Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313230353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231353a313230353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          QE0+GgyP+o50FCYd+yhlFEpoMDpGX8DcGcebY/imZB4=
Subject key identifier:   5D:0E:55:BF:15:03:C2:0B:51:BE:B9:C2:72:33:90:93:0D:70:E5:3C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       238D8CD002F23ADBC0493EE3A8183BF59832657F
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313230353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 15 Feb 2022 12:05:02 +0000
ROA not before:           Tue 15 Feb 2022 12:00:02 +0000
ROA not after:            Tue 14 Feb 2023 12:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:215:1205::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8d:8c:d0:02:f2:3a:db:c0:49:3e:e3:a8:18:3b:f5:98:32:65:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 15 12:00:02 2022 GMT
            Not After : Feb 14 12:05:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:c7:42:66:cc:0e:06:22:2b:a9:4a:b0:34:
                    d5:cb:d5:59:87:dd:60:80:1d:9a:6a:05:33:85:a1:
                    ba:83:aa:a0:17:a4:39:57:e0:2e:2b:28:cc:33:8c:
                    0d:a1:55:83:98:54:e6:99:97:7a:08:7e:e5:b9:e9:
                    d5:56:f9:66:06:b5:e4:9c:5f:7c:ad:5b:09:9b:c2:
                    4c:cb:6c:98:b4:14:50:8a:d2:95:c5:9d:22:ea:47:
                    8d:24:e9:d7:02:15:69:c3:a4:3e:e5:31:e6:5b:52:
                    5a:6a:fc:aa:b2:69:7a:53:e4:72:b2:c5:14:e3:54:
                    ac:2b:a7:f6:59:0f:f7:dc:f1:17:33:d9:13:4a:88:
                    f4:14:43:60:d9:98:d1:79:c1:32:7a:ed:2b:aa:8a:
                    6b:24:0f:3e:2b:33:d7:34:ff:b0:14:bb:15:4d:f2:
                    65:ad:60:b7:a0:6e:51:34:a5:d6:7c:8e:31:6f:ac:
                    e0:32:ae:bb:c9:47:cb:c1:d4:8d:51:aa:cf:da:f8:
                    3b:4b:22:d7:c0:bb:da:27:69:36:fe:fa:4d:62:ef:
                    58:92:07:3b:f4:dd:b4:cd:c0:77:e9:45:d3:ec:88:
                    7b:f8:61:dc:80:df:fe:df:49:4a:85:db:20:c8:d1:
                    11:a6:df:33:b6:5a:f9:a9:9b:1d:1b:cf:f1:27:5c:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0E:55:BF:15:03:C2:0B:51:BE:B9:C2:72:33:90:93:0D:70:E5:3C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313230353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:215:1205::/80

    Signature Algorithm: sha256WithRSAEncryption
         3a:26:f9:14:4c:d6:91:b0:4e:45:b0:d7:90:9e:67:0e:05:a3:
         02:f3:e9:4d:0d:51:b8:bc:b1:b7:b9:1d:12:bf:23:13:32:61:
         af:9a:0a:52:41:33:42:ee:f7:ef:3c:8c:7e:42:64:08:68:42:
         2b:8f:14:0f:ba:67:9c:28:12:8e:31:d3:87:3e:b9:a4:37:1f:
         e3:3a:60:f7:3e:9c:59:d8:44:ec:80:7d:9a:a5:a9:f1:a8:1a:
         f3:62:4e:d5:6e:81:eb:81:e8:56:fa:7c:61:40:c4:4e:73:1a:
         71:82:34:26:76:b7:fc:d3:49:54:a0:af:23:f0:d7:e2:d1:c8:
         a4:da:e6:0c:fd:e8:85:70:92:e9:c7:c7:28:b7:61:22:9c:31:
         28:89:38:58:65:77:bb:d2:4e:ba:3b:aa:1e:e1:71:3d:bc:ba:
         f4:c9:da:7b:05:f5:bf:1d:ed:f1:d2:43:8e:e2:b7:01:b6:7c:
         7f:87:84:3b:b2:10:3b:a6:c2:fc:e2:c6:db:4d:3a:a1:67:2e:
         78:45:a0:e0:14:fd:b3:e8:da:57:c6:5a:af:48:07:a8:76:e9:
         fb:72:4f:08:50:73:eb:54:cf:c9:9d:76:31:11:66:c8:2f:30:
         b4:00:36:89:43:88:d3:48:99:a0:c9:1d:2b:13:8c:e1:e1:c6:
         d8:dc:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----