Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313435353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230393a313435353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /JYCZed55FFfoJbsrvsewTjGK6OUmLxpRGtSlzAj0/Y=
Subject key identifier:   FD:AA:DF:58:03:D7:15:AC:2F:17:93:5A:6D:E6:E2:62:47:B3:6B:F1
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       500E4A30AE21D6146FCD5A0A7B698E723911E534
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313435353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 09 Feb 2022 14:55:02 +0000
ROA not before:           Wed 09 Feb 2022 14:50:02 +0000
ROA not after:            Wed 08 Feb 2023 14:55:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:209:1455::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0e:4a:30:ae:21:d6:14:6f:cd:5a:0a:7b:69:8e:72:39:11:e5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  9 14:50:02 2022 GMT
            Not After : Feb  8 14:55:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:85:02:6b:d8:b2:c8:fc:02:60:9e:53:f6:61:
                    ee:dd:0b:fd:13:9b:91:47:d5:69:71:63:73:1c:01:
                    90:6d:2a:95:6c:2e:67:70:57:8c:d2:c7:53:8d:25:
                    ae:3f:2a:9c:09:30:86:af:09:26:d4:19:5a:8d:69:
                    56:e7:d2:5a:af:fa:f3:7f:d3:5c:8d:04:8d:f1:58:
                    07:6b:1d:5e:c1:1b:eb:4d:dd:f8:d7:4a:5a:a9:15:
                    a9:23:bb:53:87:d3:a8:6c:0c:0a:24:b8:c6:98:73:
                    82:ab:db:ed:9c:e4:4b:8d:49:16:35:b6:54:8b:c9:
                    7d:56:50:5a:cc:6c:ca:c8:4d:ff:43:41:41:a9:17:
                    46:a7:9a:de:04:d2:13:bd:5b:5e:16:aa:b8:19:c4:
                    13:62:10:1d:87:32:8a:c2:41:13:a8:06:3d:d1:d4:
                    40:51:28:3a:a3:22:02:dd:86:bf:dc:1c:ab:a8:01:
                    19:23:f7:00:af:f2:a8:ca:83:64:73:75:f1:c4:f0:
                    05:0e:c8:18:95:74:5c:56:87:b1:92:48:75:08:93:
                    e3:67:1e:b8:40:3f:1b:5c:e4:f9:a9:97:da:ad:b5:
                    5d:dd:9a:61:b0:c5:ad:36:43:5e:cf:88:24:38:24:
                    91:27:00:a9:63:ae:13:62:51:37:18:6c:43:08:39:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AA:DF:58:03:D7:15:AC:2F:17:93:5A:6D:E6:E2:62:47:B3:6B:F1
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313435353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:209:1455::/80

    Signature Algorithm: sha256WithRSAEncryption
         05:45:8f:66:d8:e1:0c:a0:f1:ac:cf:1d:fb:ac:fd:6b:7e:db:
         ec:7c:2a:6b:64:ca:fa:80:fe:4b:c3:a6:60:ac:f4:e8:2a:07:
         47:9a:cc:c6:4a:a6:e3:86:80:4e:28:55:e4:53:a8:a3:71:22:
         85:64:b8:66:fd:a4:dd:1b:d8:39:dc:56:52:1c:6d:f7:15:82:
         ab:fa:e7:07:5a:45:f2:81:3c:b7:16:d9:bb:ef:88:b6:98:31:
         07:7b:a3:dd:b0:1f:54:26:db:06:d7:f8:00:e3:84:04:08:71:
         04:8f:f1:d7:33:a1:62:3c:90:23:0a:10:56:d8:17:82:f1:cf:
         e1:2e:a5:39:4e:29:c5:e7:9c:10:ef:aa:d6:54:b7:13:de:42:
         cf:59:11:85:ce:fa:f2:49:e7:1e:4c:b6:f3:8e:6f:dd:b7:b4:
         6f:0b:78:7a:8d:e6:93:9e:27:e0:ff:36:f6:4f:6b:92:e0:0f:
         b4:51:7f:50:14:b1:a4:d2:ca:c2:f5:1a:81:94:ce:aa:40:f3:
         97:3e:05:81:7d:56:5c:e0:10:c3:a4:f6:5f:4b:8e:7d:8b:6a:
         63:0f:6c:68:ac:b4:3d:74:10:1e:ca:3c:5a:0f:c8:ed:6d:e3:
         bc:9e:d5:bd:87:c2:5d:7e:fb:11:26:b2:2b:9f:f1:15:e8:71:
         f7:53:e9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----