Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          C5pJnz2wK0/v4x92p2evGHalAtdSayWqzIQk/S/2ewU=
Subject key identifier:   08:04:60:47:6B:12:29:7B:F7:9E:B0:16:35:98:7E:D8:73:FE:7E:B1
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1E32A6385E42E2F90FA6A70061417FC1C38C34ED
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 00:05:01 +0000
ROA not before:           Fri 11 Feb 2022 00:00:01 +0000
ROA not after:            Fri 10 Feb 2023 00:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:5::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:32:a6:38:5e:42:e2:f9:0f:a6:a7:00:61:41:7f:c1:c3:8c:34:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 00:00:01 2022 GMT
            Not After : Feb 10 00:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f7:d1:60:7e:b9:82:34:61:89:e5:23:cb:6f:
                    fb:8e:02:a5:e2:29:22:ee:52:64:bb:0f:e0:af:87:
                    28:b6:9d:48:70:bd:ac:49:3c:87:01:52:14:e6:f5:
                    8a:0e:ce:19:31:82:7e:0d:aa:a9:db:4a:b5:af:8c:
                    b9:d6:5b:3b:2d:d1:98:33:05:8e:b0:80:18:89:62:
                    e5:74:b6:c6:39:ea:a3:9f:f1:fc:d5:bf:4f:98:f3:
                    da:a7:33:f5:4d:15:70:0e:7b:a8:a1:b0:2a:22:8d:
                    1f:89:a1:2f:8e:f3:d0:4f:ed:82:9b:27:e8:31:01:
                    20:75:d9:15:86:73:f1:83:21:e8:90:07:e7:57:81:
                    cd:07:60:eb:e8:d7:13:42:b9:60:7c:83:e7:0e:f4:
                    f6:ca:a3:ed:90:69:49:c5:53:ba:5e:3c:51:12:7a:
                    c0:1f:bf:79:32:63:76:2e:02:c4:3e:b2:1f:e1:19:
                    48:79:f5:20:4d:a4:b6:17:bb:b5:a6:fe:eb:d5:52:
                    35:85:e8:61:0d:45:bd:65:8f:11:20:f8:83:ef:7a:
                    ab:ab:7f:5d:e0:a5:48:74:ad:fe:9e:61:23:23:bb:
                    ac:8b:59:ef:7d:90:6d:89:76:9c:15:3d:3b:2c:54:
                    e5:e1:2c:c1:8d:61:9b:34:cf:11:f3:24:a6:e0:5f:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:04:60:47:6B:12:29:7B:F7:9E:B0:16:35:98:7E:D8:73:FE:7E:B1
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:5::/80

    Signature Algorithm: sha256WithRSAEncryption
         61:1a:68:20:f6:58:6e:5a:c0:82:18:b1:b9:91:9d:1b:be:1c:
         bc:5a:73:51:1b:57:25:e0:d2:75:a3:a2:ee:73:dc:c9:7e:00:
         a1:5a:5d:68:77:08:37:2c:f7:12:17:03:b9:de:9b:3b:11:ab:
         c8:8a:ca:6f:17:78:37:dc:29:f2:30:f2:14:7a:2f:40:69:a1:
         d4:fc:2e:61:ca:1c:5b:52:2e:97:5f:e0:0e:2d:9e:3f:2a:aa:
         b9:f0:b1:f1:1e:9f:a4:de:4a:a7:96:3f:03:dd:7d:e0:0f:0a:
         38:2a:88:8f:67:d0:d1:57:9c:c7:e9:d5:60:22:3f:9a:b6:c8:
         1b:68:92:e2:f3:cd:d7:e6:04:4e:ab:08:7a:5b:52:33:1b:7c:
         87:61:54:04:a8:ad:95:9b:e4:e9:83:09:75:c5:24:6f:c3:28:
         a0:00:47:cb:85:51:59:35:75:c8:a5:e3:ed:ec:2f:c8:9c:31:
         cb:47:db:9e:02:22:6f:cb:19:e9:81:66:9f:68:5c:19:d3:06:
         11:1a:b7:9a:0d:00:2e:60:da:a8:de:17:14:e2:2c:09:0f:35:
         72:5e:79:01:51:fd:52:5a:84:58:c1:e2:08:d3:65:af:ee:60:
         47:cf:1a:1f:15:78:e4:ad:e0:1b:41:32:3e:b4:cc:50:86:89:
         64:e2:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----