Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a3832303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230383a3832303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          MCe/B/eo2XZjgDVnQBBo2QHwgKGAmg5wmc3sTdV9EKE=
Subject key identifier:   D1:A8:26:E0:DF:8B:22:02:A5:30:4A:58:1C:4A:45:7F:9F:93:75:C0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       095E17866D24B53E74BE08884E97343DE1C72C32
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a3832303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 08 Feb 2022 08:20:01 +0000
ROA not before:           Tue 08 Feb 2022 08:15:01 +0000
ROA not after:            Tue 07 Feb 2023 08:20:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:208:820::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5e:17:86:6d:24:b5:3e:74:be:08:88:4e:97:34:3d:e1:c7:2c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  8 08:15:01 2022 GMT
            Not After : Feb  7 08:20:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a6:a2:7a:53:eb:da:71:fa:c2:b6:0b:74:3d:
                    87:d3:79:6c:3e:56:95:45:82:c0:f5:81:d5:5f:62:
                    09:64:c0:c0:de:36:45:9b:d7:a2:bd:00:13:08:15:
                    51:6f:7e:ce:be:00:e3:ba:f1:ed:d7:20:40:d8:e8:
                    cc:6f:2e:a0:74:3a:76:66:cd:d5:88:b6:30:af:c4:
                    ee:22:91:eb:44:27:2f:0f:69:ad:56:88:5e:3e:3c:
                    17:1d:91:67:18:f5:41:2f:43:2c:48:42:b4:c9:9f:
                    fc:91:00:1a:2b:92:72:ea:ee:2c:47:c4:0d:82:5b:
                    0d:5f:de:53:77:27:18:70:a7:6d:bd:dc:df:4d:da:
                    64:65:11:e1:06:cd:0c:a6:7c:0f:b5:34:48:f4:39:
                    69:0f:58:bd:62:e5:83:a6:ea:8d:2a:0e:02:a7:0a:
                    ad:69:6b:2c:4e:70:b8:40:c0:ee:43:a6:05:45:89:
                    5b:34:27:61:b3:15:f9:a0:fb:02:49:0e:b5:f9:4a:
                    2e:e3:3c:27:56:a6:3e:4f:38:c3:da:7f:5c:c7:87:
                    a3:0a:c2:6a:11:41:0b:67:07:7f:05:82:e7:1f:75:
                    d1:1c:11:d2:15:08:3c:59:f8:15:b5:35:b1:89:27:
                    6a:4d:d2:ea:13:04:75:51:7f:a1:d4:20:5c:ae:52:
                    a4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A8:26:E0:DF:8B:22:02:A5:30:4A:58:1C:4A:45:7F:9F:93:75:C0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a3832303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:208:820::/80

    Signature Algorithm: sha256WithRSAEncryption
         11:39:6e:52:0b:d5:56:d6:08:26:69:0f:5c:02:0f:33:93:49:
         62:bf:c8:54:7a:25:8b:14:d2:21:ae:3e:ee:f2:1b:57:77:c4:
         25:70:f3:62:07:12:17:a6:7a:24:45:05:d1:b7:db:d1:a4:f9:
         be:37:39:4d:ae:06:45:f0:51:7b:ab:73:4e:dc:a1:11:ae:d6:
         81:08:0c:e2:c8:0b:ce:f6:eb:f5:21:de:cb:cd:c3:2c:8a:3b:
         b1:ba:1d:e5:6f:ab:24:c1:bf:79:ec:16:44:fd:62:aa:32:a2:
         d0:8a:6f:85:03:24:a9:eb:b6:43:7f:82:62:bf:f8:4c:d0:9d:
         36:8a:66:a7:4e:af:2f:ae:28:25:ed:43:de:4f:9b:25:65:52:
         ab:6f:ff:34:0d:b3:e6:3c:ab:51:11:c3:f2:f5:82:06:81:be:
         bf:18:6c:31:b4:ef:af:9b:23:72:ac:78:02:d1:61:0c:7a:dc:
         0d:fe:8c:db:8a:17:d2:02:ba:6b:97:b4:ad:57:a2:28:70:87:
         6a:3b:07:26:4b:19:c2:09:18:7f:1d:e3:42:8f:d4:a9:db:d7:
         80:8b:a5:c8:30:fd:bf:ee:59:c2:c8:fa:86:a6:96:01:12:f2:
         4b:10:cf:78:4e:40:27:f7:d6:f8:68:d3:e0:01:22:5d:ca:bd:
         ee:01:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----