Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a35353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a35353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          6oNLFC/BaDIqgfZUi8TD6kYfQicPUe6NH2vAffxse1E=
Subject key identifier:   5D:74:17:45:B0:A0:9E:95:75:A1:C6:93:75:1D:2F:77:03:BA:F5:E3
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5AB13DD41FC779E9D38A34C866306A1B24B92EB5
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a35353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 00:55:02 +0000
ROA not before:           Sat 12 Feb 2022 00:50:02 +0000
ROA not after:            Sat 11 Feb 2023 00:55:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:55::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b1:3d:d4:1f:c7:79:e9:d3:8a:34:c8:66:30:6a:1b:24:b9:2e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 00:50:02 2022 GMT
            Not After : Feb 11 00:55:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:d3:39:59:0a:94:9b:4f:a9:f2:cc:b3:02:
                    08:0c:8e:6d:25:75:80:e2:25:b9:21:56:96:13:96:
                    cb:e9:22:dc:c1:b6:c0:e3:57:59:5c:37:db:84:15:
                    ae:23:0c:ed:52:1f:05:19:0c:5c:1e:7e:b9:ec:42:
                    b9:40:68:c0:13:e2:23:14:78:4d:7d:19:4d:a7:35:
                    4f:c2:14:98:f1:0b:c3:b8:77:b7:55:11:37:fc:11:
                    94:fe:20:69:38:50:04:97:45:a3:bb:d5:c5:d7:07:
                    75:18:c2:85:6d:0b:d5:fd:cd:5c:1e:0a:cb:3e:14:
                    ee:25:f8:14:d2:07:3a:86:eb:7a:5b:4b:bf:e1:b8:
                    c1:71:2e:7c:21:89:a2:b8:6b:e6:11:64:54:5a:a8:
                    e1:f2:c9:21:a5:c5:1a:e9:e7:4f:ba:c0:2c:f0:05:
                    16:d7:0d:71:ca:b8:f3:e3:e9:e0:ff:f7:1f:18:45:
                    39:9a:ff:4e:a2:52:f5:27:06:03:2f:fc:04:76:60:
                    5b:0f:17:3b:0e:7f:12:f5:a7:29:05:24:2c:d6:38:
                    6a:06:5d:7a:6c:43:d8:86:4c:c3:b6:29:28:2f:42:
                    8d:c9:51:b6:24:75:0e:72:79:d8:1f:35:1e:e5:14:
                    2c:71:b8:dc:50:1d:20:5f:e4:e0:26:b8:1b:df:33:
                    2c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:74:17:45:B0:A0:9E:95:75:A1:C6:93:75:1D:2F:77:03:BA:F5:E3
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a35353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:55::/80

    Signature Algorithm: sha256WithRSAEncryption
         17:e7:ac:af:fd:3b:0a:94:bb:04:b2:8d:9d:f0:f7:6a:ae:af:
         64:41:8e:3c:d2:e5:c5:51:69:7d:57:6d:42:1c:fd:79:4c:8c:
         94:f4:42:83:5b:6f:df:30:48:16:58:5d:9f:bf:1c:e3:ad:25:
         ab:2b:eb:f4:ce:8f:e6:8b:b7:11:d1:fc:ce:a4:7e:56:68:7f:
         0f:92:47:37:dc:b5:67:07:d8:14:26:9d:b3:dd:3e:31:40:28:
         93:d1:39:1d:bf:56:da:49:09:53:b5:44:63:3a:0a:7b:48:24:
         7b:66:10:cf:14:a9:97:d8:13:34:eb:61:51:e7:43:d5:7d:f1:
         64:d5:84:7d:b6:bb:33:b6:ab:22:ff:03:14:6b:fc:dd:18:fc:
         87:26:8e:5d:50:01:da:b8:38:03:42:8e:02:db:80:f7:6a:ba:
         02:e5:2f:d6:d9:1e:84:6e:2d:cf:23:81:e4:f4:6f:17:de:de:
         df:23:0d:0f:0d:b0:03:82:a4:8b:1c:62:67:27:07:4a:39:a6:
         d7:6e:0e:cd:ba:cc:dc:89:b0:a0:a5:57:84:61:43:7f:27:9f:
         60:ce:ba:ed:55:90:fa:c0:58:49:ef:28:77:f2:28:a0:b8:7c:
         2f:c5:3f:c1:72:97:84:de:85:40:9b:87:55:12:a6:35:f8:49:
         ea:7c:4c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----