Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313935353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230393a313935353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          vmF1JgygiV/xx9qAuW4M90OSLCr94OTAy/R3GLwUpx8=
Subject key identifier:   65:20:53:E0:38:65:AF:1C:C2:A0:9C:23:5E:9A:06:2F:1C:C6:CB:7A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7BCB7129C733894E1F6464E9EB1D3BB9D2DDD865
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313935353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 09 Feb 2022 19:55:01 +0000
ROA not before:           Wed 09 Feb 2022 19:50:01 +0000
ROA not after:            Wed 08 Feb 2023 19:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:209:1955::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cb:71:29:c7:33:89:4e:1f:64:64:e9:eb:1d:3b:b9:d2:dd:d8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  9 19:50:01 2022 GMT
            Not After : Feb  8 19:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:72:02:a6:89:36:09:f6:f4:25:60:dd:d5:
                    6b:f3:19:5e:6a:5c:74:87:fe:2d:ac:5f:6f:e1:f1:
                    02:ca:29:b5:32:da:df:c2:66:87:38:a8:dd:b2:ee:
                    80:83:0a:8c:50:50:e1:dc:48:43:93:79:89:40:37:
                    08:5e:41:08:ca:a6:aa:0a:45:56:98:6b:6a:79:aa:
                    94:93:5a:fd:e1:5a:ac:53:2d:fb:a7:fa:95:9d:6a:
                    10:4d:8b:71:95:54:bd:70:b9:2b:1b:f5:42:4c:33:
                    be:e5:48:46:b4:d6:7b:b7:2b:74:7f:18:bc:17:e5:
                    b8:53:3e:8e:f4:94:8a:bd:70:08:d3:09:54:32:ec:
                    6c:55:a6:c1:8e:26:93:88:68:10:b5:c2:ad:ba:c6:
                    03:18:1a:dc:78:4d:07:22:fb:2b:82:5d:c0:ee:d7:
                    c7:9e:6b:3f:61:78:3c:78:24:da:54:83:3a:b8:ec:
                    21:f3:c0:19:01:cb:f1:e0:01:2d:90:94:03:47:70:
                    8d:09:9b:fe:ea:bf:d9:c8:ce:4f:ed:1c:57:a7:1f:
                    dc:e4:08:f1:a0:b7:df:0a:9b:f4:2d:ab:98:ee:2b:
                    e8:6b:62:d3:75:cb:e5:a6:fa:11:62:1e:4a:8e:c4:
                    8e:74:93:e0:13:d6:f1:e8:0c:7a:61:5f:54:70:68:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:20:53:E0:38:65:AF:1C:C2:A0:9C:23:5E:9A:06:2F:1C:C6:CB:7A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313935353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:209:1955::/80

    Signature Algorithm: sha256WithRSAEncryption
         53:26:e3:79:31:1e:49:c8:4f:be:a0:1d:e9:0c:3e:32:64:a6:
         7a:88:d7:0b:07:90:b6:c8:7c:df:d9:f8:48:80:c5:79:a6:59:
         be:6c:d8:7a:3a:d3:39:69:ef:cd:a4:ff:5e:4d:1d:e5:8c:68:
         91:1d:3b:33:f3:7b:b4:ee:6d:d3:19:80:87:4d:89:71:5e:67:
         6e:40:f8:41:bf:11:1e:a8:44:c6:d7:c2:5f:3e:89:84:9b:02:
         f2:f2:55:47:b2:72:23:c7:fd:62:90:e8:b4:bb:3b:d5:b0:bc:
         02:ff:4f:27:23:8c:ee:cc:c5:5f:bd:c8:6b:23:4d:78:ff:a2:
         f6:08:4d:8a:a3:c9:e9:a4:a4:7e:3f:d0:df:ec:85:95:30:eb:
         b9:cf:45:c7:db:cd:ee:e5:45:34:5e:8f:7a:7a:57:0d:3e:7a:
         2d:0c:53:63:87:94:09:f9:de:b5:7f:11:52:e8:13:98:4d:8e:
         33:1a:dd:0d:39:42:62:b8:56:fd:da:28:61:39:e5:4b:09:c6:
         bb:02:42:a1:f7:8d:98:53:c1:6c:22:29:7b:6b:32:7d:c0:01:
         0a:e3:48:52:62:81:2d:cb:29:d6:fd:f9:9a:5c:15:3a:ff:50:
         ce:c6:2f:a7:06:1b:41:13:8a:04:b4:be:9d:bd:94:6e:79:c6:
         1c:f5:f6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----