Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313230353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a313230353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          m75IyPbOqHWPQE9KFYDUBHSrXSNrgxMPJEckOimPZz8=
Subject key identifier:   D3:39:38:F1:04:3E:26:08:6C:59:C0:FD:D3:6E:C9:A6:AD:65:0C:18
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       010BD7DD9CB197888ABD6578F426FAA597EBC198
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313230353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 12:05:01 +0000
ROA not before:           Mon 14 Feb 2022 12:00:01 +0000
ROA not after:            Mon 13 Feb 2023 12:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:1205::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0b:d7:dd:9c:b1:97:88:8a:bd:65:78:f4:26:fa:a5:97:eb:c1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 12:00:01 2022 GMT
            Not After : Feb 13 12:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:7f:b3:22:a3:0b:df:bd:4e:4b:79:93:c1:
                    c1:d4:e9:f3:de:3e:0b:84:f9:0b:16:a8:14:07:18:
                    9e:86:98:8c:46:2e:b7:08:77:71:0c:69:33:78:7a:
                    34:33:39:76:68:4a:28:1c:25:a0:7c:58:3f:bd:e4:
                    2d:45:95:73:42:73:6e:8e:38:1a:6f:d5:fe:b8:c6:
                    c6:9e:df:ff:eb:bd:53:32:36:dc:f3:ee:1f:db:2c:
                    06:42:ce:c7:ed:57:ac:b6:36:7c:6b:9d:65:c6:52:
                    01:2e:11:f8:98:ff:fc:19:af:b7:90:73:84:ce:44:
                    98:fd:f5:e7:b1:13:d0:04:0d:32:14:5e:2e:e0:c1:
                    23:10:db:f0:9a:e5:b4:b5:99:98:10:32:b8:c3:c3:
                    e8:91:16:cd:fa:44:3e:a7:98:4b:20:9a:7b:aa:b0:
                    ac:95:c9:01:db:d2:c9:c2:61:f4:74:a4:66:6d:8c:
                    a7:40:0b:9d:0a:81:d3:6e:75:d8:30:9f:b6:c8:9e:
                    f4:35:5c:e5:5c:25:8b:37:cd:33:52:b5:66:13:31:
                    81:90:c6:c1:5a:76:cd:bc:68:64:5b:b0:b3:cf:50:
                    f9:53:17:f2:0e:7c:ae:ab:ee:5c:9c:cd:b1:1d:38:
                    4f:cb:df:9a:28:86:47:97:0e:d4:8a:fc:2b:3c:34:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:38:F1:04:3E:26:08:6C:59:C0:FD:D3:6E:C9:A6:AD:65:0C:18
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313230353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:1205::/80

    Signature Algorithm: sha256WithRSAEncryption
         b7:92:10:82:7c:ef:3c:ea:f3:aa:16:31:4b:fc:ad:21:7a:06:
         44:47:e0:43:e5:e7:b5:5b:32:9a:69:56:e0:d2:de:c6:de:b6:
         1c:75:8c:51:f7:28:5b:cf:13:63:cc:e0:6b:b2:cf:cf:db:c1:
         76:d9:8b:b1:84:57:3c:c1:29:28:52:de:3b:28:e8:5c:3a:18:
         a6:0a:5d:8f:f8:a1:e8:1c:6d:b3:98:f0:e6:bc:84:47:23:89:
         60:b0:44:6b:a5:aa:22:6a:07:6f:16:32:db:10:1f:11:5b:3b:
         f4:d1:e7:27:a7:e7:63:f5:2b:6f:d0:ea:c0:7e:a6:c4:27:46:
         ed:8c:80:8c:89:9c:a5:ba:a2:3a:8c:35:d7:e6:e8:dc:ff:9a:
         f7:aa:1a:39:7e:ad:29:c6:bd:fb:42:78:b9:d1:79:72:7e:00:
         27:ea:d4:7c:cb:57:f2:6e:e9:b3:51:0b:a0:4d:1b:35:f0:09:
         73:6e:94:23:b6:b0:13:11:c5:4e:d1:9b:34:d2:ae:4d:47:dd:
         83:9a:e8:e6:74:74:f8:42:d7:82:cc:c7:b5:ba:bc:48:06:2c:
         9a:56:ad:9c:e0:45:cf:23:1e:70:36:33:32:4a:11:a0:d2:39:
         0c:cf:8d:90:0c:e3:f2:da:2f:22:9d:21:d7:6c:d0:61:70:8b:
         08:77:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----