Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313731353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a313731353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          SIm5EFKdv+B2RsVJMVk+o1UsR8WRZzMd3Dz6BWkEzF8=
Subject key identifier:   E1:8D:42:7F:7E:3F:D5:28:B6:68:DC:7A:6C:50:C3:76:D0:E3:77:CE
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6F4FF33CA54B8F6DCFAF6FE7DF83AD7002EAC4FD
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313731353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 17:15:02 +0000
ROA not before:           Mon 07 Feb 2022 17:10:02 +0000
ROA not after:            Mon 06 Feb 2023 17:15:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:1715::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4f:f3:3c:a5:4b:8f:6d:cf:af:6f:e7:df:83:ad:70:02:ea:c4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 17:10:02 2022 GMT
            Not After : Feb  6 17:15:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:92:bf:64:c8:44:48:b6:9f:87:ad:db:8f:
                    1b:b9:dc:1e:03:a5:21:d4:50:59:b5:54:02:dc:07:
                    56:bc:5b:b9:85:db:7c:13:40:65:c1:8e:b7:4b:b4:
                    93:cf:ed:b6:a3:ee:98:61:ef:5f:9d:1e:44:59:55:
                    69:dc:35:fa:9a:9c:f1:34:50:c7:a4:20:78:1e:c8:
                    48:2f:9b:76:8b:18:cb:47:e6:9a:e8:40:61:d3:7a:
                    1c:37:7b:df:75:39:03:0e:16:28:e6:ac:5e:b9:ae:
                    9f:58:c9:d3:00:93:a4:07:2c:b5:86:9d:36:e6:46:
                    96:89:04:5c:9b:6e:ce:7d:12:80:94:21:7b:11:3f:
                    8e:30:1c:c1:b1:3d:57:18:44:f1:55:4b:b7:99:30:
                    db:39:11:f4:9e:86:a8:9c:64:e9:37:0d:47:3e:8e:
                    15:38:93:4c:47:e6:4b:72:a3:22:6d:1f:15:ae:56:
                    8c:db:59:9c:ca:d3:87:de:bb:bb:2a:c4:fa:05:a0:
                    6b:ad:aa:31:aa:f2:d7:1a:d0:93:4f:8c:0e:7f:51:
                    1f:55:c3:00:f7:d0:8f:d3:72:92:ef:16:51:e5:de:
                    3e:e8:2a:08:9a:e2:25:f1:6e:20:37:6e:56:c7:ba:
                    5a:a7:ee:bb:14:34:b8:28:1f:b7:7f:e0:ac:20:3c:
                    cf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8D:42:7F:7E:3F:D5:28:B6:68:DC:7A:6C:50:C3:76:D0:E3:77:CE
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313731353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:1715::/80

    Signature Algorithm: sha256WithRSAEncryption
         4b:ab:83:a2:39:43:b9:7f:ac:b8:ed:19:56:d0:31:3c:0e:fd:
         67:f1:7a:3e:2e:fa:f5:bf:74:76:e3:5f:40:00:8f:08:85:2b:
         1b:d4:b8:11:7d:d4:f3:23:ed:ef:12:13:0a:1b:d2:62:94:85:
         e2:1e:14:35:ef:9e:43:e3:50:a6:cf:0f:bd:37:d4:a3:2d:59:
         c0:88:7f:d1:48:46:a7:d3:28:71:81:02:21:e9:c8:e2:c8:b6:
         c8:a7:1a:aa:85:ab:80:c1:08:c0:2f:0e:c5:9b:57:48:a5:8c:
         4b:12:5b:28:29:2b:ee:6a:65:9e:95:9f:e1:25:67:88:31:e1:
         6d:1e:a5:9b:74:63:68:94:8b:9d:5e:e4:ef:02:bc:13:e4:11:
         80:af:72:5e:4f:c9:6d:5e:48:54:37:18:e3:59:5c:a2:a2:3e:
         1a:66:ae:23:fa:fe:d9:f2:85:d3:1b:de:72:67:5f:95:c4:ad:
         88:13:4a:e0:74:b8:6f:97:1d:80:15:51:92:de:c0:82:90:bd:
         a4:13:1a:77:22:84:6a:34:a0:ed:55:e7:e1:9f:60:86:52:36:
         d7:bb:23:4b:2d:6c:cd:a7:71:da:84:75:af:4f:a5:9a:35:7a:
         46:19:c2:6c:13:8e:e0:0c:19:d3:62:11:75:cb:82:47:6b:61:
         f4:6a:c3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----