Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a3134353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231303a3134353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          wV/jmPda34ZMLs+Z70+qVXmHW7Fr7EMhXjXGxssuLCw=
Subject key identifier:   97:6E:01:7A:A7:50:F0:14:2A:57:D5:96:0D:C9:A2:29:AA:A1:76:F1
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5A91834DB24C7AA55B3728093BD3CA7BADA3D463
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a3134353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 10 Feb 2022 01:45:01 +0000
ROA not before:           Thu 10 Feb 2022 01:40:01 +0000
ROA not after:            Thu 09 Feb 2023 01:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:210:145::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:91:83:4d:b2:4c:7a:a5:5b:37:28:09:3b:d3:ca:7b:ad:a3:d4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 10 01:40:01 2022 GMT
            Not After : Feb  9 01:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a4:59:89:a8:af:ab:0b:02:52:44:01:97:07:
                    7b:3b:77:7c:97:4b:df:0f:9e:95:10:14:08:a2:1b:
                    88:80:99:c8:b0:b8:a6:dd:98:cf:bb:66:2e:ef:4b:
                    af:de:82:39:b8:42:1e:7b:d2:f7:6e:d6:dd:8f:eb:
                    68:01:c4:4f:87:36:02:5c:48:ff:2c:b9:c9:58:ad:
                    ba:31:5f:5f:12:90:9e:69:b9:54:3e:e5:0d:07:f8:
                    9f:9c:3d:d0:89:e7:ab:6d:f4:f8:72:38:0b:2a:9a:
                    f7:bc:d3:21:25:4d:38:fc:22:33:14:6e:37:d1:85:
                    b6:8e:c9:3e:31:ce:16:3d:24:b6:70:ca:6c:07:f6:
                    e6:e1:5b:79:e5:e9:b5:8e:e5:0e:dc:40:a7:cb:7d:
                    d7:ff:e0:7d:43:9d:49:7f:0e:c2:eb:cf:94:90:0b:
                    7d:05:ce:46:32:15:0a:f3:ec:ea:79:ec:90:37:bb:
                    59:40:7d:0d:c5:41:d6:ec:79:b1:91:52:8a:14:22:
                    f7:a1:2b:c1:29:c9:12:23:4f:62:ab:7a:63:77:84:
                    ac:64:2f:8a:25:f7:12:84:41:71:60:93:f5:a2:89:
                    2c:8e:26:06:8e:96:7f:e1:41:62:df:57:0e:f6:da:
                    85:90:4c:fb:bc:89:a9:50:76:3f:ed:b8:97:3f:01:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6E:01:7A:A7:50:F0:14:2A:57:D5:96:0D:C9:A2:29:AA:A1:76:F1
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a3134353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:210:145::/80

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:7e:f7:d6:45:64:07:e5:41:1b:a0:0d:f2:6c:f4:c4:3f:
         24:6f:8b:51:17:ea:a7:92:04:7c:44:d2:af:7f:30:33:d8:e4:
         77:f3:06:d5:8d:26:ec:5c:1c:e7:c4:8d:c7:df:56:69:91:72:
         99:52:8f:fb:0d:13:a5:d5:5a:43:fe:04:30:ae:33:a8:69:0a:
         44:9d:eb:e9:2c:f4:38:4a:d9:1a:f7:9f:21:ec:27:98:fe:02:
         63:82:74:e3:d7:03:ec:81:5c:b2:f4:6d:bd:c3:4d:7d:ad:fb:
         9b:a5:d2:c1:fd:a1:0f:f3:80:3c:4b:79:27:5e:f3:28:c5:30:
         22:95:c7:49:db:f9:95:fc:d9:61:75:69:f1:60:d3:84:93:09:
         94:87:f4:d2:2f:44:72:fd:1c:67:bb:6e:3e:e9:c7:5f:81:77:
         df:66:dd:fd:7d:4a:a7:ee:72:07:b8:e5:f9:ff:10:b4:bc:59:
         6f:af:74:ec:95:7e:e5:09:f1:d1:08:77:88:d0:04:e0:f1:0a:
         69:14:a6:32:16:84:9e:05:12:a4:75:5d:ee:43:9b:27:1f:66:
         ad:56:53:0d:fe:d5:12:a0:e2:3f:7f:0e:3d:1d:5b:d1:95:45:
         61:af:da:c7:03:b4:68:02:22:5e:09:4f:cc:3a:c0:c4:fe:e2:
         a4:5b:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----