Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313033353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230393a313033353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          X6GmlHpf/0oOOk1f/T3q/Ia67eYTqJIWz9HLEtzkK1I=
Subject key identifier:   48:4E:99:E8:89:7C:A1:A8:74:81:53:58:B5:DA:19:98:55:7B:F9:00
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2AFC7B5240CCDAA836DCEE7635E53B5DB56C961D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313033353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 09 Feb 2022 10:35:01 +0000
ROA not before:           Wed 09 Feb 2022 10:30:01 +0000
ROA not after:            Wed 08 Feb 2023 10:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:209:1035::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fc:7b:52:40:cc:da:a8:36:dc:ee:76:35:e5:3b:5d:b5:6c:96:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  9 10:30:01 2022 GMT
            Not After : Feb  8 10:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:37:ff:65:c3:51:32:f0:c4:88:88:59:03:
                    75:d5:d7:e0:b4:04:f2:cb:13:02:1b:28:3f:e1:85:
                    4b:80:98:ea:7c:d3:de:4f:91:e5:72:11:53:cf:f2:
                    34:ef:98:0b:3a:a4:6b:d5:7b:1e:bb:56:46:0c:4f:
                    68:59:36:fe:bc:89:aa:42:eb:a8:a5:60:fa:b8:6b:
                    d0:ed:ce:09:3a:08:b6:b2:5c:bb:d7:11:fa:d7:c0:
                    63:ea:a8:08:09:0b:76:3b:75:4f:f9:17:ec:ec:fc:
                    40:94:ba:ae:9b:ab:27:97:3f:04:cf:1b:80:5f:73:
                    af:a0:c2:1c:f6:a7:aa:e8:7f:df:4f:68:ff:7a:bb:
                    3b:31:e6:1c:3e:8f:e4:05:63:24:41:ba:98:55:10:
                    cb:fa:9c:61:89:a4:94:10:f7:e9:0a:bb:81:77:c7:
                    71:64:52:78:3d:72:c8:32:a2:2b:b8:d9:15:a9:47:
                    03:6e:c3:2b:9e:87:68:eb:2a:8d:d1:e9:75:9b:96:
                    d4:38:97:e2:50:80:36:87:ea:ec:e7:11:ed:75:dc:
                    4c:65:89:c1:22:49:8a:63:0b:60:b2:63:bc:fc:2f:
                    43:15:94:e7:54:59:98:ea:74:bb:62:09:6c:2d:5e:
                    80:76:b9:59:fa:8a:84:19:39:1a:c6:72:ee:9e:b1:
                    49:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4E:99:E8:89:7C:A1:A8:74:81:53:58:B5:DA:19:98:55:7B:F9:00
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313033353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:209:1035::/80

    Signature Algorithm: sha256WithRSAEncryption
         61:f8:bc:3d:35:3b:42:9a:54:99:91:3e:70:5b:77:54:f8:35:
         b2:02:3c:1b:bb:48:bb:69:0e:43:49:7a:a2:61:4f:00:ff:ec:
         35:0d:53:03:77:c9:fc:ad:97:9a:07:e0:88:f3:c3:8f:6e:61:
         10:4c:d5:7f:e4:19:7b:ba:cd:62:87:bd:59:e7:58:da:2b:c0:
         cb:2a:39:b5:21:15:ca:b4:60:c7:dc:11:f7:ad:0d:60:81:23:
         da:8a:2c:c5:d4:d0:c0:4f:08:4e:a3:09:8c:42:6f:68:95:3d:
         1e:d1:9c:45:1a:30:91:34:c4:c6:3a:a6:7c:2a:6c:70:01:ab:
         fe:f1:c9:2c:32:1b:25:12:45:28:36:93:3d:30:b9:c8:68:aa:
         d6:f6:be:a0:d8:68:16:1b:ca:3c:7c:26:10:c2:5c:4c:bc:d4:
         e8:da:75:e4:6e:2e:a6:c4:dc:3a:75:26:d9:12:6a:18:5f:95:
         da:4b:25:a4:cd:ee:36:91:c6:b9:e3:d1:8f:b2:b9:6f:3b:79:
         77:7f:b7:27:07:43:fa:b1:c6:04:43:f6:b4:5d:88:6a:b3:b5:
         42:7e:44:d5:44:0e:14:17:e9:55:57:e4:00:3d:70:d5:3f:b3:
         a2:da:b7:28:6e:77:dd:b5:c3:e9:8f:c1:1f:c6:d8:36:67:24:
         83:ff:91:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----