Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313032353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230383a313032353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          rjDkWTk6pBO0Ix55zYkGUJ64WRYnvtSJY21Z/YYyFSg=
Subject key identifier:   92:BB:DE:4C:B0:22:21:8D:FB:24:EA:51:09:FE:70:5C:F7:9D:CA:80
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       45BA8D1AEEECBA8684624978ED172FF03FCFC183
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313032353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 08 Feb 2022 10:25:01 +0000
ROA not before:           Tue 08 Feb 2022 10:20:01 +0000
ROA not after:            Tue 07 Feb 2023 10:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:208:1025::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ba:8d:1a:ee:ec:ba:86:84:62:49:78:ed:17:2f:f0:3f:cf:c1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  8 10:20:01 2022 GMT
            Not After : Feb  7 10:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:27:b1:4d:bf:be:c2:51:a0:7d:b3:d0:a4:
                    fc:5a:b0:f0:a6:5b:14:cc:28:4e:c9:40:59:0f:94:
                    c0:75:09:2a:ac:60:55:5d:e2:dd:a5:c8:21:5c:89:
                    61:91:0f:f5:bd:30:b1:7a:6d:8d:3c:ba:6b:8f:69:
                    af:3f:15:d4:f4:60:e7:00:42:ee:c2:2e:25:4a:c0:
                    6d:07:14:bc:6c:da:0e:6b:96:dd:57:11:fb:b9:28:
                    a1:1f:0d:9e:a4:f4:dd:2b:1c:6a:dd:dd:bf:19:89:
                    65:93:e0:6d:84:55:bb:ed:2b:da:85:59:31:f6:be:
                    cc:10:05:50:87:1b:55:64:a3:98:19:a6:c1:89:fb:
                    18:c9:a0:99:46:da:d8:ed:07:6e:dd:31:d6:21:0c:
                    36:e4:ce:57:5c:3a:16:1e:a0:a9:0f:33:8b:f7:f5:
                    03:91:db:e0:f3:a3:b0:75:c3:4b:ee:bb:61:37:c4:
                    20:e4:bc:2f:ff:20:34:bd:5a:7d:06:b6:94:c8:16:
                    ab:33:45:e5:73:c6:aa:9c:51:94:de:27:af:36:35:
                    8a:74:20:bb:d2:b0:08:fb:5a:69:0f:55:6c:0c:c8:
                    97:43:25:a4:94:af:73:3d:b9:0c:62:ec:5f:c9:33:
                    94:c1:8e:28:9d:1e:10:46:8c:70:32:7e:28:56:63:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BB:DE:4C:B0:22:21:8D:FB:24:EA:51:09:FE:70:5C:F7:9D:CA:80
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313032353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:208:1025::/80

    Signature Algorithm: sha256WithRSAEncryption
         52:b6:44:81:37:b8:55:8d:67:2a:24:27:d2:2d:5f:b5:f1:18:
         34:14:97:ec:4c:5b:86:c9:3f:d2:54:f3:43:14:03:40:47:ae:
         1d:b2:60:a6:f7:56:68:6a:09:7b:d5:a3:18:0d:d8:ea:a9:87:
         bd:98:8b:9e:c6:64:f0:05:dd:94:11:69:f8:bf:d5:91:8d:14:
         fc:08:ed:88:df:c6:ea:b6:7c:61:57:5d:9f:f2:a2:bb:15:ea:
         62:62:06:86:a8:15:51:a8:b8:35:c0:78:8d:e4:b2:c0:6e:e1:
         11:51:ea:80:8e:d4:6e:34:8c:88:5b:7b:10:1f:88:87:70:60:
         e5:fb:5d:9c:7b:90:f8:56:9d:ac:42:2d:6e:a6:a9:09:5b:ef:
         a5:6c:b3:25:9a:b9:51:99:38:89:2d:0a:bf:8f:52:c0:14:a0:
         56:b3:49:25:f4:bb:4d:c8:97:c0:7f:6e:68:a7:de:7d:2a:66:
         43:9c:4e:d7:32:4e:5d:f5:6a:2f:96:e7:1f:7c:94:fe:0d:2f:
         c5:0f:59:1d:32:00:96:75:d6:be:88:39:8b:a2:69:0a:a8:ba:
         1d:be:95:60:65:5f:02:f7:3b:d7:b6:15:6f:3d:40:fb:f3:2f:
         ec:8d:35:28:dc:53:6b:ae:3c:75:c0:80:26:9e:ad:fc:90:8e:
         fd:d6:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----