Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313333353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231303a313333353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          XoKF3/7VNYtGsQMTO5LWdn8OCD8Bqn1FU8fk1LOsbH8=
Subject key identifier:   A6:19:C1:FF:90:4F:5C:BC:46:F6:27:94:71:3C:9B:08:99:71:72:07
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       67A8F7D51A35EE3620850A905BE8524A62B100DF
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313333353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 10 Feb 2022 13:35:01 +0000
ROA not before:           Thu 10 Feb 2022 13:30:01 +0000
ROA not after:            Thu 09 Feb 2023 13:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:210:1335::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a8:f7:d5:1a:35:ee:36:20:85:0a:90:5b:e8:52:4a:62:b1:00:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 10 13:30:01 2022 GMT
            Not After : Feb  9 13:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:b7:3c:4c:96:c9:cd:83:fe:ee:cd:3a:df:
                    9c:48:e7:5b:9a:4f:8f:bc:a7:f1:df:f0:86:ea:e1:
                    6c:6f:0e:b6:c2:26:6e:84:63:81:14:98:cf:4e:04:
                    9f:53:6c:e1:90:d2:dc:aa:92:4c:90:64:6e:02:ce:
                    6d:02:90:f7:57:71:71:c9:31:11:1d:4f:b6:1f:3a:
                    c9:05:db:9b:6a:73:4b:5e:74:a1:59:b4:ca:4d:83:
                    0c:e2:20:c9:f6:29:6a:27:e0:45:c8:05:ea:5a:cc:
                    c6:94:36:2d:fb:0a:55:d6:8c:4d:c4:0a:33:77:46:
                    2a:6c:ac:e2:68:82:30:e9:7c:ee:0e:2a:a2:53:b6:
                    ed:34:a7:9c:83:e2:9e:7b:84:38:9a:7a:ae:33:9d:
                    f0:33:9e:cc:ed:c8:6b:69:eb:3c:c2:4e:87:c4:b2:
                    e6:04:c8:5d:f1:df:54:e5:5a:cc:fa:f2:2c:77:14:
                    c0:d4:28:23:a2:25:e7:41:c3:a7:f6:4f:d1:64:c4:
                    59:eb:a5:d9:77:f8:7f:31:96:ad:f5:d4:bb:76:74:
                    33:1d:e3:f0:0a:6e:c6:bc:9d:83:5b:70:38:bf:1b:
                    fe:db:71:af:7c:5f:c0:b0:1a:c9:a5:df:19:04:8d:
                    45:72:3f:91:ec:6d:2d:a5:ad:b1:00:b0:7d:1b:78:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:19:C1:FF:90:4F:5C:BC:46:F6:27:94:71:3C:9B:08:99:71:72:07
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313333353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:210:1335::/80

    Signature Algorithm: sha256WithRSAEncryption
         cd:0b:63:de:64:0f:ee:7a:94:47:8d:b4:fc:b5:c2:88:53:c9:
         47:88:92:7f:94:c7:3b:2d:cb:79:d7:c7:d2:64:c3:7f:e8:2f:
         a5:5b:11:33:6d:58:09:06:82:f9:27:27:87:fd:fb:66:bd:48:
         c2:13:f2:f6:25:4f:3a:15:90:15:73:74:e4:de:db:e3:77:b2:
         e6:c3:16:99:25:6e:36:91:d2:ee:32:16:91:c9:d9:13:05:d5:
         4f:e4:47:4f:2f:3b:c3:0c:1b:a1:81:7c:a1:55:4c:ef:a1:fd:
         a9:e6:25:fc:d7:ac:bb:9d:6e:fb:8b:e2:d6:c4:8d:51:c9:17:
         87:65:8e:54:6f:cc:a9:2e:af:80:ba:76:d2:43:19:8d:69:c9:
         20:05:10:f7:a5:6a:61:96:95:b8:06:e6:b8:60:fe:ea:2e:50:
         f0:48:9e:51:08:5a:0b:b2:dc:6a:81:62:18:ff:62:1c:9e:1e:
         44:ba:32:7b:21:76:93:04:4b:24:7b:24:4e:db:cf:da:35:c9:
         75:46:97:39:b9:2a:b6:55:ca:9a:40:74:02:57:30:b6:70:0f:
         1a:34:fb:42:25:35:27:c2:66:cf:37:7b:c1:c3:e9:18:c1:32:
         3f:84:50:08:47:91:61:d3:45:9f:38:aa:d3:73:28:45:4f:88:
         c2:aa:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----