Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313332353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a313332353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          ub1GvtvALAyqUJJxOkhaGqOWB1oPstARD1JcWQm5gcY=
Subject key identifier:   63:5A:88:7C:87:52:AC:7B:44:9B:A6:26:E7:DB:09:98:9D:CA:E9:31
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       61337E3DE579A0B792AE1350FC043FE8E522222D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313332353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 13:25:01 +0000
ROA not before:           Sun 13 Feb 2022 13:20:01 +0000
ROA not after:            Sun 12 Feb 2023 13:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:1325::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:7e:3d:e5:79:a0:b7:92:ae:13:50:fc:04:3f:e8:e5:22:22:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 13:20:01 2022 GMT
            Not After : Feb 12 13:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:d7:24:6b:74:72:cc:03:65:06:f9:5b:9e:
                    12:f0:d3:0c:6a:56:9b:b8:b0:46:5f:03:54:3b:fe:
                    bb:5f:f1:cd:69:07:ff:f8:df:06:83:8f:db:46:3d:
                    b5:e0:bc:2e:57:f2:a6:6d:c9:e3:09:ac:3a:c4:75:
                    57:ba:ca:dc:cb:c8:b1:b2:d7:3a:27:12:4c:d6:e3:
                    a2:28:7f:b3:12:54:aa:70:01:50:c2:0f:09:43:3c:
                    a7:71:d9:f0:43:ec:17:ba:e7:cf:bd:eb:42:93:40:
                    8a:d8:39:66:a3:1e:d8:ef:25:8e:b7:73:71:8d:05:
                    e4:67:9d:9b:79:6b:80:a8:33:2f:f2:ba:ca:e7:62:
                    dc:5a:89:ca:8d:e0:a9:c2:e7:c5:a2:ad:cd:2b:fb:
                    3d:df:54:61:a4:dc:3e:47:5d:2e:21:1c:ea:c2:46:
                    50:e6:67:02:e6:17:27:78:ca:0c:fd:b3:07:c1:09:
                    73:8e:31:63:1f:3b:fe:d5:76:0c:2f:3c:35:0e:20:
                    b5:a9:44:e7:67:cf:1e:1c:21:10:c7:3b:a9:1e:af:
                    bb:c7:0d:75:54:f9:09:dc:df:6c:64:0e:50:13:18:
                    f2:b0:5f:01:d2:7a:8e:f6:fb:68:93:81:7b:0d:11:
                    ba:99:c2:a5:fe:1e:35:21:a1:ac:dd:11:38:a6:d4:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5A:88:7C:87:52:AC:7B:44:9B:A6:26:E7:DB:09:98:9D:CA:E9:31
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313332353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:1325::/80

    Signature Algorithm: sha256WithRSAEncryption
         b2:a2:69:ba:72:ea:89:ba:da:67:f9:de:90:11:33:8f:42:c0:
         46:f3:98:66:dd:8b:a6:8b:a9:38:d7:3f:b2:d5:6a:a8:14:d6:
         fb:07:63:b0:5c:09:c0:55:cb:f6:18:9b:30:26:9b:66:f7:b0:
         3f:b4:90:f2:2b:ef:79:fb:33:6c:27:8c:6d:fa:2c:66:7d:97:
         32:c3:de:f9:72:4c:d3:7e:b6:a4:f8:7c:65:4b:b6:d9:14:bd:
         5c:c5:fe:a2:3c:cd:ad:79:88:ec:17:f8:de:05:4b:69:34:bf:
         06:7d:1d:21:c8:aa:f9:6d:7c:78:56:bd:f5:6a:fd:ff:99:ff:
         a6:18:06:a4:63:1a:af:93:98:fc:ee:f3:60:33:f8:2c:aa:ab:
         b1:7f:f1:b9:06:dc:d9:ef:4d:fa:b0:74:98:2a:9a:e3:12:bf:
         87:4f:49:90:34:dc:cd:d9:a0:6b:62:38:b8:f5:96:12:2a:f4:
         f9:0d:e8:3a:76:86:04:94:6a:3e:32:6d:ca:93:8a:57:2c:fd:
         ba:f1:8a:df:07:ce:53:5b:37:df:8d:d0:41:2e:74:6c:c3:df:
         c7:96:5c:d1:d2:da:f4:2a:73:29:da:aa:47:e8:f1:ba:83:71:
         52:d6:30:9a:d1:2c:4d:c3:07:db:f4:b0:a9:91:b3:2a:70:16:
         ab:39:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----