Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a323135353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231303a323135353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          dUPD8syi4Y2UzXIrczPl/ciTfSY1qqxo17Zhdp1oft8=
Subject key identifier:   76:4D:0B:47:5F:6B:64:50:3F:9E:12:ED:22:01:DD:89:97:EF:3F:95
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6A7ED78195B67318FB7E5CD0180548548C0028E0
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a323135353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 10 Feb 2022 21:55:01 +0000
ROA not before:           Thu 10 Feb 2022 21:50:01 +0000
ROA not after:            Thu 09 Feb 2023 21:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:210:2155::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7e:d7:81:95:b6:73:18:fb:7e:5c:d0:18:05:48:54:8c:00:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 10 21:50:01 2022 GMT
            Not After : Feb  9 21:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:3b:84:fa:97:d9:27:ad:79:a4:17:c3:ae:
                    bf:e4:76:56:8c:62:ed:a2:7a:89:ee:d4:a8:a2:13:
                    22:76:36:0c:7f:95:e4:d7:bc:7b:15:c7:c1:5d:16:
                    6c:d5:a0:b6:8b:9d:47:03:a7:37:9f:05:d7:91:67:
                    f6:16:3d:ec:30:b3:a9:05:64:50:97:49:c3:5a:2f:
                    43:91:e6:4e:8d:56:18:04:f9:29:65:18:b7:44:6d:
                    99:20:bd:51:46:77:9b:e6:7d:74:0d:4e:48:f8:f5:
                    39:74:e5:c5:32:15:12:85:e3:5d:40:4c:0f:e2:0e:
                    76:52:1b:d4:74:ec:0f:cb:9d:04:ca:7b:85:eb:c4:
                    d6:f9:00:fd:a5:52:28:6f:d3:44:31:75:89:27:e4:
                    0d:5a:72:d1:1d:71:3c:bf:7a:f7:f5:5f:88:20:54:
                    ad:f5:2f:90:5c:6a:94:f5:f5:55:56:0a:42:15:68:
                    28:f5:b5:9f:e8:49:f2:94:3a:59:99:27:e2:50:f7:
                    25:9d:7e:d1:f5:86:56:d3:29:10:bd:76:8f:52:11:
                    7a:fd:f9:cd:89:89:96:78:55:6b:b6:3d:4f:39:46:
                    68:34:da:fe:bb:62:61:2e:d6:34:24:c3:b1:a7:8a:
                    99:5e:e8:ee:cb:e8:0b:85:4f:c5:fc:92:a9:63:d4:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4D:0B:47:5F:6B:64:50:3F:9E:12:ED:22:01:DD:89:97:EF:3F:95
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a323135353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:210:2155::/80

    Signature Algorithm: sha256WithRSAEncryption
         01:91:38:c1:e3:47:e4:ee:14:11:9a:71:c3:fa:d0:75:d0:13:
         46:ab:b7:6b:54:92:53:91:0b:19:33:1a:04:25:e2:16:ca:d2:
         c2:8f:6f:7b:76:ef:b4:81:4e:a4:ce:c3:07:f9:3d:8a:d5:d5:
         bc:2c:8f:da:5e:64:ab:8c:1b:4d:67:08:94:69:06:bd:8d:6c:
         fe:48:fd:89:4b:1e:37:0b:20:af:8a:5b:58:5b:03:fe:80:15:
         40:e9:fa:4b:0a:15:bf:0f:5d:44:ee:29:9d:b6:fe:ab:59:3e:
         cd:d1:4c:a8:41:33:f8:1c:8c:49:41:ae:e7:b7:18:ff:5b:ff:
         a1:7a:ec:b7:41:6f:dc:21:40:65:ad:28:af:a7:9a:8f:32:57:
         2a:47:6c:f4:87:f4:fc:5f:26:24:17:99:4e:85:79:6a:c1:48:
         65:c2:a1:51:ac:88:5e:e2:e7:66:db:c8:f9:7b:50:f2:42:87:
         c7:31:79:90:57:b7:3e:33:e0:bd:5b:7f:3a:cc:24:96:38:a5:
         87:b1:3d:14:2e:b6:eb:63:7c:99:f5:03:ab:24:7d:1f:08:60:
         81:aa:0b:65:99:e5:19:27:25:3a:74:e2:48:ff:bc:7d:6e:bf:
         2f:b9:17:36:94:e6:0f:42:ff:02:5f:e7:8b:3c:a4:f2:6f:cd:
         d8:1d:1f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----