Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a3135353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230393a3135353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          EhHEcM2dpsMb+SawEVaaUDvOs4Uypi3d5NkYtCU5g8w=
Subject key identifier:   8F:0D:AE:85:4B:1F:A1:3D:55:0B:F6:17:4E:C1:30:3C:3D:C2:23:97
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       37B0C99C5DB01C32EE571213079D3CA2E67BE1EB
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a3135353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 09 Feb 2022 01:55:01 +0000
ROA not before:           Wed 09 Feb 2022 01:50:01 +0000
ROA not after:            Wed 08 Feb 2023 01:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:209:155::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b0:c9:9c:5d:b0:1c:32:ee:57:12:13:07:9d:3c:a2:e6:7b:e1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  9 01:50:01 2022 GMT
            Not After : Feb  8 01:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f0:65:fa:31:7f:2e:a7:b0:ca:ac:fd:54:7f:
                    0b:69:24:15:1d:f8:e3:16:83:ff:a0:23:54:c7:6e:
                    fe:93:85:f8:bb:12:bf:0d:4b:3f:8b:35:b4:82:e6:
                    38:c0:d7:f8:98:f3:2d:5c:7b:20:24:4a:43:12:87:
                    1b:6b:b0:8e:33:35:5a:e9:6d:57:3f:ef:db:b5:b0:
                    30:98:7a:c9:8e:c9:34:d1:68:15:10:28:f0:f3:12:
                    34:b8:6c:4d:78:4a:7d:d5:90:42:ec:57:b1:69:47:
                    19:6c:8f:0e:0b:cd:61:28:d0:42:eb:06:83:a5:09:
                    2d:dd:90:65:0a:4e:8b:5b:5a:33:ff:09:8c:f1:1b:
                    5c:c5:66:6e:a1:d8:b6:45:aa:43:6b:29:b1:55:70:
                    3b:1e:0e:70:c7:2c:15:cb:89:fb:1e:95:28:40:46:
                    46:14:15:4e:e3:39:fa:89:6a:e0:d5:80:32:a4:5e:
                    a3:d3:9a:bd:a9:8d:e9:72:9f:4c:5a:ba:4d:72:d7:
                    6c:a3:37:49:50:e7:61:65:d4:7d:0f:31:f5:20:d4:
                    ff:17:c3:d8:89:3b:21:68:f2:4e:bc:d9:2e:d5:45:
                    85:06:ef:75:91:47:f8:d9:1d:a3:40:57:b0:c9:33:
                    fc:d1:63:4b:21:9d:cd:cd:46:78:0f:02:0d:f6:9f:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0D:AE:85:4B:1F:A1:3D:55:0B:F6:17:4E:C1:30:3C:3D:C2:23:97
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a3135353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:209:155::/80

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:88:c3:23:3f:16:1a:16:22:0c:18:1c:54:7f:0a:9b:8e:
         04:fc:a8:b0:b0:47:97:38:74:e1:bc:ba:e2:2f:8a:0d:6e:b5:
         c6:cb:ff:61:5d:7b:2b:bb:ae:68:a8:fd:a1:63:5e:45:48:3d:
         72:a2:96:eb:0a:b2:e9:f2:35:6c:86:fc:74:6e:0e:5f:83:53:
         0d:15:06:26:90:5a:6b:54:93:42:a5:73:a3:29:6e:3b:03:ad:
         c7:f7:6f:f0:3c:bb:11:a8:1c:aa:e7:0f:6c:e4:30:d9:9a:70:
         23:5c:d8:f1:92:c4:e3:a1:7b:fe:d3:d1:26:f3:ea:9d:c6:d0:
         24:7d:ff:34:e8:ea:bd:75:46:cb:9a:2b:93:46:06:df:78:3e:
         4c:9a:2a:69:d3:d5:69:d9:55:5f:21:7d:d0:66:c1:5c:bf:6c:
         77:e1:7b:32:7e:6a:25:31:c3:d4:b1:fa:e6:a7:8f:2e:4c:57:
         e4:63:df:c3:b8:9a:57:f4:c2:47:ec:f1:e3:7e:e9:09:36:01:
         30:d4:fa:9d:99:3d:4b:46:88:36:2f:94:fc:21:ba:d4:57:2d:
         11:9d:28:0c:53:2f:56:18:e1:bc:fa:07:71:fa:f8:5a:38:b9:
         cc:f8:bc:10:19:06:cc:36:d9:1e:ea:b0:cf:f4:3d:90:53:58:
         b2:79:b6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----