Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313433353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a313433353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          aU/1HWLVHmHRU4jMRrDVzHN1Dwc6OzQXBWEz5oXsujk=
Subject key identifier:   9D:BF:CE:4E:67:76:62:51:2E:68:81:41:63:A7:6F:4F:99:7A:4B:E2
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6956490B0451BCFFE4EB38A9FB53C2D64624B96B
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313433353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 14:35:01 +0000
ROA not before:           Sat 12 Feb 2022 14:30:01 +0000
ROA not after:            Sat 11 Feb 2023 14:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:1435::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:56:49:0b:04:51:bc:ff:e4:eb:38:a9:fb:53:c2:d6:46:24:b9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 14:30:01 2022 GMT
            Not After : Feb 11 14:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8a:25:9d:ee:39:f0:39:e9:8e:ba:49:81:44:
                    ec:96:17:3d:05:1e:b9:ae:25:db:cd:28:9b:11:e9:
                    df:0a:8d:4d:df:06:a4:0a:ac:cb:32:58:a5:e1:e4:
                    4c:9c:ca:11:93:9c:13:e2:51:bf:f3:bf:4d:79:f6:
                    f0:f7:eb:35:cf:72:22:94:cc:67:44:68:ec:02:ea:
                    5b:5f:0f:97:cc:01:ef:3a:f1:4d:d5:a9:58:c0:0a:
                    1a:c5:a3:ff:cc:67:d5:3c:d1:69:c5:31:71:43:58:
                    b9:58:05:e8:a5:c3:b2:6c:0b:ba:6b:0f:54:16:3c:
                    be:18:3f:0a:a0:8d:fa:47:8b:3f:bd:7b:1a:b7:09:
                    71:d3:ef:46:70:eb:c8:89:6f:ee:84:35:81:97:73:
                    ba:46:13:b6:ca:89:50:05:ee:32:89:78:58:5d:e2:
                    ef:83:b4:71:ae:88:f7:e7:52:f7:38:77:83:86:d3:
                    c0:44:d1:0e:62:47:c9:31:61:2d:c9:6c:89:68:d8:
                    f9:e5:34:d8:6d:e0:4b:5a:9d:d6:f6:1d:1e:90:a7:
                    e6:b1:7a:bd:49:a4:36:be:16:53:b9:5a:04:1b:85:
                    f0:4c:65:65:3c:5b:36:bf:c5:1c:91:a9:9a:1b:96:
                    7c:fd:20:2f:52:d0:88:cf:59:c7:56:a5:b9:39:53:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:CE:4E:67:76:62:51:2E:68:81:41:63:A7:6F:4F:99:7A:4B:E2
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313433353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:1435::/80

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:58:bc:52:b3:2e:09:d4:55:f5:8b:a5:d6:3e:5d:bf:52:
         4b:38:ca:36:b2:30:74:5c:1b:55:93:1b:3b:19:75:0e:e3:ad:
         1b:42:00:03:42:0d:b2:f0:01:11:a9:b6:63:88:2c:14:78:5a:
         7d:82:e5:01:87:75:c2:6b:ab:56:d6:27:6a:10:73:53:08:40:
         7d:00:f8:9e:47:da:b5:83:2d:5e:b0:11:55:a1:cf:af:ad:2d:
         d6:01:00:f4:b8:3c:99:8c:27:fe:a6:a7:39:1a:5e:cf:bf:e6:
         44:d9:a0:92:c5:4e:2a:5a:2a:22:0f:73:8e:9b:d7:c7:5d:a8:
         9e:ff:1d:58:80:06:db:3d:18:77:a4:2e:79:b5:3a:17:36:0a:
         14:90:3c:c2:24:5a:a2:28:47:1c:ab:e2:ea:fc:fb:f0:3a:7f:
         45:1f:8b:78:7b:be:8d:c2:4f:01:83:e7:a6:bf:f4:33:1a:56:
         5e:a4:0c:b6:98:36:80:e7:e3:f5:b9:c2:8f:4b:58:a4:52:4f:
         61:be:ba:dc:16:97:eb:c6:fd:9e:36:92:f9:06:a3:6d:13:bb:
         a2:76:95:35:74:3e:d6:7e:0c:e2:ac:3d:6b:24:13:0c:b5:d6:
         dd:0d:c4:7a:bb:cf:7a:93:48:97:c8:e2:db:be:14:5f:31:29:
         89:0a:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----