Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3631353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a3631353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Payf1ZA4aeHob37CkPI6qjpritx3tkvsYLFvfGn3kDM=
Subject key identifier:   85:CD:8F:69:FC:BC:0F:4B:29:3B:AD:B6:70:52:9C:71:7D:DC:47:30
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1761FFDAD8FCE02514B513388A7967B6F84C8F9C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3631353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 06:15:01 +0000
ROA not before:           Fri 11 Feb 2022 06:10:01 +0000
ROA not after:            Fri 10 Feb 2023 06:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:615::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:61:ff:da:d8:fc:e0:25:14:b5:13:38:8a:79:67:b6:f8:4c:8f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 06:10:01 2022 GMT
            Not After : Feb 10 06:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:82:e9:56:15:2f:e7:a2:2a:3a:b2:14:8a:
                    e4:b9:88:f3:cf:e0:3b:48:aa:bd:d6:cb:92:78:2c:
                    a9:82:d8:74:0a:ce:bb:4c:7d:fd:76:07:98:54:20:
                    26:20:78:79:52:25:63:25:9f:08:bd:4d:dc:e1:de:
                    3e:2d:55:42:9b:a9:86:2e:4d:e3:48:8d:bc:f1:4c:
                    e2:23:f7:c6:d8:49:ef:c8:4e:07:dd:e2:f9:89:5d:
                    c5:e5:4b:a4:5a:0c:a3:ed:8e:bf:9d:61:93:6f:15:
                    a9:47:66:2d:d1:87:ba:6b:86:ca:e2:70:de:7a:17:
                    07:83:07:75:20:88:42:cf:00:e3:9e:2c:82:f7:bf:
                    3a:d3:1e:80:13:0a:8f:50:b5:d7:ae:cc:c6:ee:d1:
                    2d:a2:f3:81:65:3e:0d:a8:94:f7:6c:ff:51:f3:87:
                    95:64:12:07:8c:dc:3d:33:a8:f7:65:e7:03:71:97:
                    72:96:d0:99:ed:fa:1d:3c:87:1c:79:28:be:a7:4f:
                    f4:8d:c4:4e:88:89:c7:9f:7f:65:84:d3:cd:7f:04:
                    e3:00:30:1e:66:d4:72:5a:90:b4:71:29:fc:6a:90:
                    11:4c:76:c3:94:4b:ef:e0:71:94:11:9a:e8:6b:ff:
                    f7:94:47:5d:07:a7:98:4b:bf:48:a3:d6:33:7c:25:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CD:8F:69:FC:BC:0F:4B:29:3B:AD:B6:70:52:9C:71:7D:DC:47:30
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3631353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:615::/80

    Signature Algorithm: sha256WithRSAEncryption
         26:3a:92:20:7e:c9:48:dd:09:77:fb:a3:31:cd:47:4a:75:90:
         87:67:9b:8a:f5:3e:f2:3f:7a:56:9d:26:54:98:a7:92:d3:93:
         40:94:8e:1a:e8:b1:4b:9e:f5:f2:b4:80:a8:75:15:54:12:d4:
         92:59:29:a7:72:62:a2:62:fe:c2:b4:21:d8:0a:7f:63:7e:98:
         fd:b2:26:11:88:7d:fe:b5:63:f5:22:df:8f:27:8c:4f:92:73:
         ce:42:c8:b8:36:fd:db:b6:14:77:ad:b2:db:b6:27:6b:0d:f2:
         6e:3b:5e:ee:83:66:bd:74:b6:52:e3:7b:a4:61:21:f4:70:a4:
         a0:57:1e:6a:87:a7:a0:74:69:d8:28:95:90:81:64:ef:f8:a9:
         ae:39:73:83:7c:fa:72:da:4a:1f:a3:8c:f5:a0:95:36:4a:8d:
         33:8c:14:e1:30:66:fb:ca:d3:15:ff:77:f3:b7:31:c0:11:49:
         b7:18:5b:f3:8c:6c:80:a7:34:ca:ea:67:a1:c6:c9:6e:1f:77:
         6c:3d:f0:fb:97:37:56:c4:8c:b1:f0:57:88:58:93:bc:70:e3:
         0c:ff:99:dc:2f:7b:75:3f:66:5e:80:dc:7d:25:05:9e:6f:53:
         9f:bd:34:f4:cc:1e:c1:02:4b:a1:f8:c2:e1:d8:25:04:66:c4:
         12:36:ff:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----