Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3831353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a3831353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          G3tvKnoswz0e+QqKBK2+yv1EdK2TI9y/cXOsqKthnHg=
Subject key identifier:   3C:7F:5B:03:41:65:BB:A7:FD:F4:29:71:DC:F7:FA:0D:55:B7:3A:98
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7476DB8C1BFB34C99190831157609F1177662331
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3831353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 08:15:02 +0000
ROA not before:           Fri 11 Feb 2022 08:10:02 +0000
ROA not after:            Fri 10 Feb 2023 08:15:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:815::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:76:db:8c:1b:fb:34:c9:91:90:83:11:57:60:9f:11:77:66:23:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 08:10:02 2022 GMT
            Not After : Feb 10 08:15:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:e7:46:b4:9b:2d:85:ed:4e:60:51:46:7e:
                    91:de:24:ca:7e:d9:e8:fd:a5:08:ae:b6:30:6e:5d:
                    0b:54:4f:f5:e3:cc:20:23:06:fe:fd:ed:38:25:be:
                    33:f0:c7:37:be:83:14:d2:85:10:21:98:ba:67:bc:
                    c5:28:1e:a1:fc:01:91:b9:72:d7:92:0f:73:c8:d0:
                    08:db:3c:6d:c5:3d:90:c5:34:69:fa:71:90:32:0a:
                    eb:a9:d4:b2:93:d5:f5:1e:12:0b:49:0f:26:15:25:
                    5c:4d:d7:ce:b2:3a:02:61:70:29:42:d9:37:c3:cd:
                    9a:26:38:ad:d6:fe:20:e8:4e:c5:7c:c5:18:d0:d1:
                    55:b6:57:2f:11:f1:11:10:1c:ea:d4:a9:c0:5d:8c:
                    9c:bb:17:b1:ef:c7:92:8f:df:dc:00:6f:7c:6a:81:
                    da:86:38:6b:65:94:5a:62:b5:f9:b7:a5:d6:7d:e7:
                    d9:18:7e:74:9f:72:e4:d1:98:1c:1f:6b:f2:6e:96:
                    27:db:35:4a:7c:7d:48:fc:70:e9:19:58:22:36:8f:
                    6e:e9:ce:76:a3:73:bf:5a:d9:49:58:2d:f0:99:37:
                    74:ae:99:c9:59:ad:fe:b9:77:41:f6:82:ca:d0:6e:
                    62:37:c9:bd:99:3f:c9:fe:c6:5f:00:bb:14:46:15:
                    ad:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7F:5B:03:41:65:BB:A7:FD:F4:29:71:DC:F7:FA:0D:55:B7:3A:98
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3831353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:815::/80

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:42:24:26:36:5c:21:6f:09:fe:0d:a2:dd:8d:f0:54:4d:
         ef:8e:42:4b:e5:4a:fd:b9:25:ed:a9:86:52:25:1c:4d:0c:0f:
         0a:fc:51:82:6c:15:c4:c4:19:cd:a4:84:59:ba:30:68:81:a0:
         5e:9a:c4:af:1e:af:85:11:a3:c1:30:74:03:39:f8:73:7f:13:
         e7:a4:bb:d5:a6:4f:fc:df:df:43:4a:bc:e5:0e:ed:d4:38:8c:
         2f:d6:c3:46:18:a1:5c:85:37:b8:92:8b:4b:c8:9a:f8:fa:9d:
         9d:64:ec:23:ce:d6:11:d4:f5:7c:80:44:5b:f4:5d:da:f6:29:
         ab:4f:4b:fa:3f:56:65:95:45:60:05:64:cd:81:21:b8:bf:b2:
         c7:de:95:cb:55:90:d3:77:30:b4:cd:30:1e:b6:7e:10:41:04:
         e4:0f:2c:e2:f0:f9:c0:d5:7e:25:c1:91:8b:de:da:e3:4b:2b:
         24:f5:e0:c1:37:4b:93:d5:a5:f2:aa:fd:c6:6b:8a:de:02:01:
         e5:b9:18:2e:7d:e3:c9:2f:7d:8c:46:63:e7:de:3f:6e:9e:ae:
         03:08:47:34:48:28:19:22:20:6d:4a:56:b3:08:c7:ff:77:b3:
         7a:0d:6f:a8:70:fd:00:e9:b5:03:b8:a0:6f:98:24:3e:1c:23:
         3e:53:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----