Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3332303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a3332303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          qycafi7xAr8/zAuKle4YJck9GDmpK7QxHPCGJxRyxOE=
Subject key identifier:   2E:45:0A:83:86:41:FE:B8:84:44:4D:F1:42:A0:48:77:18:D4:AF:13
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5757F1125F713BF2B2B2C4D2E730358BBEB985
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3332303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 03:20:02 +0000
ROA not before:           Mon 14 Feb 2022 03:15:02 +0000
ROA not after:            Mon 13 Feb 2023 03:20:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:320::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:57:f1:12:5f:71:3b:f2:b2:b2:c4:d2:e7:30:35:8b:be:b9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 03:15:02 2022 GMT
            Not After : Feb 13 03:20:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:f9:1c:45:7c:73:bc:ec:62:2f:0e:3b:a6:
                    36:a6:b8:36:25:44:0d:f0:5f:54:fd:42:4a:79:8d:
                    f7:77:65:f5:4e:03:6a:5f:a0:2b:21:b8:61:53:ae:
                    9c:59:6b:a9:14:06:d7:2a:8c:e0:f1:00:3c:92:59:
                    01:17:23:d5:1f:ba:97:54:e8:f1:1f:28:39:e4:1b:
                    e2:8c:18:92:84:92:78:f6:b4:88:5c:7e:c1:55:49:
                    e9:0d:51:e7:bc:f3:2d:bf:50:43:c2:08:04:a5:60:
                    e0:22:61:a7:6f:17:d3:8b:06:3d:28:fe:14:9e:03:
                    e0:51:47:95:9e:7d:61:bb:ed:7f:4f:0b:df:93:bb:
                    1b:ac:42:e6:43:6c:17:02:c1:9c:82:c0:25:b2:f2:
                    f3:f2:e7:a9:fd:9d:84:47:c1:15:7c:86:4a:0c:ee:
                    f5:91:3e:1d:16:b4:7b:ee:80:09:50:0b:b3:ea:b8:
                    ad:e1:0f:1c:3e:92:09:d7:c2:96:8b:80:b8:a3:27:
                    30:19:68:f7:3f:30:ab:e5:17:cf:8f:40:7f:a3:2b:
                    d1:f4:2f:d3:1a:d2:57:52:e5:06:3d:d8:58:8b:26:
                    82:15:3b:cf:ec:5d:fc:b8:3d:91:3c:71:76:18:6b:
                    c3:5b:fd:de:55:95:d0:c6:1c:da:b2:ad:50:84:b4:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:45:0A:83:86:41:FE:B8:84:44:4D:F1:42:A0:48:77:18:D4:AF:13
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3332303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:320::/80

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:85:f0:36:1b:e8:d1:81:0e:b8:d0:5c:e8:88:e3:5e:1c:
         23:09:23:00:53:67:32:0e:79:32:a1:15:3a:cc:2c:00:e0:96:
         e3:68:14:62:8d:b3:1d:ac:9e:17:54:9e:0f:66:a1:ab:d2:5f:
         f8:72:ba:6a:c8:a6:e7:ff:47:9f:2e:9b:44:e6:83:a4:f9:a9:
         5f:0a:f4:c9:60:80:a7:d6:ff:09:86:bf:d2:51:d0:f1:b4:03:
         bd:8b:82:3f:84:13:d0:75:c4:d4:6f:ba:47:43:2c:b4:fc:69:
         b1:c2:57:f2:a7:4c:22:a7:50:b1:2b:3e:9d:b9:4b:e1:c2:3e:
         b8:5c:8d:c1:92:54:b3:b9:27:5f:5c:e3:63:de:f7:af:74:a5:
         c1:0c:7b:ff:24:9b:10:38:37:f1:82:b9:f6:41:ad:80:54:2c:
         23:5a:58:ef:dc:1f:a3:e1:98:64:6e:d2:23:cc:7b:7d:cb:14:
         c3:9a:30:8d:4a:7b:7c:5a:11:dd:79:64:5c:28:48:af:45:79:
         16:46:ee:2c:01:14:13:42:a0:68:58:9a:7d:8c:69:e4:02:5a:
         a7:dc:8e:9e:3d:7d:fc:45:71:c7:75:7a:81:1d:bc:1c:c8:c5:
         ef:2b:1e:3a:89:cd:ae:c9:04:cd:3e:5b:87:1a:36:19:c4:39:
         4e:53:12:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----