Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3531353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a3531353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          j7nWnRq65L0nCIfKY2fHayYDjoAf1zbtRQHmlj4tSvU=
Subject key identifier:   28:EA:01:22:F6:FD:AE:A9:0F:52:8A:D2:18:1E:24:98:E3:2E:1D:8C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2E036BE9FE2C2D17ADB3C3644085012F51388FD7
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3531353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 05:15:01 +0000
ROA not before:           Mon 14 Feb 2022 05:10:01 +0000
ROA not after:            Mon 13 Feb 2023 05:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:515::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:03:6b:e9:fe:2c:2d:17:ad:b3:c3:64:40:85:01:2f:51:38:8f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 05:10:01 2022 GMT
            Not After : Feb 13 05:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:4b:6a:b8:de:05:86:a6:d1:bd:55:9e:93:
                    d8:9e:0b:39:96:5a:58:8d:44:ca:b6:26:0b:05:bc:
                    59:9e:ea:62:e2:a2:7a:af:ac:77:2b:98:72:1f:d2:
                    2f:ea:c6:04:05:3e:7a:44:7b:4d:10:a6:76:cd:f2:
                    ec:84:31:7f:cc:62:43:0f:32:d4:ac:3f:f3:63:1a:
                    9b:60:42:9a:f5:57:fb:9a:1a:06:2a:eb:e7:3a:93:
                    35:e3:96:3d:33:c2:18:df:71:d6:08:01:d5:0c:27:
                    de:5d:54:09:13:87:45:ef:41:1a:5e:ae:3e:c2:8f:
                    c4:c2:6a:3b:5c:40:4a:4c:34:80:84:a3:c1:7d:a7:
                    13:97:14:a5:57:01:21:eb:77:a6:1f:76:07:e2:0d:
                    a8:f8:a7:08:cc:a5:21:4e:08:cd:87:b4:4c:01:bb:
                    9a:1e:4b:55:52:6c:3a:da:d6:7a:d7:1b:a5:1c:81:
                    64:82:58:f3:c3:0b:2c:93:83:a1:7e:41:70:44:0e:
                    13:f5:1a:16:b8:78:34:6f:82:44:c9:66:5f:f5:2c:
                    73:60:40:a8:55:4f:19:67:99:f6:1c:0a:6b:41:7c:
                    0d:20:1b:e6:a0:0d:ff:c7:60:a9:9b:a6:0c:c4:e6:
                    f1:63:a9:91:5c:2f:94:76:a5:51:90:7c:27:62:76:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EA:01:22:F6:FD:AE:A9:0F:52:8A:D2:18:1E:24:98:E3:2E:1D:8C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a3531353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:515::/80

    Signature Algorithm: sha256WithRSAEncryption
         0b:d6:5f:2f:62:cc:fa:65:fc:f7:2c:90:77:7f:70:9c:d1:a2:
         3c:7d:b6:11:d2:53:f6:e8:98:a6:d7:92:38:99:22:3a:f6:25:
         72:e7:e3:d5:cb:7b:6f:b2:96:63:00:aa:d3:ae:df:19:8a:38:
         aa:1d:ad:1c:d2:04:85:0b:7d:91:08:34:91:8a:5a:f6:9d:01:
         d0:05:a7:d8:43:f7:9c:78:35:ca:94:6e:28:7f:42:cf:32:c2:
         57:fd:13:10:97:ba:04:2f:a2:d7:f0:0a:b9:e4:c4:80:09:b6:
         7a:4d:e2:a9:b9:2e:5d:2c:ae:5c:60:3c:65:a0:9f:42:e1:fc:
         89:92:17:0d:70:95:95:ab:00:af:73:a4:08:fa:97:b8:3d:d0:
         cb:2d:53:a7:6b:1f:1c:e5:76:f8:90:af:ef:90:a1:13:4d:b6:
         92:fa:55:35:64:2c:ac:69:27:da:39:ca:49:ed:d1:ea:c8:de:
         e2:ea:94:2a:8c:4e:0a:2d:55:15:ce:0b:88:f4:2d:95:f0:8a:
         87:1f:63:a6:1d:e0:6d:16:b4:33:a9:d4:91:08:cd:4a:24:0c:
         54:50:f2:ca:cb:5a:ea:a9:8e:3b:d4:97:27:31:77:66:0b:08:
         16:7f:61:93:61:5f:eb:59:2e:b8:4f:48:0e:fc:2b:16:98:9d:
         a7:fb:0b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----