Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a3431303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a3431303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          6+97pzdSsuwUXxrpcl+//0HRBEhG0Je8FxQjIeFUPMM=
Subject key identifier:   D0:44:28:47:46:63:72:9F:65:5D:12:EF:6F:5D:F7:7A:51:F0:0B:BF
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3C1D87B2E763D61A0B3C986F31964158D207E77D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a3431303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 04:10:01 +0000
ROA not before:           Mon 07 Feb 2022 04:05:01 +0000
ROA not after:            Mon 06 Feb 2023 04:10:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:410::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1d:87:b2:e7:63:d6:1a:0b:3c:98:6f:31:96:41:58:d2:07:e7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 04:05:01 2022 GMT
            Not After : Feb  6 04:10:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:15:36:89:64:c7:ac:a7:09:d0:9f:fd:21:
                    f8:3a:2b:71:a3:62:57:e9:b3:c0:ff:80:f7:e7:8e:
                    3f:83:99:59:b7:f2:23:d1:da:38:08:31:0e:93:f0:
                    61:46:e0:dd:2f:c7:06:a0:12:58:1d:e5:d3:ec:c3:
                    a3:21:ff:e7:43:de:35:c5:d1:72:49:84:72:af:a0:
                    14:63:cc:b7:c0:b5:d0:3d:c0:f7:0f:34:27:2f:fd:
                    2e:6c:b7:68:11:9f:ef:2f:cf:52:14:31:a1:36:65:
                    39:e5:9a:1f:0e:d1:61:fa:f7:fa:20:63:81:11:0e:
                    8e:15:a6:83:34:5d:e3:2a:a7:84:79:01:d6:fd:62:
                    4c:52:5b:91:57:47:1b:fd:d1:12:f6:7e:c5:96:31:
                    51:8c:30:85:6c:2d:f2:ad:90:e6:ff:88:cd:21:46:
                    b8:5f:8d:31:ea:d0:ec:60:fd:1e:03:68:cf:ce:7f:
                    ef:3b:e9:2e:7f:4d:b2:54:f8:f9:18:48:c4:fd:27:
                    07:52:62:34:e5:d5:43:bf:4a:d3:54:93:67:f9:b4:
                    10:85:fd:07:cf:92:32:f0:07:14:2f:c0:45:e5:a3:
                    62:21:7e:1c:6c:bf:62:5d:e9:fb:42:7d:2a:62:ef:
                    ae:09:4c:a7:3e:65:ca:be:82:a9:85:6a:8e:7d:1f:
                    3d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:44:28:47:46:63:72:9F:65:5D:12:EF:6F:5D:F7:7A:51:F0:0B:BF
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a3431303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:410::/80

    Signature Algorithm: sha256WithRSAEncryption
         80:ff:3d:43:3d:51:0b:cd:d4:a0:27:a3:f0:d0:e2:79:fc:b1:
         e3:8a:a4:c5:50:75:0b:d5:4a:31:b7:2e:9d:96:6f:1b:44:b0:
         4b:83:20:f5:32:12:ed:1e:00:47:69:5b:7a:7b:a1:d3:5a:03:
         19:0f:04:d5:16:f4:07:79:94:74:fe:a5:6c:a5:a4:74:4c:79:
         11:03:6a:7f:a7:a2:82:db:56:c3:2e:07:09:87:fc:e7:33:88:
         97:53:82:53:9b:ab:be:96:39:14:4f:88:f9:3b:fd:84:09:e5:
         d3:25:86:8e:87:8d:27:2d:4f:8b:a2:68:8e:1f:9e:1b:03:09:
         b0:43:ee:d7:82:1c:9f:b5:06:5c:90:4c:0a:07:63:d9:2d:dc:
         09:84:ed:f8:a0:f5:43:a9:88:1a:5d:bc:c3:cd:a9:8e:f3:5c:
         e5:01:f0:c9:34:a0:d8:f8:5e:21:f7:ac:e4:b8:fd:64:36:60:
         a2:61:ec:d0:ad:9f:08:b2:1f:43:f5:ef:d2:5e:e3:a0:90:05:
         7a:fd:88:5d:5f:a9:63:d0:64:55:55:fd:8f:9d:0f:21:2d:5d:
         07:c5:8d:d7:aa:52:1b:af:97:88:57:30:5f:f2:b8:88:b9:6a:
         5d:ac:41:a4:62:47:fa:ff:66:1f:10:97:97:dc:d0:bd:64:10:
         7d:99:c5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----