Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3132303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a3132303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          YDaP5dfnVQVFM/ceJjJ/+0mbiHIty9mSNUWp3BozSq4=
Subject key identifier:   2D:2B:D1:FA:84:CE:EF:02:BE:74:36:B2:C4:D6:4E:D1:2B:21:E3:AD
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1D8FB2DBAAFF80306F447A4186656B7341DB8782
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3132303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 01:20:02 +0000
ROA not before:           Mon 14 Feb 2022 01:15:02 +0000
ROA not after:            Mon 13 Feb 2023 01:20:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:120::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8f:b2:db:aa:ff:80:30:6f:44:7a:41:86:65:6b:73:41:db:87:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 01:15:02 2022 GMT
            Not After : Feb 13 01:20:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:2a:f8:9c:85:10:9e:c5:13:e9:8c:6d:fe:
                    fb:b7:ac:c1:f6:df:a5:bb:e3:2a:7d:54:21:f9:d8:
                    8d:d1:c1:f7:4d:0a:af:1c:e6:db:32:90:ec:05:57:
                    c1:f8:65:9c:d5:15:a6:53:5a:86:75:1a:fa:bf:b6:
                    a3:f0:b8:7f:ce:fc:71:98:40:96:99:20:46:3c:26:
                    7e:59:1d:25:8e:23:79:ea:a1:a7:ee:08:38:7f:5b:
                    3c:81:6f:3e:03:50:4b:cb:76:26:99:e6:35:fb:f8:
                    0a:f7:80:16:d2:31:4c:2e:18:a3:1b:25:09:06:47:
                    e8:e7:94:0a:73:65:76:f3:d3:35:b3:77:79:5f:b7:
                    d6:5a:c9:ad:50:8a:1f:1d:04:3e:04:60:22:12:33:
                    d5:28:da:95:e9:08:d8:81:fe:b5:7e:71:76:99:55:
                    6b:b1:c6:52:ee:d5:f3:69:2c:75:85:cd:c4:15:6a:
                    04:27:57:c3:14:66:51:4e:4a:80:96:54:6e:c9:a0:
                    90:fa:48:aa:52:10:6b:75:02:14:56:27:41:b0:21:
                    59:2b:9e:cc:74:8c:67:fe:90:52:fc:55:24:bd:b5:
                    48:db:50:0e:5f:75:c8:53:86:19:b9:59:a4:64:b6:
                    ad:be:cc:68:04:81:a9:ea:0a:49:5d:0a:22:a3:96:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2B:D1:FA:84:CE:EF:02:BE:74:36:B2:C4:D6:4E:D1:2B:21:E3:AD
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3132303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:120::/80

    Signature Algorithm: sha256WithRSAEncryption
         ca:48:e0:60:8d:47:07:49:d2:35:40:53:0a:31:51:45:ae:b9:
         32:e2:e0:bf:f9:f5:71:2e:5c:90:ab:70:f0:e6:19:68:6c:44:
         f6:ee:c5:76:21:c3:8c:bc:9c:01:5a:dc:39:08:b8:61:0d:a7:
         93:8e:fb:a5:3e:ac:61:b4:7b:ba:57:47:fc:c8:48:ed:74:38:
         87:50:59:86:66:0b:59:99:03:b7:25:f1:91:cd:26:ce:04:f8:
         e3:91:ab:d1:fd:f4:09:e9:db:f9:88:4a:84:b8:36:a0:e6:c1:
         66:ee:7e:c1:d1:df:a3:ca:94:ce:da:81:90:65:a0:ce:4b:4c:
         63:65:ee:16:05:db:33:24:a3:79:c0:6f:97:8b:2e:33:33:6c:
         01:6f:09:cd:e0:7b:ae:0c:e1:17:a2:6c:ae:08:3e:b3:d1:98:
         94:3d:a5:2f:14:c6:5a:3b:2b:ae:45:b8:58:fb:3a:9f:67:77:
         a3:5f:f9:f8:4a:a2:b0:32:4f:36:03:b4:6f:c3:45:71:61:89:
         2d:45:d7:06:d7:c0:ee:8e:dc:68:de:a2:6c:a3:07:47:54:3d:
         cf:e1:5a:2f:65:c2:c0:53:32:8c:8f:e8:6d:82:bb:e7:9a:7d:
         f0:2c:06:17:3a:9a:72:f4:1c:af:19:f3:7d:26:a9:92:41:a3:
         1d:9a:f4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----