Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323330353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a323330353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          VdjhZ9B+8oJY4EwucnwGxyav6XGSkVyB1TlNrxrOxSQ=
Subject key identifier:   20:6A:EA:26:A3:8A:9F:8B:89:64:68:B1:62:E3:FA:A9:28:D9:46:8D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       351A60FB50879A51012D55527FCE5A3E04A88EE1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323330353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 23:05:05 +0000
ROA not before:           Sat 12 Feb 2022 23:00:05 +0000
ROA not after:            Sat 11 Feb 2023 23:05:05 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:2305::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1a:60:fb:50:87:9a:51:01:2d:55:52:7f:ce:5a:3e:04:a8:8e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 23:00:05 2022 GMT
            Not After : Feb 11 23:05:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:40:f6:e1:01:7a:87:29:46:5a:5a:ec:aa:
                    cf:6d:96:39:61:72:d4:56:8c:3e:88:80:8c:7b:16:
                    ce:a0:14:34:ed:51:3a:f6:b6:b0:bc:78:4d:97:ea:
                    36:e1:9e:ea:23:fb:63:f1:e4:dc:fe:eb:a4:66:43:
                    5a:2b:85:f3:ac:5e:fe:58:3b:88:a3:cd:8b:9f:5d:
                    cd:8a:83:0e:68:e7:f3:8f:19:aa:b5:3c:b6:db:23:
                    12:3c:7f:86:db:00:53:f5:a5:81:46:5a:af:d6:af:
                    98:1f:aa:90:0d:63:0b:e1:be:9e:41:53:6a:ce:01:
                    10:d9:df:05:e8:64:72:fb:07:08:22:79:e3:a7:cf:
                    be:bc:31:ff:36:d7:6e:98:2f:cc:49:db:c8:ff:49:
                    d6:31:3d:88:f7:8c:97:ba:f3:fe:1e:90:b8:a4:7f:
                    97:4f:73:9f:2d:e1:84:b8:5f:88:e7:bd:fa:59:7a:
                    6d:e8:92:3a:0b:59:f4:2b:b1:8a:c5:db:4a:ce:c1:
                    87:fd:33:2e:79:d3:2f:be:6b:6f:13:e0:66:6f:62:
                    a6:92:fe:6a:d3:8c:03:6f:26:8f:ba:09:80:a9:2c:
                    67:fb:4d:b3:cf:bd:5e:6a:53:06:b3:4d:e5:90:53:
                    fb:ed:05:7e:fd:f8:67:37:7c:76:d1:79:f0:f5:7c:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6A:EA:26:A3:8A:9F:8B:89:64:68:B1:62:E3:FA:A9:28:D9:46:8D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323330353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:2305::/80

    Signature Algorithm: sha256WithRSAEncryption
         73:71:d0:c1:94:79:a8:cc:7e:8a:ca:2b:7d:87:b0:f3:d6:1c:
         78:d2:bd:dd:28:78:03:2d:1f:b6:13:09:3a:8f:7b:36:08:3e:
         61:ad:7f:2b:62:72:9d:be:ef:1e:84:bc:8b:42:71:f3:07:4c:
         a1:0d:d7:dd:69:c6:46:69:9e:3e:28:f5:47:1d:e4:46:fa:40:
         d1:49:63:86:b1:e6:48:00:43:f6:54:4b:4a:10:8d:97:16:32:
         61:78:0a:74:20:99:78:25:0a:77:c7:71:42:be:af:7c:af:f7:
         d9:c5:40:8b:c8:26:60:1a:0d:c6:04:9f:7a:6c:75:03:ed:e8:
         05:c1:47:f3:1f:20:c3:70:51:0e:17:7a:a2:b3:e9:ca:d5:a1:
         47:ba:c6:5b:cf:80:65:48:71:9f:d8:51:46:24:7d:aa:b0:ce:
         d1:67:54:3d:cd:ed:2f:4a:30:47:17:74:8d:c0:d2:5f:ef:8d:
         b9:62:85:4e:38:ca:58:e0:53:0a:e0:f3:c5:2a:b0:ea:84:87:
         64:c2:50:fb:c3:05:c7:46:7a:5b:36:cd:67:18:99:ba:b0:8f:
         fc:f8:5a:fa:c3:79:c5:a3:95:7e:5b:c0:b3:92:6f:69:43:93:
         0d:cf:b9:29:e9:65:f2:40:67:29:8b:09:43:fd:7f:21:76:45:
         24:54:e8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----