Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3235353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a3235353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          B4hgDyT2ULuVrEz1sedjQ5VZcvb5TefOKXDuAthLiHs=
Subject key identifier:   3D:17:09:53:CF:09:25:52:CF:4F:F5:82:5E:BD:4E:17:0E:B9:19:77
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       23C1930BE15BF261921C4C27D30F174158AC53A8
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3235353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 02:55:01 +0000
ROA not before:           Sat 12 Feb 2022 02:50:01 +0000
ROA not after:            Sat 11 Feb 2023 02:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:255::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c1:93:0b:e1:5b:f2:61:92:1c:4c:27:d3:0f:17:41:58:ac:53:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 02:50:01 2022 GMT
            Not After : Feb 11 02:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:f5:19:16:6c:fe:d1:5f:b9:a7:31:10:73:
                    52:e0:b1:b5:c1:88:6f:f9:49:9b:4c:8b:6e:52:2e:
                    47:63:42:42:9b:da:7d:f6:41:e0:d6:4d:8a:c5:57:
                    5f:0d:c6:36:54:02:7a:82:da:c4:27:65:cc:b7:4f:
                    9d:9f:0c:e3:87:7f:c6:41:4f:ea:c9:53:b9:d1:49:
                    98:e8:ce:0e:74:74:6a:f6:be:21:2d:32:19:8c:c0:
                    a4:3e:bc:a9:58:8a:da:f4:72:db:41:19:b8:db:2e:
                    ea:81:50:53:73:9b:25:80:3d:04:31:9b:75:25:bb:
                    f6:13:f7:f0:d6:42:f1:5c:43:6b:fc:f5:18:20:c0:
                    e9:8b:7e:d0:d8:9c:55:e5:bb:47:d6:23:ed:54:2f:
                    19:30:53:57:f6:b8:51:d3:9f:85:0d:a0:68:2d:61:
                    72:6f:74:cb:72:da:22:86:97:fc:71:9c:73:8a:56:
                    65:99:45:7d:73:e9:72:f4:75:b5:12:41:52:ed:1c:
                    d2:0d:f7:45:97:d4:0e:26:ab:3c:d3:e4:6f:bb:7f:
                    15:91:48:a3:99:37:17:ff:6c:70:66:63:b1:45:e3:
                    97:cb:3f:68:32:bd:d8:0b:4a:e1:af:1e:3e:94:39:
                    ff:ef:96:00:c0:72:92:61:fd:3f:0f:45:77:1c:6c:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:17:09:53:CF:09:25:52:CF:4F:F5:82:5E:BD:4E:17:0E:B9:19:77
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3235353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:255::/80

    Signature Algorithm: sha256WithRSAEncryption
         37:ae:48:1e:e8:21:40:ee:d1:ce:66:a9:9a:41:18:2b:69:85:
         8a:49:63:b5:ee:40:8d:05:2d:5b:24:22:a9:e3:66:14:8d:31:
         02:a6:f9:37:e4:14:24:e8:41:b0:3e:00:34:be:05:c2:b8:c8:
         75:7e:3c:0b:35:cf:16:a2:45:e6:c5:73:9f:ab:19:98:17:1f:
         92:7f:fb:c7:34:a0:8a:0f:09:b0:19:44:1d:2d:33:d6:5a:5b:
         01:6c:f8:58:82:31:4b:1f:57:34:30:17:4a:c0:9a:dd:ed:5a:
         65:80:06:15:db:6f:e4:9d:a9:d3:63:85:d5:90:e9:50:28:ed:
         78:7e:96:3e:5d:f3:6e:93:12:6c:7e:a8:bf:66:55:c7:d2:a4:
         93:a9:1a:5a:25:be:ad:78:41:4c:8f:00:92:a1:6d:4f:ee:c4:
         44:80:32:12:70:41:8d:bb:77:60:2b:8f:6d:ff:1d:00:0f:90:
         44:2d:d9:5c:42:5b:3f:ef:9b:30:e0:2d:fd:6f:3c:1f:11:fb:
         14:eb:e3:88:62:5e:86:da:dc:e1:c4:b8:90:50:30:a1:1c:dd:
         14:e4:c3:ed:79:65:1f:5c:cf:fe:a7:7e:fa:d3:08:39:ba:c4:
         b1:0f:89:b3:57:34:60:5b:6e:51:35:0f:ad:85:33:91:24:d0:
         a2:89:7c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----