Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3530353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a3530353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /A4V8Npb+ERGZKFAtuvC22dTDBSDoi47dVIIR5dHV4o=
Subject key identifier:   64:59:91:39:D4:AF:6E:13:0A:69:F9:9F:5A:41:FD:2B:B8:59:27:C6
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       757442D0CE27BC8606888EEB261FDD0A8B5F3B2E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3530353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 05:05:01 +0000
ROA not before:           Sat 12 Feb 2022 05:00:01 +0000
ROA not after:            Sat 11 Feb 2023 05:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:505::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:74:42:d0:ce:27:bc:86:06:88:8e:eb:26:1f:dd:0a:8b:5f:3b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 05:00:01 2022 GMT
            Not After : Feb 11 05:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:6e:2a:2a:81:2a:b2:fa:5d:86:15:b1:6d:
                    5e:b1:83:ce:b2:6b:14:12:ce:15:a4:14:4f:6a:54:
                    ad:8b:2a:5e:f6:9e:ae:13:eb:27:3e:c9:bb:94:bd:
                    69:c9:cc:79:f5:40:b6:35:c5:dc:fc:36:ab:76:80:
                    5d:e4:52:83:e5:61:1d:54:2a:a9:40:41:3c:d9:20:
                    93:d9:d4:8c:fb:d2:20:15:ab:2f:95:a4:49:3b:44:
                    ff:b2:81:33:9f:80:ad:b0:48:a3:19:2d:81:89:0b:
                    b9:32:77:a1:72:96:17:cb:76:ed:0e:13:f9:05:09:
                    1c:50:f8:c3:a7:57:d0:a7:66:a6:09:bf:b0:1b:07:
                    eb:67:19:88:8d:72:75:71:a8:a0:20:f6:3c:03:25:
                    4f:36:4d:07:63:0d:0b:f4:e9:41:48:49:46:cf:0e:
                    a3:9b:9a:b7:fb:f5:69:7c:d3:da:cc:e7:8a:4d:26:
                    71:4d:5d:fe:af:e9:80:46:01:d4:61:58:ce:43:d6:
                    84:9f:99:1a:c5:73:f5:b3:7d:5d:81:66:0d:bf:f4:
                    3b:0e:7b:82:10:73:12:6f:82:5f:20:8d:e5:9e:df:
                    71:0b:84:16:d7:5f:0c:82:04:23:a3:c3:c9:d8:10:
                    95:cb:27:11:60:05:22:ff:ea:0a:1e:b9:58:d6:76:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:59:91:39:D4:AF:6E:13:0A:69:F9:9F:5A:41:FD:2B:B8:59:27:C6
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3530353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:505::/80

    Signature Algorithm: sha256WithRSAEncryption
         9f:97:f1:6e:62:b0:3b:2d:68:27:4e:83:5c:fa:cb:b7:66:d8:
         30:94:45:52:28:ec:95:9c:0f:52:a2:87:3b:4c:cd:30:2b:13:
         7b:7d:a4:1f:2e:e9:56:e6:83:4d:5d:f4:d7:26:70:a7:83:3a:
         32:97:06:bc:38:1f:09:7a:32:86:87:74:1f:08:ad:71:99:15:
         88:31:57:82:f6:b9:d4:df:40:9f:ef:f2:93:8d:df:4a:5b:94:
         be:a5:53:92:2f:a8:48:6b:5d:db:27:37:18:35:d6:d3:51:f2:
         ac:03:f2:a3:6b:52:57:0b:42:af:2e:74:f8:0b:dd:d9:a9:78:
         4b:15:11:c6:e8:51:ea:2c:25:a2:e9:46:ac:c9:ae:73:a3:80:
         00:c5:b6:ce:a7:4a:b8:e6:0c:b0:6e:61:d0:13:2a:79:de:df:
         8f:9d:7e:94:e1:b5:e1:57:83:88:94:f4:ec:e9:4c:1d:60:59:
         d0:06:01:41:ac:72:b3:84:fb:cd:3d:8a:d1:ca:fa:7a:ff:30:
         ff:93:51:e0:01:b7:db:fa:fd:c8:6a:02:78:93:82:85:5e:28:
         34:b6:10:e2:90:de:9b:09:f0:f9:05:7e:67:fe:3d:0a:27:77:
         4b:c9:55:81:a7:a9:60:69:68:50:23:69:39:80:de:32:74:22:
         4d:87:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----