Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313932303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a313932303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          9d7Yav6+42FsdkJ35ORO38IAA3IP1xvufx3+Rf5wRFc=
Subject key identifier:   90:16:45:A4:03:87:14:71:58:97:DF:EC:17:88:0B:BE:93:EA:7D:08
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       45CECD7C134532969128105A4486DA23A90925E7
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313932303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 19:20:01 +0000
ROA not before:           Sun 13 Feb 2022 19:15:01 +0000
ROA not after:            Sun 12 Feb 2023 19:20:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:1920::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ce:cd:7c:13:45:32:96:91:28:10:5a:44:86:da:23:a9:09:25:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 19:15:01 2022 GMT
            Not After : Feb 12 19:20:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:63:c9:21:f6:4a:36:7a:e2:5d:fc:d6:69:
                    1d:a2:28:14:77:1d:5d:d9:d9:81:b2:50:c9:82:ea:
                    d2:4b:41:04:8c:ec:f1:c3:65:e6:2f:a9:87:2e:67:
                    8b:7f:8f:89:73:ae:a5:f0:8c:1e:7a:5b:d9:a5:1f:
                    32:34:47:c0:cf:8d:13:2f:5f:8b:c0:56:b6:46:ae:
                    34:98:36:55:68:f4:a5:69:6e:6d:52:c3:df:33:87:
                    ce:bc:c7:ba:da:43:9a:c7:5b:be:57:11:71:31:83:
                    94:19:74:76:b2:95:a4:cf:ba:af:83:98:10:76:da:
                    c8:a6:77:49:85:e2:20:96:52:b2:02:a1:4e:16:a0:
                    a8:66:5f:23:42:89:81:23:c0:2e:5c:22:9e:e7:31:
                    1c:4f:95:04:6b:13:f8:07:58:15:86:5d:43:12:1c:
                    ff:60:ce:8c:69:4e:ae:16:0e:a7:8b:09:bd:9b:5e:
                    20:ce:3c:9e:3b:60:43:61:be:e6:5f:58:60:51:31:
                    ed:b2:7b:b1:ee:0c:d4:1b:ee:d1:7b:38:5d:dd:7f:
                    8c:59:fb:aa:a1:3a:94:b3:18:1d:79:78:06:11:53:
                    47:8d:13:b7:25:1b:4b:9e:0e:54:71:0d:51:ca:f1:
                    b5:b8:e4:2a:d7:33:10:8d:45:d6:be:5b:13:c8:c3:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:16:45:A4:03:87:14:71:58:97:DF:EC:17:88:0B:BE:93:EA:7D:08
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313932303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:1920::/80

    Signature Algorithm: sha256WithRSAEncryption
         21:88:54:eb:6c:fb:88:ba:51:6f:a5:ab:6a:20:2d:55:4e:bd:
         ea:54:0c:a2:18:dc:8e:32:58:f2:22:ff:a4:15:2a:bc:54:17:
         6e:f5:8c:af:4c:be:8f:23:6b:54:ce:69:d7:30:1c:6a:51:d8:
         cb:09:66:10:cd:c6:92:4e:69:71:cc:9a:74:e8:c2:23:1e:74:
         6a:ed:5c:55:58:35:1e:10:3d:5a:51:5f:ae:70:4b:0c:79:6f:
         b0:85:9b:50:c0:f8:4c:48:0b:2e:eb:38:7f:ea:30:84:96:e7:
         8e:ae:de:ee:28:6b:80:01:97:74:e4:43:5a:2e:7d:dc:3d:49:
         7c:c6:53:2e:b9:49:f3:a6:48:9a:79:c2:5d:13:09:1e:89:f6:
         5e:63:b9:ec:10:a0:0e:8d:80:4a:a7:1e:d7:d7:11:19:08:41:
         bb:1b:94:8a:a4:1e:24:88:d3:95:e0:0e:65:aa:25:c4:39:36:
         68:e8:6d:a8:22:b3:78:89:34:da:23:ed:2f:51:4a:d4:b6:c4:
         82:8a:86:2e:81:d2:8c:4e:84:c9:45:8a:61:c6:15:7b:75:58:
         3d:4f:29:73:4f:48:f2:6f:76:c6:b9:31:64:50:5b:e3:ba:a7:
         3f:69:af:cd:aa:ac:af:a9:36:6a:40:3c:d5:7e:86:c8:cb:ce:
         4f:e9:b4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----