Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313535353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231303a313535353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          zf9a+L+GxRR36jbSW6vUxzfCybYcKsqreKu09wgqmx0=
Subject key identifier:   E3:2A:17:14:78:7B:6E:D2:DD:F0:7C:C5:DA:A7:A7:87:C3:3B:0E:CB
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1FD0A0546D44D6B9386CB6A08DD1079AF96C8673
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313535353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 10 Feb 2022 15:55:01 +0000
ROA not before:           Thu 10 Feb 2022 15:50:01 +0000
ROA not after:            Thu 09 Feb 2023 15:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:210:1555::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d0:a0:54:6d:44:d6:b9:38:6c:b6:a0:8d:d1:07:9a:f9:6c:86:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 10 15:50:01 2022 GMT
            Not After : Feb  9 15:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:06:28:af:42:d0:50:d6:60:f4:da:2c:a5:
                    d7:a9:89:53:9d:a6:fc:94:a4:17:39:fc:22:48:44:
                    66:48:b1:5e:86:36:85:c9:78:3b:62:35:ac:33:2b:
                    02:13:24:90:7b:27:da:82:05:9d:58:ed:25:9d:ce:
                    3a:5b:83:c3:68:cb:cb:b3:89:0b:78:22:57:d7:2a:
                    e6:0b:b1:06:8d:69:6a:76:ed:9d:95:f0:d8:03:f4:
                    57:58:b9:b6:35:d3:5b:5e:e2:0a:e7:86:3e:7d:9a:
                    7e:a4:b1:db:37:23:98:08:70:a9:bc:79:54:a1:18:
                    7f:97:d5:b0:3d:b9:cd:bf:04:53:6d:5b:2d:16:1b:
                    06:86:b1:87:f3:1b:cb:44:78:e7:bd:68:ab:19:7b:
                    d9:20:cd:5e:eb:09:28:e0:29:5f:90:77:76:44:86:
                    64:b7:74:97:1d:ed:c1:cf:d6:87:5a:07:12:74:c9:
                    c5:2d:3a:91:e3:f4:19:7f:14:36:c9:31:94:ab:3a:
                    ac:cc:6c:1f:a3:06:6b:c6:b6:c2:09:f9:1b:19:53:
                    d0:22:eb:96:60:94:ec:bd:5f:30:48:74:03:0b:3a:
                    13:b8:05:fa:ab:df:aa:b2:95:f4:d6:17:65:f3:15:
                    cb:ea:44:c0:bd:55:46:5f:09:ab:c5:54:fb:c3:ac:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2A:17:14:78:7B:6E:D2:DD:F0:7C:C5:DA:A7:A7:87:C3:3B:0E:CB
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313535353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:210:1555::/80

    Signature Algorithm: sha256WithRSAEncryption
         c0:7e:6a:0d:ec:1b:ef:68:19:95:a7:a2:9a:38:e1:7f:9a:52:
         06:f1:3f:e4:2d:88:6a:1a:d4:42:d6:3e:32:00:21:9a:58:fc:
         d6:12:29:c8:7d:62:72:97:01:bb:e1:0a:27:4e:a9:64:e4:2e:
         44:16:c4:96:09:96:31:4b:23:fa:6d:d4:b4:b9:4b:45:84:03:
         8a:66:3e:73:f5:f6:31:c2:cc:e2:8d:2a:d8:b4:86:6a:4f:bd:
         2a:05:c7:3f:b5:cd:90:5d:e4:39:97:74:51:c9:ad:86:b5:f0:
         17:7c:14:1c:57:2b:4b:0d:38:52:6f:8f:28:e6:e5:d0:b2:41:
         b7:15:0f:39:63:b6:6a:ce:05:a3:66:51:1b:a8:fb:37:11:c7:
         35:93:0f:5c:d9:a9:c0:cb:c5:91:82:44:53:e6:9b:cb:67:4e:
         ac:2f:58:f8:3d:7f:20:bb:f7:d1:07:6b:f1:62:8a:07:7d:ff:
         2c:a4:a7:e6:5b:11:88:41:a4:d8:86:e6:58:a9:f1:7f:b2:1e:
         82:88:44:ba:a1:c5:4e:8a:d9:1e:ff:c3:79:2d:bd:8f:be:d2:
         e2:37:99:0e:ef:bd:a4:ac:00:34:db:12:02:5a:38:bb:bd:08:
         08:48:5d:57:0e:e8:a2:0a:e0:94:11:ee:8b:80:76:b8:7f:32:
         b4:c9:81:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----