Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323333353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a323333353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          +RLTkGVQ9ubVQ2WwoJrll40Rod98rorZmbjSWH2/8Sc=
Subject key identifier:   2F:AC:86:86:75:AB:A9:28:99:DB:CA:8C:3D:16:D8:73:B8:E1:35:24
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1C28D78A3927D9C5571F7404441FD3A33C3FAEAD
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323333353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 23:35:01 +0000
ROA not before:           Sat 12 Feb 2022 23:30:01 +0000
ROA not after:            Sat 11 Feb 2023 23:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:2335::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:28:d7:8a:39:27:d9:c5:57:1f:74:04:44:1f:d3:a3:3c:3f:ae:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 23:30:01 2022 GMT
            Not After : Feb 11 23:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:75:29:31:90:1a:35:dd:4d:f1:c3:68:ae:
                    61:45:27:aa:a9:f6:81:fa:9c:8a:00:0d:b8:71:2a:
                    fb:b9:e1:24:f0:5d:8b:a3:58:ba:4c:f6:5f:e3:11:
                    8a:7a:79:a0:6f:3e:0c:af:cb:45:74:52:48:3c:9a:
                    94:81:d9:2f:29:e5:cc:07:fa:18:82:aa:ab:c1:95:
                    2f:27:24:14:0f:34:be:e0:a1:19:14:5f:37:e5:84:
                    fe:89:85:96:d2:29:00:c1:96:92:54:db:c0:46:9f:
                    86:d5:fb:40:5a:51:bf:9f:7c:28:28:bb:3f:ee:3e:
                    68:92:77:be:f5:26:e2:ff:fd:60:79:06:3c:f4:c4:
                    2d:62:b5:28:71:79:19:89:1b:dc:33:95:a0:db:ec:
                    5f:ca:a3:42:56:de:fb:f7:df:bd:74:3d:9a:dc:02:
                    fa:f6:f8:5f:40:89:28:a7:e7:e5:81:0e:c7:71:47:
                    2d:82:91:6b:24:ec:30:2d:54:d1:fc:17:1b:89:cd:
                    43:6c:0e:c1:59:2e:6d:9d:97:bb:e5:d0:19:9c:1e:
                    96:50:5e:45:37:85:a3:8a:9f:45:c1:c1:4a:6b:28:
                    75:ac:1a:88:f0:5a:e8:d9:f5:1b:75:d7:62:69:17:
                    81:b7:6d:6f:35:a0:26:64:48:55:a5:ab:ad:9b:e6:
                    1f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AC:86:86:75:AB:A9:28:99:DB:CA:8C:3D:16:D8:73:B8:E1:35:24
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323333353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:2335::/80

    Signature Algorithm: sha256WithRSAEncryption
         72:55:db:f9:83:f5:59:f2:0f:b8:93:bc:a9:b6:d4:5c:03:39:
         3c:2e:aa:88:50:31:81:fc:7b:33:3e:af:ca:77:7e:d3:4b:1f:
         df:b3:8f:bf:ef:a7:24:73:eb:e0:b7:60:90:2d:02:47:ba:5c:
         a3:7f:76:4b:70:73:98:8c:f2:fd:81:0e:58:d5:a7:75:ae:f2:
         89:25:a6:38:ae:b2:71:62:06:50:0a:29:bb:d0:f3:9d:ff:98:
         be:83:a2:df:52:86:c7:71:d6:70:97:18:fa:ff:10:47:62:51:
         80:ea:69:ba:a9:33:84:17:a6:e7:35:ea:ea:37:05:62:02:43:
         03:c7:e1:49:27:54:48:a8:aa:52:67:3c:e5:f1:96:d7:0f:47:
         7d:c9:bd:0f:27:29:7f:35:66:34:df:ed:65:ca:90:ab:43:7b:
         bd:9c:57:18:ff:9f:18:9d:84:09:e2:4c:2c:05:67:38:16:1c:
         9b:79:0e:e3:7b:b9:de:7d:f7:ba:5d:7e:dd:12:6a:80:3e:7d:
         50:7a:40:65:26:a0:cb:82:cf:cf:34:60:8b:2f:c1:79:37:51:
         1c:45:67:ce:96:74:0d:c4:68:f9:53:0e:88:09:58:88:60:37:
         da:9b:6c:73:ba:40:5d:74:fe:72:dd:17:21:9a:ae:94:d5:85:
         aa:f5:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----