Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313932353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a313932353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          7bZ538wRHoIyZsMsQy1U1CalPw4Ik6Z6rT6D6mXH720=
Subject key identifier:   B6:6F:61:6B:8E:40:D5:73:94:60:CD:C6:C2:7C:FD:90:95:BD:4C:9C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       69C55F40608106B80B2358977942F55DB9F4143E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313932353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 19:25:01 +0000
ROA not before:           Sat 12 Feb 2022 19:20:01 +0000
ROA not after:            Sat 11 Feb 2023 19:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:1925::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c5:5f:40:60:81:06:b8:0b:23:58:97:79:42:f5:5d:b9:f4:14:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 19:20:01 2022 GMT
            Not After : Feb 11 19:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:aa:ba:86:4d:2a:a6:d3:71:22:e6:6d:5c:
                    c5:41:ee:14:8d:e6:fc:8a:08:ff:38:52:4f:75:ef:
                    92:05:b1:9f:29:da:f5:a7:0b:46:68:f7:c7:ff:9b:
                    85:4b:80:bc:da:85:6f:d7:e2:fe:58:9e:87:c0:6e:
                    c3:d9:e6:17:78:9c:3f:00:31:01:f0:24:50:49:93:
                    16:aa:7e:3b:89:56:51:b6:2a:5f:f0:bd:91:69:90:
                    ab:95:5e:90:24:d0:2e:a2:0b:0f:c7:da:99:52:27:
                    d5:94:36:5e:97:a6:2d:a7:e0:2b:f1:4c:96:80:3d:
                    92:50:d3:bb:b5:7c:04:c3:21:54:8e:1e:b6:f5:00:
                    15:2c:90:cd:b7:14:8f:98:1b:ba:80:81:28:5e:65:
                    19:da:d5:14:83:a8:85:d4:3f:f9:e0:09:6a:85:02:
                    0c:07:0f:76:f4:c3:5e:54:e2:69:8c:65:78:be:87:
                    b3:79:f4:16:9f:24:21:7a:8f:58:46:fa:fe:d4:e6:
                    3c:04:98:7f:07:8a:47:8a:bb:df:24:74:bb:1e:2a:
                    af:90:fc:3c:fe:60:b5:88:35:05:e4:25:5b:7f:5c:
                    d9:17:ce:80:eb:30:69:ab:cb:ab:c2:88:6c:9d:d9:
                    cb:29:f7:84:45:b5:ac:d9:02:ad:a8:e5:b0:2b:3b:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6F:61:6B:8E:40:D5:73:94:60:CD:C6:C2:7C:FD:90:95:BD:4C:9C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313932353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:1925::/80

    Signature Algorithm: sha256WithRSAEncryption
         c8:ff:1d:99:92:8b:ee:47:f6:a5:ae:8d:6c:18:ba:94:82:93:
         d2:8e:89:f1:80:86:52:b5:b8:31:a8:89:2a:b2:28:4c:e8:4f:
         fd:4c:7a:6d:ab:12:7c:e2:4b:49:b1:3a:0f:19:05:3c:13:4f:
         da:f5:ba:0f:12:f6:2d:61:b1:6d:11:f6:a0:d4:25:4f:30:ac:
         43:24:a0:7b:01:09:b7:bd:e1:16:1e:f9:3f:29:5c:82:59:32:
         13:e9:c4:0e:78:6f:90:ca:01:e2:22:f3:fd:06:43:89:06:87:
         74:6e:c3:5c:0a:86:f3:f3:14:0b:aa:03:15:67:c6:38:29:43:
         d7:5a:b9:58:c1:8e:1f:ef:2e:84:44:66:0d:22:73:47:60:5b:
         c5:45:6f:a8:34:d6:7d:85:9c:87:45:58:d3:4b:79:fd:b8:4f:
         4a:02:79:8f:21:62:9d:4d:6c:5f:05:9e:be:1e:a2:9d:4f:e5:
         d4:99:5f:42:44:b7:8a:19:cf:d7:3d:a0:12:4a:bd:0a:58:f4:
         cb:af:d2:c0:96:64:d8:c4:4a:d8:73:86:6b:e2:2e:a0:5d:75:
         c7:c0:b2:3c:0e:49:d6:bb:7a:71:8f:a3:f5:78:f5:27:6c:fc:
         31:af:5f:47:84:fe:90:63:91:83:45:57:93:99:f4:32:31:38:
         d7:1b:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----