Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323131303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a323131303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          FYeV7Wbtyjjg+jNpjb8TzJg0vVmgBMFKjFvydE3KW1o=
Subject key identifier:   CA:75:26:5F:0F:E1:C1:99:07:40:B8:59:16:3F:3E:8E:C2:25:CE:C5
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       53195E90EA0A324A905E032C3EEA86F221F3FF74
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323131303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 21:10:01 +0000
ROA not before:           Mon 14 Feb 2022 21:05:01 +0000
ROA not after:            Mon 13 Feb 2023 21:10:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:2110::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:19:5e:90:ea:0a:32:4a:90:5e:03:2c:3e:ea:86:f2:21:f3:ff:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 21:05:01 2022 GMT
            Not After : Feb 13 21:10:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:52:f4:35:6b:cf:4d:db:ba:03:ef:01:7e:
                    dd:58:a9:34:53:e2:b4:da:e7:b8:29:85:09:92:2e:
                    7a:34:5e:c0:24:39:02:9b:a6:31:dc:ee:24:3f:e4:
                    09:12:93:16:03:d1:98:ac:bd:1c:62:f0:f3:12:69:
                    1d:4c:40:15:ce:5d:5a:86:c7:50:cf:f8:ed:b6:49:
                    00:4b:40:51:8b:8e:1a:b3:0b:20:93:8d:b8:c4:e3:
                    00:e1:8c:0f:f5:78:3e:5d:7b:e0:74:5c:00:01:a9:
                    1c:c5:06:c8:d2:79:59:ec:56:03:6c:66:08:da:40:
                    c7:eb:90:9f:87:eb:d2:79:3c:09:f4:fa:53:20:79:
                    6b:d3:e0:ba:06:b3:e7:0c:b5:3b:2c:5b:82:fc:6d:
                    9b:d3:f3:8a:2e:6a:83:6e:11:31:80:3c:db:22:c5:
                    d8:7b:f3:08:62:49:02:05:0b:87:3e:b8:22:83:3e:
                    aa:0f:9d:fc:08:7a:30:06:79:fa:cf:05:80:0d:4e:
                    35:26:c1:91:54:da:77:68:86:e0:11:8b:5a:c5:5c:
                    20:d2:9f:fb:10:28:87:b6:f6:54:26:dd:6b:f7:59:
                    14:e0:7e:7b:ce:14:7a:cf:21:53:06:ca:61:e6:ee:
                    56:9c:4f:65:60:ef:6d:2e:00:ef:f2:5b:49:76:55:
                    3f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:26:5F:0F:E1:C1:99:07:40:B8:59:16:3F:3E:8E:C2:25:CE:C5
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a323131303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:2110::/80

    Signature Algorithm: sha256WithRSAEncryption
         78:98:b6:f2:62:ed:0b:5b:4b:82:1a:62:24:1a:02:4a:58:4c:
         38:50:0e:08:e7:fe:12:dd:c4:6b:a5:f6:0c:ef:a3:1c:8f:05:
         0e:70:0b:ed:f3:df:a3:aa:7e:8c:8f:b7:f2:a5:52:15:82:35:
         b8:f8:7b:a8:28:26:8a:b7:c8:d0:cd:b9:0e:32:eb:a0:bf:61:
         d4:88:ca:ea:01:4b:8b:54:b6:94:62:a5:05:25:c6:74:61:4e:
         bd:ba:12:37:80:88:dd:1d:08:fb:ee:cb:66:6f:b6:72:6f:88:
         ec:17:16:4f:5d:ad:36:f3:4b:e3:88:d3:01:95:62:b4:94:d8:
         2c:a8:7a:d7:d8:62:45:b0:de:cc:52:d5:64:ef:0b:ba:25:48:
         b9:fb:66:29:b7:06:e6:cb:55:28:0e:84:72:6b:96:8f:62:f0:
         4b:8e:99:83:2c:af:b0:16:d7:6a:5d:80:a7:0e:8b:e0:d1:e2:
         00:4e:52:41:3a:99:7a:a3:17:76:78:46:09:0a:1e:63:9b:a6:
         69:0e:d7:83:3a:ba:f0:d1:4a:da:27:29:bb:37:8f:42:e2:96:
         bf:d8:89:78:fd:b0:f7:8d:23:43:52:7e:a5:a6:eb:81:ca:71:
         af:8b:b4:f8:cf:9d:a9:74:8c:77:9a:7e:2d:f1:92:03:08:3a:
         dd:8f:75:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----