Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313531303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a313531303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Ar6Uy2wBMqY956LIuXlywNzI1fY6yClntrPpDDJH+gk=
Subject key identifier:   F4:67:06:16:5A:B3:36:B6:C4:37:E0:10:41:F9:75:F5:72:36:07:AD
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0EE1A7EE4923B3DA07F77E5A6874252B9E98EDBE
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313531303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 15:10:02 +0000
ROA not before:           Mon 07 Feb 2022 15:05:02 +0000
ROA not after:            Mon 06 Feb 2023 15:10:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:1510::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e1:a7:ee:49:23:b3:da:07:f7:7e:5a:68:74:25:2b:9e:98:ed:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 15:05:02 2022 GMT
            Not After : Feb  6 15:10:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:f9:72:d9:07:4c:10:b8:63:cb:52:67:f4:
                    89:5d:93:51:45:3a:cf:9c:20:7e:81:50:77:97:81:
                    1e:5c:31:21:ed:d9:58:34:d2:38:0e:2d:c1:d5:c7:
                    92:8e:0b:54:3b:45:02:b6:f0:b3:a1:2b:68:44:e4:
                    bc:f2:44:eb:46:da:c9:f7:09:13:a3:55:2c:7c:1f:
                    c6:96:6d:e6:3b:76:25:a3:9d:d8:7e:c8:d5:c1:6c:
                    03:0d:b6:ae:7e:63:e8:66:a0:b8:d1:99:b7:47:2d:
                    fb:b1:b5:cf:a0:89:cf:63:26:e0:c2:69:e5:c9:4f:
                    5e:e9:e8:35:f9:b0:8d:40:5a:c0:32:1a:cc:9e:cb:
                    5e:d1:bf:02:b6:f3:e4:dd:7b:30:9f:78:be:fd:1a:
                    01:e6:68:0f:2b:7e:1a:0e:f2:2e:5c:c3:d6:6c:5f:
                    8e:d1:d8:13:fa:eb:25:6b:99:d7:23:fa:57:1c:c3:
                    1d:a9:d6:ba:79:69:0a:48:06:e1:31:4a:9e:19:04:
                    62:97:15:69:f1:62:3e:0f:e0:87:d6:29:17:9a:1a:
                    bc:f2:27:3e:92:cd:ea:53:b5:07:42:a7:65:6a:81:
                    05:1a:95:b0:93:fe:cc:21:84:c6:b7:25:dc:2c:fd:
                    2d:16:f2:c0:87:77:a5:7c:ac:4d:11:87:bf:bc:d5:
                    17:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:67:06:16:5A:B3:36:B6:C4:37:E0:10:41:F9:75:F5:72:36:07:AD
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313531303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:1510::/80

    Signature Algorithm: sha256WithRSAEncryption
         c7:e3:37:e7:99:2f:37:57:13:75:a7:a6:ee:62:4b:3d:bd:3a:
         f2:1e:02:5b:32:48:70:b2:0c:ac:93:f3:20:be:e0:94:cd:51:
         13:dc:a6:ca:92:87:95:e2:be:30:b6:a9:59:1f:fd:dd:d0:29:
         ce:14:d3:3f:ec:b3:ea:ab:ce:fa:2f:8f:1e:3b:52:b1:c3:09:
         a0:77:fc:4c:b3:69:ee:95:ee:39:c3:cb:2e:72:5b:df:54:24:
         5d:2f:fb:01:30:c6:db:e1:d8:09:63:df:f0:d3:b0:a4:2a:b0:
         56:d2:53:c4:c5:56:18:f0:d3:c7:3c:5a:e8:b1:e0:ac:86:d6:
         d6:8e:2b:49:0e:a3:ae:55:52:b6:0e:e3:1c:60:0c:d7:a0:92:
         db:6d:cd:39:a2:45:d3:a5:64:31:cd:2b:06:ac:2c:f1:c8:40:
         e9:f4:bf:d9:50:64:97:9a:02:3f:7e:b8:d5:2c:5f:e8:64:dc:
         d5:10:a8:c9:77:6e:e2:1e:33:2d:b2:70:4a:42:2d:fd:f9:ee:
         7e:00:7a:85:14:c1:be:d0:26:88:5e:c8:87:53:91:7e:66:b0:
         ea:de:41:39:c1:ba:ba:f2:df:38:40:75:36:4f:f1:f4:63:c3:
         6a:8a:ba:b1:10:d3:b6:55:9d:05:2c:c9:2f:03:61:a1:2d:63:
         29:c1:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----