Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313530303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230393a313530303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          rq9mUnCs9DQxiFBSp43uf08pnWzyZuNlcuK8CS8igxY=
Subject key identifier:   54:2E:AB:58:09:57:2B:BD:CB:47:AE:8E:56:CC:56:55:62:66:18:A8
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3424F878C5B1565AF977B13E7A0BD1BF9C11E58C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313530303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 09 Feb 2022 15:00:01 +0000
ROA not before:           Wed 09 Feb 2022 14:55:01 +0000
ROA not after:            Wed 08 Feb 2023 15:00:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:209:1500::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:24:f8:78:c5:b1:56:5a:f9:77:b1:3e:7a:0b:d1:bf:9c:11:e5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  9 14:55:01 2022 GMT
            Not After : Feb  8 15:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a4:9e:0e:97:c1:a0:9b:53:5c:89:07:1c:23:
                    8b:07:04:44:3e:b2:3f:07:88:c5:30:53:35:9a:8c:
                    a3:1f:d2:62:41:49:68:52:4a:4d:47:1c:e1:8b:69:
                    e3:d4:f3:df:7f:c7:e5:5c:01:b2:0d:f7:e1:82:7f:
                    e2:87:35:00:d3:16:b3:3a:c1:4c:2c:95:ff:71:3b:
                    a8:99:4a:70:e4:46:d4:dc:38:b5:05:75:b7:5c:2c:
                    af:e3:ce:70:0d:8b:83:52:62:ce:24:07:43:99:aa:
                    ad:4d:71:4c:1f:b9:1e:71:92:2b:4d:c1:03:75:18:
                    11:4e:f1:2f:0b:3d:96:b5:21:4e:4c:e6:11:99:4b:
                    9d:b5:e3:c5:b4:4d:3d:a5:61:cc:bc:bb:df:97:09:
                    aa:51:69:88:cc:fe:12:a9:84:05:c8:47:a2:c9:a8:
                    a1:c8:76:41:7c:b7:c8:71:d3:0e:c4:31:bb:a9:29:
                    16:5b:02:1c:45:5a:d9:86:b7:ef:28:78:4a:64:4b:
                    83:d5:8b:3d:4c:ef:40:61:bf:d8:c5:e4:7a:89:a0:
                    25:b2:cf:41:17:5d:14:6c:39:6a:c8:91:29:d3:3d:
                    f8:9c:5a:b7:5c:85:16:31:ac:37:ad:a9:95:2b:e0:
                    1c:62:ee:7e:a6:42:3a:a0:4a:65:d6:06:78:5d:67:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2E:AB:58:09:57:2B:BD:CB:47:AE:8E:56:CC:56:55:62:66:18:A8
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313530303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:209:1500::/80

    Signature Algorithm: sha256WithRSAEncryption
         c6:a8:54:4b:51:3b:31:ae:dc:80:30:f0:46:02:84:22:ac:79:
         16:0f:43:52:5b:9f:da:78:bf:58:f2:0c:3e:ce:e8:61:7d:b3:
         bf:a8:de:9b:e8:ba:0c:db:bb:eb:1f:e4:01:ee:e7:60:b8:8b:
         e4:fd:b8:a3:9d:64:76:5b:e7:84:e7:37:41:53:d5:0d:41:36:
         68:94:3d:ee:1c:f3:b8:4f:07:ac:e2:a8:4e:39:e7:53:de:8a:
         65:24:7c:de:39:0f:48:94:02:0b:94:31:82:89:0a:a5:84:5f:
         95:97:0a:eb:53:66:99:b6:91:fc:ff:04:6a:f0:63:72:63:2b:
         ec:fd:da:47:b5:9b:04:f7:77:6a:00:7a:85:af:9b:8e:1f:28:
         40:01:6d:36:78:2d:b2:08:c7:ad:96:4a:31:12:0f:fd:19:87:
         22:3e:4d:34:70:41:0e:be:54:f1:62:96:4f:a2:c2:29:98:d2:
         5a:9f:2e:f5:51:af:46:28:3c:47:8c:3a:e9:fd:f5:55:6e:ce:
         f1:a5:70:dc:3b:67:78:0c:b8:d1:4d:58:1d:57:a3:48:12:12:
         ad:53:28:e7:30:45:ac:05:c5:cd:3e:fe:78:fd:c6:cf:de:a5:
         e0:de:6a:d3:cc:a2:66:40:c5:ae:17:2b:07:db:1e:f6:ef:07:
         c0:6a:6a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----