Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313234353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230393a313234353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Y92aEKduhRNZH4G9u4HNYqmA7lpgFUgiUOiEeGwHmvk=
Subject key identifier:   3E:F4:DD:9E:01:A3:E8:E8:F5:E4:F3:7A:45:30:6D:AF:61:03:A8:15
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4C50267A7FDB6F15DA44FD2AC4294AD19837A5B5
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313234353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 09 Feb 2022 12:45:01 +0000
ROA not before:           Wed 09 Feb 2022 12:40:01 +0000
ROA not after:            Wed 08 Feb 2023 12:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:209:1245::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:50:26:7a:7f:db:6f:15:da:44:fd:2a:c4:29:4a:d1:98:37:a5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  9 12:40:01 2022 GMT
            Not After : Feb  8 12:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:38:57:65:66:be:7f:2f:8f:60:c5:ba:c0:
                    0d:7e:32:ee:12:6d:39:2f:a7:09:e0:c0:57:e9:cb:
                    3f:c2:fb:50:2a:c1:39:c8:ce:b9:4a:91:96:95:91:
                    a6:c1:f7:47:d4:e1:99:34:e4:7b:77:2e:e3:fd:7d:
                    e0:f4:bd:b5:b9:c4:00:b3:b6:67:ff:a5:ad:27:69:
                    27:37:2b:32:90:87:e4:2d:a3:2b:09:d0:16:75:73:
                    16:5d:83:3b:d4:18:45:fa:a6:59:54:da:ff:ff:20:
                    d4:9f:09:5e:ab:47:b0:1f:58:9e:d5:02:cf:83:d6:
                    38:b5:c0:dc:c9:bf:51:bd:fb:89:29:8e:19:b0:aa:
                    ae:dd:d2:27:44:74:1c:eb:24:f6:51:a4:d7:30:13:
                    80:1e:31:31:e1:a4:81:09:6d:64:f4:29:53:72:8b:
                    6e:26:df:56:b8:cf:2f:45:45:c2:7d:47:d4:0a:18:
                    f2:20:4e:88:85:77:91:93:0f:14:cb:80:57:70:17:
                    72:e3:c7:8b:3d:88:f3:91:d9:ad:30:e1:57:a3:c5:
                    a7:c2:36:84:33:83:f4:78:14:90:25:a8:86:ff:8f:
                    e4:a3:7e:6b:8e:e3:0a:d4:b7:3f:be:f7:93:f2:ec:
                    9d:1c:a2:81:83:ad:37:42:cc:f6:7e:9a:97:58:89:
                    dd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F4:DD:9E:01:A3:E8:E8:F5:E4:F3:7A:45:30:6D:AF:61:03:A8:15
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313234353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:209:1245::/80

    Signature Algorithm: sha256WithRSAEncryption
         49:29:25:49:9c:a2:62:09:02:d2:dc:17:c6:e7:de:b4:c7:d8:
         b5:8e:c8:6a:cf:b5:81:8a:5e:8e:3b:1f:7c:3c:db:78:3d:cc:
         a4:44:83:2c:80:49:da:3f:fa:d7:0c:fe:52:2f:1c:79:4b:bd:
         ac:c5:a5:f0:ba:c5:d1:ed:71:a5:c1:46:1e:52:39:6d:c5:7a:
         97:2a:94:12:e1:b1:9b:1f:fc:2d:05:76:0c:bd:37:43:bf:0a:
         08:28:ac:66:48:53:87:a8:c0:9c:06:45:e3:a3:48:d8:9b:e8:
         23:7d:66:af:67:44:a2:98:db:9f:40:37:d3:c8:40:99:9a:5c:
         4c:4e:a4:ed:be:5b:fe:6b:8c:af:ef:d7:4b:e3:f1:78:4a:9e:
         f0:3e:2a:b9:e4:d8:c9:7f:c8:0b:56:82:16:7a:f5:96:b2:00:
         65:3c:02:bc:19:b8:84:9d:a3:6a:8c:59:0c:3e:08:21:12:18:
         37:04:21:f4:57:12:b0:e0:8c:3e:16:b8:d7:27:17:a9:24:a5:
         c5:cb:6a:b4:cb:c8:a4:21:79:ae:d9:78:05:e3:da:05:af:d4:
         54:13:a1:04:78:1e:e4:96:76:8a:74:19:2c:81:d8:d8:b4:8a:
         dd:20:64:b6:1c:8e:e6:33:42:e7:07:56:51:76:3b:a6:d2:07:
         59:64:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----