:C7:74:3C:CB:68
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1C7025F2E7ABCA29504B43120C7CEDFFEEF8D7CC
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313330303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 13:00:02 +0000
ROA not before:           Mon 07 Feb 2022 12:55:02 +0000
ROA not after:            Mon 06 Feb 2023 13:00:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:1300::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:70:25:f2:e7:ab:ca:29:50:4b:43:12:0c:7c:ed:ff:ee:f8:d7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 12:55:02 2022 GMT
            Not After : Feb  6 13:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:26:d4:89:c2:f5:35:a3:58:ff:8e:82:b3:
                    d5:ad:9e:87:8d:4f:1b:13:23:b6:a3:54:92:d3:d2:
                    33:a5:02:d6:e3:27:5e:e4:9b:23:1d:20:45:10:33:
                    3e:1c:66:ab:ab:25:4b:1a:ee:d6:3a:c7:a0:d0:e1:
                    54:28:03:f0:4d:24:a6:db:56:60:68:ad:e7:d2:18:
                    79:ee:c7:20:eb:fa:79:d2:c7:0f:7e:2b:89:61:b6:
                    d3:e1:60:dc:53:b7:7d:a3:28:1a:4b:ed:c2:a7:f4:
                    4d:44:b6:cf:bf:42:b7:1c:8a:83:12:ea:43:81:e5:
                    3f:3c:40:91:9f:0c:ad:6e:e6:45:72:ab:17:1a:03:
                    96:e0:29:4d:35:07:71:cc:7c:1c:6a:06:a7:fa:e6:
                    5f:d7:00:96:bb:c1:23:66:64:51:32:0b:06:c7:ec:
                    46:b2:41:d1:ee:2a:43:c2:e8:5a:c6:66:e6:ef:82:
                    08:ee:28:de:b4:a8:e2:1e:99:ca:99:a3:ad:61:14:
                    c0:e3:ef:7b:3f:38:b4:a5:f9:55:92:65:e2:f0:1c:
                    8a:d2:ba:67:ff:05:d2:89:1b:d1:7e:64:56:3b:0b:
                    fc:6d:a3:e5:15:16:05:f8:d6:40:be:1f:15:b1:9d:
                    36:42:dd:20:d5:8d:0f:30:f1:fc:2f:e6:fb:1f:89:
                    b1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:35:79:8E:3B:4A:36:0D:40:DF:67:F8:27:2F:83:C7:74:3C:CB:68
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313330303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:1300::/80

    Signature Algorithm: sha256WithRSAEncryption
         15:f8:11:db:37:9d:92:09:75:a6:31:e9:c4:e9:cb:af:42:b6:
         3f:1c:66:3f:5d:b7:ed:eb:9e:3a:45:5a:3f:14:98:55:2c:ab:
         4e:f7:dd:97:68:e7:b1:79:fc:4c:ff:05:5e:2a:0d:78:15:9b:
         17:44:cc:15:5e:31:ab:bd:2f:5b:4e:9a:31:31:78:60:59:bc:
         3f:bd:ff:48:b6:a6:5c:3f:c6:21:6c:da:b7:6d:39:66:3d:1d:
         c3:9e:58:a2:ef:23:b1:ed:3f:a3:67:f6:e1:1a:a5:cd:a3:94:
         d9:31:59:0f:08:a2:3d:ec:75:89:7d:e3:65:f7:77:67:0d:2e:
         25:1a:29:34:dd:d8:5a:94:7b:cb:75:c2:5a:21:36:fc:7f:95:
         49:fb:39:f7:7d:36:e7:62:63:19:54:4c:22:39:c9:ae:98:ab:
         42:3a:5c:71:31:e6:2e:b3:e8:e5:09:08:d3:57:c2:69:52:02:
         5b:4a:8d:49:92:66:f8:d9:95:c5:a6:d1:0c:77:38:7a:88:2c:
         8d:68:60:09:63:bd:95:c7:ab:39:0a:2f:f9:be:44:68:2c:d0:
         e9:61:1b:5d:4e:c1:b8:ea:d6:83:6e:99:bf:6b:39:03:3e:45:
         b0:0f:3f:96:bb:68:33:31:54:4f:97:15:e5:13:b3:52:c8:92:
         e0:e0:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----