Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a31303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a31303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          2rItdnXAebFBCOUa2tVO7tFmBrJooc/4+KNWim5Hflk=
Subject key identifier:   D2:29:37:C5:7B:E5:14:53:93:DC:9E:0D:22:A8:C1:8C:31:4D:01:16
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1EE1398C9FADDFA5EF74428828C756B7E72BE01B
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a31303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 00:10:02 +0000
ROA not before:           Fri 11 Feb 2022 00:05:02 +0000
ROA not after:            Fri 10 Feb 2023 00:10:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:10::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e1:39:8c:9f:ad:df:a5:ef:74:42:88:28:c7:56:b7:e7:2b:e0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 00:05:02 2022 GMT
            Not After : Feb 10 00:10:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:21:8d:2b:8f:dc:9d:f6:fe:96:fe:0b:d6:
                    c8:d5:7f:7f:1d:85:9a:bd:1a:c9:39:02:c5:b3:22:
                    1a:03:02:f2:7c:06:e3:81:14:3b:94:44:a8:3c:e1:
                    72:2c:ba:0d:78:47:4b:2f:80:9a:0e:7a:ba:28:d7:
                    00:72:4d:93:65:91:82:b2:c6:4f:ec:c9:0a:ce:65:
                    49:3d:df:47:e6:9a:6b:8e:e2:44:c4:e7:35:0c:9b:
                    74:6a:d7:71:80:bd:b7:d5:3c:f7:d1:1d:a0:9d:d0:
                    8b:bf:62:3e:5c:c5:51:d6:1c:0f:04:25:77:ad:77:
                    dd:6a:50:9d:ed:a7:8a:c8:2c:66:56:d4:fc:1e:a0:
                    ca:40:fc:05:c3:3b:16:a4:86:aa:38:a7:8a:8f:76:
                    ff:7d:4d:56:0e:63:b8:90:1c:51:be:b4:fc:40:b9:
                    d0:65:e7:62:c8:7c:28:3f:4f:c5:da:17:07:75:c9:
                    9d:4a:82:d9:d6:13:c3:f2:53:83:38:98:dc:7f:cd:
                    87:92:13:df:88:6e:76:d1:bd:b5:b9:f1:69:40:f0:
                    40:d7:8f:b5:b8:62:69:45:74:46:74:2e:f3:66:2f:
                    cd:36:62:3c:4d:22:2d:00:0e:6f:5d:ba:d0:81:95:
                    55:21:68:1f:13:26:76:c6:94:1b:10:bb:35:80:0d:
                    f6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:29:37:C5:7B:E5:14:53:93:DC:9E:0D:22:A8:C1:8C:31:4D:01:16
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a31303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:10::/80

    Signature Algorithm: sha256WithRSAEncryption
         2d:ee:63:fc:ed:fa:f4:90:95:c0:fb:37:33:aa:e9:d3:67:9f:
         0f:20:db:ba:ee:c6:fa:69:71:8a:01:61:57:d7:7d:17:db:40:
         63:fa:8d:fb:55:24:2e:e8:70:c5:b1:73:87:e0:a9:fd:ee:c3:
         bf:e5:f2:87:59:21:0a:e6:ce:3e:3b:e5:74:56:7e:36:03:d5:
         c8:7f:da:7f:1d:f5:e2:53:7f:cf:89:b7:cc:9c:04:3b:a5:1e:
         30:b1:de:d5:f9:f6:da:42:37:f7:69:69:0d:7a:99:ea:0b:83:
         1b:06:08:63:11:dc:f1:95:9b:4a:c3:6d:38:2b:03:87:57:25:
         80:cb:89:c4:b6:3b:a4:dc:1a:47:d9:e3:db:e4:6b:f5:41:26:
         7c:6a:c4:ec:93:1c:7a:22:45:04:dd:4a:33:44:6f:43:26:92:
         41:3b:d4:62:69:8c:e2:20:2b:57:84:0a:01:82:37:cd:9f:96:
         b7:d7:27:d5:00:17:84:d2:04:72:5a:53:16:07:58:04:18:ac:
         21:ea:ca:b8:df:44:c5:fa:7f:3a:c6:e7:d2:d6:6d:6a:f8:12:
         07:46:4d:4c:d3:74:cf:6d:89:69:ef:04:c9:a9:b6:43:78:7e:
         b2:31:0a:55:52:34:4d:a2:3e:56:85:ea:1d:a5:3b:7a:11:bc:
         8a:be:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----