Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a3832353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230393a3832353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          YczgSo4+iGbDro48puyks9pp29QWUbJTFzeI1287yXI=
Subject key identifier:   BB:07:5D:6F:3A:DA:B6:F1:6A:28:C5:35:42:5C:FE:CC:4A:3E:E4:86
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4EE756948A98B37ECC8497014514F2FA75AE5F4A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a3832353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 09 Feb 2022 08:25:02 +0000
ROA not before:           Wed 09 Feb 2022 08:20:02 +0000
ROA not after:            Wed 08 Feb 2023 08:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:209:825::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e7:56:94:8a:98:b3:7e:cc:84:97:01:45:14:f2:fa:75:ae:5f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  9 08:20:02 2022 GMT
            Not After : Feb  8 08:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:62:55:03:5a:4f:ca:a9:c1:fe:1c:14:d1:f6:
                    69:99:fa:fa:9b:bb:a9:cc:d8:47:c9:7d:80:61:64:
                    42:11:7e:ff:9e:a3:6b:a2:bc:16:7d:13:f2:dd:dd:
                    26:fe:09:a6:56:44:5e:8d:9d:14:fd:c9:30:09:dc:
                    d4:1e:91:8a:34:d8:1a:d6:dd:69:e5:55:3a:68:72:
                    6a:74:b3:40:21:d7:53:96:63:92:17:4a:bb:1d:25:
                    61:11:36:4f:d1:48:f3:12:94:78:16:06:bb:62:5c:
                    20:84:a5:f9:1a:46:2d:be:e0:2c:a4:37:07:93:e8:
                    96:9b:23:20:6f:6f:65:ef:e0:5f:d5:83:8c:9e:b3:
                    e4:87:0c:01:7e:09:01:2a:3f:48:05:c0:79:62:44:
                    c9:e3:8c:22:37:7f:8d:d8:99:8b:d4:6b:b8:7f:3b:
                    40:95:ec:16:cd:db:2f:c8:6f:ac:67:4e:81:44:58:
                    50:97:81:e9:64:74:06:dc:a2:c4:a7:aa:0a:e2:50:
                    cc:ca:78:49:2a:ce:97:54:53:fc:b5:ed:72:36:0e:
                    10:a5:bc:4a:cf:87:8b:26:df:27:6b:d1:6a:5a:e1:
                    49:cc:98:08:93:58:37:e1:81:a6:d5:14:30:8b:10:
                    15:dc:53:e0:f4:39:7f:90:43:88:35:33:cd:73:ab:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:07:5D:6F:3A:DA:B6:F1:6A:28:C5:35:42:5C:FE:CC:4A:3E:E4:86
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a3832353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:209:825::/80

    Signature Algorithm: sha256WithRSAEncryption
         2a:45:f8:dc:ab:da:7a:ee:55:54:78:56:4f:63:44:65:fd:a1:
         20:ce:1f:ef:eb:bd:df:0d:a8:5c:3a:4b:af:a3:dc:0c:ed:c4:
         f1:02:94:34:49:e5:c6:e4:0d:7a:99:e1:10:ab:2a:8e:8c:f0:
         5f:d8:f1:33:bf:a8:62:14:36:af:26:7d:d8:e2:2f:c1:4e:19:
         35:20:f1:cf:c7:36:ec:b3:87:a7:cd:2b:06:94:41:c5:24:7f:
         b4:40:8f:1c:05:6d:05:4b:4a:f9:a6:90:e9:7a:70:ee:ee:d1:
         e5:f9:4f:98:16:5e:fa:f6:10:6d:e1:4d:4e:f1:1f:56:17:38:
         ef:22:0e:f6:52:39:a9:05:76:82:1c:9b:8e:af:c9:2f:c5:0b:
         16:64:60:4f:27:b2:03:45:45:4b:c4:40:51:7e:c1:4f:df:e7:
         b6:b6:88:49:f6:cc:a7:e0:92:ee:a0:df:7f:e5:7e:0c:d9:85:
         97:50:21:22:a4:a6:de:d3:64:45:af:70:54:12:7e:1e:16:db:
         40:43:d5:72:23:88:64:fe:5a:1e:2f:df:e1:de:61:29:8d:20:
         7c:8e:48:be:39:06:55:b9:c8:9a:b8:c9:1a:43:89:fa:12:87:
         a0:06:56:0f:c3:42:4f:f5:2c:86:87:44:f3:68:dd:a0:2b:c9:
         d1:85:40:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----