Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3635353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a3635353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          VBu2s6HgeMYBbBflHZxIlklHKRFQa8sEcYLz98Tqd30=
Subject key identifier:   3D:E6:03:9C:08:22:F4:FD:89:92:37:44:47:32:82:B8:58:66:92:77
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       34AD29940410FD36F43A40F6830FF1B806558837
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3635353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 06:55:01 +0000
ROA not before:           Sun 13 Feb 2022 06:50:01 +0000
ROA not after:            Sun 12 Feb 2023 06:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:655::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ad:29:94:04:10:fd:36:f4:3a:40:f6:83:0f:f1:b8:06:55:88:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 06:50:01 2022 GMT
            Not After : Feb 12 06:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:e8:ea:4a:67:df:4b:d4:86:f9:9e:d1:0c:
                    81:a3:ef:38:6f:d8:9c:b8:d8:f0:34:b5:46:e0:b0:
                    67:92:4c:93:ed:cb:df:35:e5:95:51:0f:d2:51:2a:
                    b6:0f:92:8f:0b:47:08:d7:9d:8c:dc:05:61:a8:a5:
                    1f:63:8d:52:d1:b5:e2:a1:d3:c2:7e:36:55:20:e0:
                    cf:53:80:2c:a5:11:4c:e2:49:72:07:90:17:e7:64:
                    16:cd:85:c7:62:fb:04:19:38:46:6b:0a:80:5d:b5:
                    64:0c:8b:33:ab:e1:cf:9d:ec:34:71:00:3b:47:2d:
                    8e:d3:08:24:dc:de:b5:3d:61:c2:83:ab:65:2a:af:
                    b9:43:5e:de:27:8f:45:13:ea:52:ca:5f:30:67:6f:
                    f8:e1:b8:38:bc:89:f0:8a:f1:89:51:1a:6b:1c:9c:
                    bb:53:3c:51:18:11:1f:b6:01:b5:e8:57:27:f9:c3:
                    b9:6b:d8:84:ae:9f:f3:45:d8:02:85:58:00:36:bb:
                    a9:31:72:42:ac:f9:ac:a3:3f:e0:5a:e4:4d:20:77:
                    07:c8:fe:b1:93:ba:ca:f0:e4:81:a9:4b:6d:d6:aa:
                    88:5f:d7:b4:1a:fa:77:75:8b:da:24:2e:81:50:9b:
                    83:1c:70:ac:51:10:45:0c:06:16:7b:d8:6f:47:11:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E6:03:9C:08:22:F4:FD:89:92:37:44:47:32:82:B8:58:66:92:77
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3635353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:655::/80

    Signature Algorithm: sha256WithRSAEncryption
         26:39:25:d8:60:94:96:52:4e:72:14:8b:88:c9:05:eb:60:0a:
         7c:0b:43:ed:62:09:d4:b4:e2:da:26:0d:a2:9d:28:2b:db:1b:
         50:e8:b1:c7:6a:1b:b3:ae:cd:c2:17:da:e4:bf:f7:79:25:b2:
         e5:42:00:2c:f7:d7:1e:4e:83:f6:a1:b3:7b:85:b7:1e:75:d2:
         e5:3a:8a:67:71:9f:c6:70:2f:17:a0:2d:5f:ff:de:01:4c:b1:
         72:49:94:7b:21:98:f4:7d:1e:aa:38:80:61:d9:cf:88:ad:61:
         aa:94:1b:c5:c7:71:c4:bb:15:9b:b3:8a:13:00:cc:42:33:19:
         7b:ec:76:73:ff:8b:f1:67:d9:a3:97:47:a7:29:bb:91:66:83:
         49:2d:0f:91:e9:81:e9:50:f2:d7:88:6b:bb:e9:e1:fc:ab:af:
         08:57:9f:4a:93:0d:27:83:55:89:0b:be:2a:78:a1:96:0e:1d:
         95:aa:fc:d2:38:41:66:5b:17:68:2f:86:c0:5f:02:9b:8e:f3:
         a6:f8:9b:6e:38:ca:d4:3d:bf:ab:e3:bf:7d:68:18:f3:b4:37:
         9f:43:76:eb:6e:14:72:51:61:75:4e:c3:f9:4e:19:55:ce:d0:
         7f:ad:09:3a:18:b4:94:a0:f6:a3:52:fd:c6:3e:d2:e7:bb:e2:
         8a:01:e8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----