Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313632353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a313632353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          iqB+63aUDTOTvqGgRfeEQmclQKjj7gvi0FjsYaY1A4Q=
Subject key identifier:   3B:8C:8A:15:8F:11:61:0E:B2:0D:53:64:DA:25:78:E6:D9:BC:10:7E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       40F671B6CAC30D8EEBA719D22376B6F879753735
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313632353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 16:25:05 +0000
ROA not before:           Mon 14 Feb 2022 16:20:05 +0000
ROA not after:            Mon 13 Feb 2023 16:25:05 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:1625::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f6:71:b6:ca:c3:0d:8e:eb:a7:19:d2:23:76:b6:f8:79:75:37:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 16:20:05 2022 GMT
            Not After : Feb 13 16:25:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:bc:d4:8a:0f:93:b1:32:b3:5f:cd:67:07:
                    15:ed:2c:ae:9e:7a:b3:67:b6:3d:a1:23:24:93:65:
                    96:e9:df:bb:98:a9:dd:27:63:20:80:e8:81:a7:10:
                    54:82:96:2e:51:d4:29:3c:ae:03:62:79:7f:06:0c:
                    c7:c3:0f:0f:3b:be:75:22:32:94:7d:ba:d0:df:99:
                    97:d8:ce:2d:dc:45:dd:ac:9a:3f:ec:a0:cd:b4:3c:
                    0d:a6:ad:a0:e0:9c:83:68:11:d5:e4:1e:e3:8a:4e:
                    cf:db:d0:d5:f8:29:6e:26:0f:bd:f2:2e:5a:bd:30:
                    be:05:c3:79:95:8b:e8:fe:28:9d:b9:be:22:ea:25:
                    18:46:81:79:d8:ef:25:eb:d5:4e:a0:a3:69:d1:6a:
                    83:58:1b:da:59:f6:73:88:c5:9f:03:1f:22:a9:e9:
                    00:1a:73:0a:1a:ce:62:d3:e2:3e:01:9f:c3:ca:14:
                    4a:af:64:2b:10:18:8e:94:79:d8:78:5c:f6:0e:e9:
                    97:7c:af:ba:23:6f:e8:dd:9c:57:a0:cd:32:a4:5d:
                    3a:da:c4:e3:69:36:f5:91:42:58:7e:fa:0e:29:b4:
                    54:ae:19:ea:3c:78:cd:af:32:73:40:55:77:7a:77:
                    c7:cf:ab:43:06:39:98:ea:4c:f5:0c:87:03:db:cf:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8C:8A:15:8F:11:61:0E:B2:0D:53:64:DA:25:78:E6:D9:BC:10:7E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313632353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:1625::/80

    Signature Algorithm: sha256WithRSAEncryption
         60:46:b1:e0:9b:b2:40:3d:b3:29:f2:57:2f:75:9c:72:2b:0d:
         56:6e:30:f4:ef:eb:7a:d9:54:e1:a4:73:82:1b:fa:d7:a9:30:
         16:15:b1:72:07:a7:87:2c:57:b7:e4:68:17:fa:06:2e:f3:ce:
         a0:e1:56:40:24:e6:29:d2:fb:86:7f:d3:4d:bb:ea:de:a6:b3:
         bc:79:e9:d1:91:a8:b1:53:48:8b:8a:60:97:9f:ab:83:60:92:
         a0:91:18:ed:a9:9f:f6:b3:fa:be:73:d3:cf:8b:cc:7f:d0:d4:
         33:47:41:86:2d:6d:da:89:4f:25:b6:92:28:86:70:ec:05:0b:
         b4:1b:ef:15:9f:96:de:b4:da:c0:61:2d:e5:5b:2e:34:6c:89:
         23:25:af:78:53:8a:11:9b:41:64:7c:88:1c:5a:af:8e:b0:b5:
         f6:b9:75:9b:c0:d0:ba:2a:58:af:3c:0d:74:60:47:47:fa:7a:
         cd:14:e5:ba:0f:7a:6f:cc:6e:1d:94:a6:c7:7d:f1:3c:c5:48:
         48:8b:d4:54:dc:e2:b8:43:6c:d8:fc:ef:d5:de:15:a4:7c:ab:
         13:f8:e2:4e:f0:d9:89:d8:d2:a5:cd:61:e0:6f:95:fc:76:c7:
         e1:ee:91:83:5f:16:6c:44:10:51:2c:87:e5:1d:9b:cb:4d:e6:
         eb:79:ff:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----