Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313932353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a313932353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          wOuYEkbGhPYR+/N98Gp6vgT6HI/EJVz+BgD6vBGfjAU=
Subject key identifier:   9F:D9:39:89:98:42:69:48:41:39:C3:F9:CA:A2:1C:2F:0B:D5:89:02
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7018A8B0DEC15F3A05C0CF251154BED98EF5E6AB
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313932353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 19:25:22 +0000
ROA not before:           Mon 07 Feb 2022 19:20:22 +0000
ROA not after:            Mon 06 Feb 2023 19:25:22 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:1925::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:18:a8:b0:de:c1:5f:3a:05:c0:cf:25:11:54:be:d9:8e:f5:e6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 19:20:22 2022 GMT
            Not After : Feb  6 19:25:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:91:77:92:74:16:a5:79:46:df:ea:8d:2b:
                    98:57:29:30:b5:47:48:6e:08:20:a1:b2:1f:e5:d7:
                    2b:1c:73:9f:98:1d:d5:42:92:af:5a:83:6e:08:22:
                    ed:59:b2:71:4d:3d:07:9f:3d:79:ab:7a:df:af:86:
                    dc:71:ca:53:d7:1c:ff:15:6e:60:ab:54:35:1f:bc:
                    7d:0d:53:38:47:61:d7:d1:08:01:bb:d7:79:72:88:
                    9c:78:16:31:22:a4:5b:4e:5d:f2:5a:30:89:08:c9:
                    5a:05:26:9d:84:c4:cf:a1:c0:c4:7e:36:d2:e3:83:
                    1e:ac:f6:40:5e:a6:b2:42:d1:87:b5:61:62:90:66:
                    d1:48:d0:14:38:5c:97:35:c6:c1:6b:f4:76:8e:1c:
                    49:28:8c:67:96:f9:ff:d7:1e:96:17:b2:4e:cd:ab:
                    a5:5c:80:b6:a6:78:7a:e0:70:d6:e9:97:b7:74:96:
                    48:12:0c:69:b2:3e:a6:28:bf:06:42:f9:bf:cf:13:
                    54:31:a2:67:1c:86:9d:c7:04:9b:b2:92:0f:89:7b:
                    c9:d3:f2:9b:46:db:a2:3d:38:5c:c5:dd:c6:9f:48:
                    0b:61:f1:be:51:f6:5d:df:ec:39:7e:75:81:ff:da:
                    3a:3f:38:c0:ad:23:f2:60:5c:15:e1:45:f3:ac:f6:
                    23:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D9:39:89:98:42:69:48:41:39:C3:F9:CA:A2:1C:2F:0B:D5:89:02
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313932353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:1925::/80

    Signature Algorithm: sha256WithRSAEncryption
         68:fd:87:d8:89:af:e1:d8:0d:9b:3a:e6:2f:ac:f1:aa:22:16:
         e9:cc:31:80:16:61:61:20:18:f2:93:68:c1:a1:85:3c:d2:10:
         3f:56:74:a9:0c:d4:c5:8a:6c:dc:cc:04:b2:f7:92:ed:21:f4:
         22:35:4d:40:4c:f4:47:25:ed:ea:76:e2:26:28:5d:2b:1b:8e:
         fa:16:df:d4:fd:10:2d:78:0f:02:ff:db:e3:c8:8c:24:7d:49:
         2c:7f:46:1b:97:bd:8a:e7:02:3d:8e:6d:27:72:d4:d0:93:86:
         22:8a:1d:fc:0d:27:aa:88:da:b9:87:92:31:64:25:52:9e:a8:
         ed:95:92:ec:cb:57:4d:85:ee:26:98:c6:b0:a8:26:34:46:59:
         34:b6:0b:74:cf:11:22:bf:b8:bd:6d:71:9b:fb:b6:df:29:f3:
         8a:95:12:73:ee:b7:2c:3d:55:53:3e:0f:49:c2:6f:57:66:89:
         59:8d:0b:b2:27:cb:c2:0e:7c:9a:7e:2e:0f:a6:30:4a:b0:92:
         c6:0e:e9:2e:0d:b6:68:04:55:98:c3:cc:fc:d6:61:1e:79:55:
         e0:f1:df:97:ac:82:16:7c:74:51:93:dc:4e:25:ad:ae:b0:38:
         ee:18:47:e5:47:8d:8d:ab:50:ac:e4:89:b4:35:26:7d:40:b6:
         d2:18:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----