Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313433353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a313433353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          YGlrY4ZAwWrMUjEKxS3MLVS4wb5Na4YWVoMSeSYTDZI=
Subject key identifier:   69:20:8D:6B:36:65:76:3D:82:AB:DF:51:61:F2:16:0A:82:4B:2F:AF
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1A2B149A964D5784D11E3601377286FB42B4AD92
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313433353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 14:35:02 +0000
ROA not before:           Mon 14 Feb 2022 14:30:02 +0000
ROA not after:            Mon 13 Feb 2023 14:35:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:1435::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2b:14:9a:96:4d:57:84:d1:1e:36:01:37:72:86:fb:42:b4:ad:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 14:30:02 2022 GMT
            Not After : Feb 13 14:35:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:a6:ce:55:cc:98:2e:d7:bc:75:34:10:64:
                    f5:20:8d:40:e9:a9:b2:bf:02:c1:d8:9c:21:b8:18:
                    29:35:f7:1c:21:c7:3a:bc:59:0a:72:e3:e1:22:da:
                    f0:70:b7:d6:90:17:79:37:46:24:bc:a0:5c:f2:86:
                    d7:ff:83:71:c4:cb:e5:56:c4:f7:93:c3:b9:31:ae:
                    19:f9:4c:6b:0e:03:29:e0:db:15:56:28:4f:5b:ec:
                    79:0a:85:8d:d7:71:fd:ac:70:b2:86:53:e6:b0:f1:
                    14:71:23:54:39:aa:ff:15:e0:6d:ad:22:c5:3a:65:
                    18:46:83:e3:7e:fd:6c:89:59:41:9f:9c:df:ca:ab:
                    63:d3:d1:5a:e0:13:5e:aa:fd:84:83:50:48:4b:35:
                    a8:ce:c6:e4:a3:67:dc:1a:1b:4f:1c:17:c7:18:b2:
                    26:17:fc:0c:0f:89:ea:bc:5d:33:16:eb:ea:76:d3:
                    86:d9:08:c9:ef:1a:1b:ee:36:b7:03:26:01:2f:92:
                    14:fb:ac:13:57:b4:dc:fb:cb:8d:f5:2a:01:7a:a5:
                    9b:dd:a8:a2:bd:22:b6:86:e3:24:70:1e:7e:78:54:
                    7a:71:37:0f:25:fb:55:d3:a6:25:95:67:d6:b1:8e:
                    1c:c7:4a:6b:1f:e2:d7:8e:d0:f8:14:81:14:87:51:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:20:8D:6B:36:65:76:3D:82:AB:DF:51:61:F2:16:0A:82:4B:2F:AF
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313433353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:1435::/80

    Signature Algorithm: sha256WithRSAEncryption
         a3:b8:85:0b:88:96:89:8c:6a:a9:88:ab:06:1d:9e:ff:4a:f4:
         42:91:d5:80:15:1c:c8:18:c8:c9:af:07:cc:fa:b0:ad:e1:05:
         a6:48:cc:fa:8b:e1:4f:f3:81:f3:37:c2:40:f1:b9:43:6d:25:
         64:c7:5f:58:20:c0:7d:8f:87:0f:bb:d4:3a:50:0c:63:c4:01:
         05:c5:45:63:24:66:e2:39:46:49:3c:21:84:98:ff:43:93:24:
         71:d7:fc:fb:28:64:30:58:38:4b:c5:6a:1d:fb:88:16:ef:93:
         a5:cc:34:e7:97:4b:4d:54:c0:5d:0c:e9:a2:04:d0:e1:be:f8:
         f2:1e:7b:13:51:96:29:91:50:dc:c7:d6:fb:d8:59:34:83:af:
         05:19:a8:99:29:de:9a:de:4e:8b:8b:2b:2a:9e:a2:ef:16:b9:
         60:04:84:e4:b2:e7:18:46:de:05:3b:fc:14:c3:ef:20:14:ab:
         09:4a:b3:a6:72:19:a4:48:1d:7d:20:74:9e:ee:ed:ad:a3:e3:
         38:72:c2:50:07:c9:b9:03:36:25:b0:77:c2:56:5f:ac:09:cb:
         6b:34:85:bd:ab:ad:bf:fc:dd:aa:77:09:af:40:b6:02:ca:48:
         85:3e:d6:ad:b4:0a:72:51:3e:b5:be:77:3d:c2:4d:d9:cb:ad:
         70:04:1e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----