Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313434303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230383a313434303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          WZHAFiRLKQeHie5L5i9SsJoZx9L/6IgNeesS7VF7aoo=
Subject key identifier:   C9:74:BE:1C:CD:2C:C8:11:EA:A2:5D:37:FB:3C:05:36:C4:60:92:FD
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       16154146789B7F7C2D9B5445B11998C15459004F
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313434303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 08 Feb 2022 14:40:01 +0000
ROA not before:           Tue 08 Feb 2022 14:35:01 +0000
ROA not after:            Tue 07 Feb 2023 14:40:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:208:1440::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:15:41:46:78:9b:7f:7c:2d:9b:54:45:b1:19:98:c1:54:59:00:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  8 14:35:01 2022 GMT
            Not After : Feb  7 14:40:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:ba:7d:be:f9:d5:c2:ac:11:c5:0a:6d:6b:
                    7b:e1:dc:84:81:60:7a:d6:5c:9a:87:ef:a3:23:e5:
                    6a:20:5e:a6:ee:32:d3:b6:b0:a0:f5:0f:e8:34:fe:
                    34:59:f9:03:a5:74:28:72:02:fb:eb:0c:24:56:a2:
                    f3:8a:13:d5:c9:61:ac:39:d6:fa:eb:02:57:d9:7d:
                    cc:60:26:b1:af:60:35:d1:85:97:11:49:e5:67:33:
                    2d:56:f7:9e:fb:57:e1:21:09:1b:d2:1b:2a:5d:8e:
                    fe:44:bd:93:68:c5:ed:f5:8f:ac:ea:90:b0:46:15:
                    3b:a7:05:31:12:32:a8:2c:a2:0a:50:0e:00:12:9f:
                    94:4b:0c:09:98:2c:26:57:dc:59:29:60:3f:6a:0b:
                    4d:03:af:8c:32:75:75:0d:82:49:c3:e8:89:4a:d6:
                    0d:c4:c3:a1:35:9b:2b:3e:96:d1:c5:b6:a3:44:9d:
                    05:0a:de:03:d5:62:db:5a:4e:fd:08:90:b2:94:48:
                    aa:c7:68:17:6d:c2:3f:c4:e5:fa:f9:d3:5e:f8:06:
                    38:16:c1:96:11:42:32:4c:4a:0d:c7:a8:65:77:0e:
                    44:db:5d:22:c4:86:44:69:00:6b:02:74:4d:d9:47:
                    01:48:45:9d:35:34:27:88:eb:3d:a0:79:2d:f3:40:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:74:BE:1C:CD:2C:C8:11:EA:A2:5D:37:FB:3C:05:36:C4:60:92:FD
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313434303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:208:1440::/80

    Signature Algorithm: sha256WithRSAEncryption
         a0:7e:9e:b3:98:f9:f9:8e:a1:62:18:98:d0:ae:57:11:00:93:
         55:2d:b3:92:1d:e3:11:23:4a:eb:58:a5:3b:df:9e:0d:9a:c1:
         17:37:3e:ae:f4:45:a1:3c:67:aa:04:e7:07:34:9f:d1:1f:dd:
         50:6a:e5:40:d5:b6:0a:0e:0b:60:28:f3:f2:d4:6d:2c:48:72:
         77:c8:41:f1:1a:ab:39:94:aa:0e:89:5d:f7:b7:47:e1:32:ee:
         14:0d:1d:98:ea:ec:a0:f4:dd:52:17:c0:76:e2:fb:0e:36:e8:
         c3:33:50:bf:f9:87:66:21:1d:80:cc:65:69:16:a6:2b:f8:15:
         7a:62:3f:4d:c3:b9:6b:31:52:60:62:c6:3f:8f:4a:9b:70:60:
         6c:8a:f8:a4:96:75:72:cc:eb:0f:8e:3a:f7:55:e3:25:cb:8b:
         bc:55:05:28:48:be:c6:d0:55:4c:cf:c0:25:5e:34:5b:93:b8:
         c8:3e:2c:ed:5e:04:69:07:a8:e9:a9:6e:c4:24:bb:31:7f:eb:
         5c:d6:7d:ef:23:72:45:49:11:a8:e4:d3:44:9e:75:47:71:1a:
         38:af:bd:15:b8:1b:b3:c7:c5:af:a7:a9:76:c6:6a:d5:99:87:
         d3:6e:01:66:fd:2e:7a:ad:7b:1d:35:b4:0a:46:05:97:1f:fc:
         21:2a:b7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----