Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3733303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a3733303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          56BLR/n6vCd4NfT7Nm3Sic26bhvWHs7JAfcj025uglA=
Subject key identifier:   0D:D5:AE:38:37:51:59:45:A7:82:7C:D9:26:E6:73:B3:02:14:15:FB
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3DD89D5670A0BF64306EEA006748405CC424A9C1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3733303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 07:30:01 +0000
ROA not before:           Sun 13 Feb 2022 07:25:01 +0000
ROA not after:            Sun 12 Feb 2023 07:30:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:730::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d8:9d:56:70:a0:bf:64:30:6e:ea:00:67:48:40:5c:c4:24:a9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 07:25:01 2022 GMT
            Not After : Feb 12 07:30:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:83:a7:ca:e8:93:f2:98:69:3d:35:fc:57:13:
                    0c:22:8b:66:a0:23:0c:d1:33:38:ec:dc:fe:45:36:
                    e5:fa:98:b7:dd:04:8e:17:93:77:fc:8d:97:13:f4:
                    ab:29:d3:d0:1c:39:4b:aa:59:ef:dc:ca:90:66:4e:
                    0e:17:e2:18:0d:2c:8e:17:58:72:aa:cf:80:d5:87:
                    8d:be:76:e0:dc:e2:72:78:e8:b5:21:bc:43:09:87:
                    e9:39:d5:f6:b3:dd:67:f0:69:9e:f7:2b:1f:99:00:
                    e9:b8:f6:53:f0:15:97:74:01:5c:04:08:47:a9:a5:
                    50:ce:29:66:8a:4c:38:5e:f9:d5:e7:8b:45:35:bb:
                    27:65:5a:51:c1:ca:07:c6:df:01:0e:51:15:08:f5:
                    0b:68:09:05:c5:01:cb:4d:73:19:0b:ef:b4:a6:ad:
                    ca:5a:a6:76:8c:d7:cf:ee:e5:db:2e:fc:12:39:6c:
                    43:fd:1e:47:df:1a:43:72:07:d6:bf:d1:39:9b:cb:
                    e8:66:ae:28:a7:68:75:07:bd:e2:5d:74:10:d5:e1:
                    be:e4:6b:8a:f8:79:2f:1f:97:62:74:2c:82:84:60:
                    3e:d8:5a:cd:e1:aa:2b:41:37:f0:6a:14:2d:1d:db:
                    42:e8:6e:da:14:e8:88:70:7e:4d:c5:09:af:cb:ee:
                    9c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D5:AE:38:37:51:59:45:A7:82:7C:D9:26:E6:73:B3:02:14:15:FB
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3733303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:730::/80

    Signature Algorithm: sha256WithRSAEncryption
         58:23:1c:76:52:a1:56:a6:f4:91:15:b7:ed:31:77:25:c2:db:
         11:2c:f3:f4:ce:81:b8:8b:76:31:ce:6f:5d:83:27:93:60:fb:
         c2:64:22:89:2c:32:ce:23:de:01:0c:a4:44:5c:f8:3e:54:02:
         d5:b0:de:6b:b7:30:4e:8d:65:40:6e:0a:2a:4c:d4:95:e8:52:
         5e:45:be:1f:29:0c:51:bd:ef:24:7f:a5:1b:45:88:6a:7a:0d:
         ea:ca:d6:eb:e1:20:c1:ad:89:99:22:fe:32:7a:21:c8:52:25:
         4b:eb:25:60:a2:ec:5e:dc:33:ad:50:3f:c7:42:fb:7e:f7:09:
         15:9f:fb:54:68:16:69:72:e3:9b:6c:bd:27:d3:1e:05:f9:88:
         7e:cd:6c:26:30:2c:57:cc:ce:f0:ac:02:39:17:50:d3:c4:35:
         26:13:94:40:35:fe:fb:af:95:98:15:c2:0e:bd:72:24:88:77:
         5d:39:cc:e7:47:59:c3:bf:52:30:a2:cd:32:b2:d0:39:d7:bc:
         b7:04:65:44:a3:a2:bd:94:67:c0:dd:98:94:d0:19:8b:84:1f:
         12:19:ca:33:a6:3f:13:ee:42:c2:ab:d4:9d:11:a5:b6:20:0f:
         29:e6:75:24:d9:ae:b0:b1:03:d4:06:9e:34:62:b8:38:52:81:
         37:7a:a5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----