Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313735353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231303a313735353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          iqvFm3baHlvcXa7zE/zC7acgHUjVijp9dYSDZXlMrQY=
Subject key identifier:   D3:47:E8:1E:5B:AF:8A:57:9B:A6:E3:95:47:CE:C8:23:AB:E3:E8:D9
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4E20975C3DFE0EECABE810E4B74502AC69198AD0
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313735353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 10 Feb 2022 17:55:01 +0000
ROA not before:           Thu 10 Feb 2022 17:50:01 +0000
ROA not after:            Thu 09 Feb 2023 17:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:210:1755::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:20:97:5c:3d:fe:0e:ec:ab:e8:10:e4:b7:45:02:ac:69:19:8a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 10 17:50:01 2022 GMT
            Not After : Feb  9 17:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:a0:55:b4:0e:38:43:eb:a1:4d:7a:31:14:
                    7d:75:c9:7f:ba:25:64:40:ea:89:d1:3d:75:0d:e5:
                    00:0c:80:fb:cb:6c:4e:e7:de:f0:72:76:cc:41:2b:
                    99:59:ae:cc:ee:59:98:a9:fa:dc:53:20:a2:ba:13:
                    9c:1b:f1:57:04:ec:a1:f9:96:16:33:57:5b:4c:a9:
                    5a:20:ea:6a:a1:3b:f8:c3:eb:bd:8a:17:00:c8:20:
                    d3:56:66:03:17:55:0f:58:59:93:bb:5f:dd:5c:37:
                    91:60:47:21:1e:54:61:67:2a:e3:3f:6f:56:da:1a:
                    c1:73:98:a5:1e:8a:49:e8:7e:f9:4a:47:8e:b9:c4:
                    d5:af:ee:4d:f3:fb:d4:43:b4:c0:de:c4:47:61:e2:
                    b5:ab:75:11:a7:96:b7:86:f3:8e:a2:54:62:0d:c9:
                    bc:c1:c6:55:ea:ab:c9:21:d3:bb:67:68:a7:9d:3f:
                    5a:08:63:a8:0c:8a:18:dc:74:97:a0:3e:31:9c:bb:
                    33:89:67:65:6b:fd:09:d9:15:15:2b:98:42:4e:46:
                    23:01:3a:60:fd:f6:75:8b:b9:64:3e:ab:69:70:0a:
                    90:df:3c:6a:7b:9a:23:c5:00:61:59:3c:6d:d7:ff:
                    09:62:84:e7:91:07:49:03:0b:b6:59:8a:b6:25:c4:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:47:E8:1E:5B:AF:8A:57:9B:A6:E3:95:47:CE:C8:23:AB:E3:E8:D9
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313735353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:210:1755::/80

    Signature Algorithm: sha256WithRSAEncryption
         a8:cf:29:b7:8f:07:2a:e3:d3:70:07:4f:a0:64:c2:88:12:9b:
         1d:40:73:2a:06:8f:56:1c:ae:e4:07:52:b3:5e:aa:b6:bb:6e:
         ff:75:aa:23:d1:2f:ce:a3:9c:70:35:b5:29:c5:d1:b9:07:cc:
         ec:36:ab:7b:d9:d2:02:12:07:f6:35:b2:f5:26:48:65:51:1b:
         f8:25:e6:41:e9:73:19:4a:06:c5:9b:9b:9f:8d:76:76:15:d0:
         18:36:00:47:9d:bb:7a:2b:40:20:bd:31:07:bc:8f:1a:8f:cf:
         4c:8e:c5:8e:29:c0:ec:6e:c7:57:f3:d3:ef:f6:e8:22:8f:73:
         c7:bd:a6:2f:d5:e2:33:82:89:be:48:58:a3:ef:54:bc:55:5e:
         e4:33:00:20:5e:94:52:0a:83:a0:40:1d:12:66:18:51:52:09:
         f4:e5:0e:d2:54:bd:6a:fe:37:1c:44:f8:77:eb:6b:95:0e:db:
         50:a3:39:60:af:42:39:37:21:8b:e5:90:9c:f3:de:d8:e8:18:
         6c:4b:fd:0f:aa:73:0a:40:59:96:7a:ac:08:86:cc:bc:59:bb:
         96:5c:80:71:fc:59:ce:14:4b:0d:3e:2c:dc:40:f3:80:1d:f5:
         22:00:af:3f:9c:85:f3:93:f2:df:50:18:f5:62:ea:94:44:bf:
         24:48:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----