Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323335353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a323335353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          SMUjImi8PD5YsugPUAROJ/3a6KTGXR+cUGWa4V66ZUY=
Subject key identifier:   4C:16:3D:F1:41:6F:CB:77:ED:8F:AC:24:17:03:09:97:57:C2:EC:F4
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4CF34FC74B0BFFDF92C5CE1BA376F253A980A2F3
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323335353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 23:55:01 +0000
ROA not before:           Sat 12 Feb 2022 23:50:01 +0000
ROA not after:            Sat 11 Feb 2023 23:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:2355::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f3:4f:c7:4b:0b:ff:df:92:c5:ce:1b:a3:76:f2:53:a9:80:a2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 23:50:01 2022 GMT
            Not After : Feb 11 23:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:41:13:48:66:e2:c4:02:bc:c2:eb:fb:99:e0:
                    bd:52:f7:23:42:ee:d6:77:5b:2d:13:58:1d:0c:16:
                    ea:79:71:49:6a:bd:da:0f:58:e3:3b:7a:aa:30:25:
                    ae:26:0e:0e:31:5e:3e:7f:53:ff:a4:85:ac:fa:e7:
                    c4:a5:41:6a:7b:d8:77:6a:06:71:8e:8f:ed:b2:3b:
                    c2:8c:5d:de:4e:7f:f8:68:67:7e:87:d0:dd:ba:bf:
                    40:5c:15:f0:23:f7:2c:37:2e:f8:49:c6:1b:8c:d7:
                    1f:64:d8:14:0a:03:2f:9c:be:7e:4a:ce:7b:83:a8:
                    9e:8d:7a:8b:9e:1f:ac:1d:0b:73:d3:cb:43:95:d8:
                    89:3c:c8:72:79:b3:d4:88:0f:39:6f:f4:15:1f:12:
                    ad:54:28:6a:72:cb:23:17:a4:d2:4f:3c:55:74:b2:
                    b7:d9:e2:53:82:78:b8:21:43:b9:f2:b6:49:01:02:
                    4e:03:c1:b5:fa:d4:a2:30:f3:fb:11:4e:d7:cd:e2:
                    77:bb:e6:2b:46:f2:45:76:1c:73:f0:f5:7a:e7:fc:
                    d8:68:1b:01:5c:15:85:5e:2f:08:3e:f7:7e:81:c8:
                    c7:24:7f:77:e1:22:58:68:85:f1:c7:e4:b8:09:57:
                    79:0b:70:1d:ac:e8:5e:0b:c3:2e:35:cb:16:01:be:
                    fc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:16:3D:F1:41:6F:CB:77:ED:8F:AC:24:17:03:09:97:57:C2:EC:F4
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a323335353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:2355::/80

    Signature Algorithm: sha256WithRSAEncryption
         c8:af:e7:24:f1:d8:be:a3:f2:aa:b7:93:c4:3e:34:87:b0:43:
         3a:81:0f:a0:6d:00:c5:c5:9e:dd:0c:26:1b:42:9b:94:85:10:
         9b:fe:51:06:50:43:2d:9a:cc:ff:d1:8a:b9:aa:40:04:d0:ee:
         85:1a:35:cd:d9:0c:8c:04:30:91:ea:c5:9d:63:3b:92:c5:cb:
         72:b2:e9:20:e7:ac:86:b7:e8:df:ac:18:43:8d:66:48:32:a5:
         03:50:43:d8:48:cc:12:6b:b2:ac:5a:14:b5:54:19:bb:4b:1f:
         43:be:d5:e6:bc:f9:48:99:be:6c:8f:47:20:54:9a:84:0f:37:
         28:2a:0a:4c:7a:c8:be:12:14:c1:ce:c3:8f:7d:d8:72:ef:94:
         03:62:4f:1a:d9:63:b9:a3:3d:20:27:ac:68:00:a8:60:98:61:
         f7:fa:12:9c:5d:36:8d:19:9b:2d:03:9d:09:09:01:13:6a:8b:
         aa:2d:cd:a3:41:67:2e:3e:25:e0:97:5c:74:a5:7d:4b:7f:84:
         c1:11:71:27:44:70:fe:04:5c:5f:f6:52:ac:c1:aa:05:bc:48:
         c5:a7:52:4e:35:7d:a2:a3:91:75:a5:58:bd:73:62:6d:96:68:
         34:a9:30:cf:96:b9:34:0d:d0:97:6a:9a:7f:74:c2:ca:79:a3:
         2c:88:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----