Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3133303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231353a3133303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          7uR6Vp0IflaEuhPSf463PivxIUDBfC9dUOTqMVSheXs=
Subject key identifier:   04:C5:59:DA:7D:51:51:B7:63:0A:C9:0F:A4:F6:BB:DB:D4:CE:C4:2E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4E3B6D082ED9E583F9113CE7248BA29B86971AB6
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3133303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 15 Feb 2022 01:30:01 +0000
ROA not before:           Tue 15 Feb 2022 01:25:01 +0000
ROA not after:            Tue 14 Feb 2023 01:30:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:215:130::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3b:6d:08:2e:d9:e5:83:f9:11:3c:e7:24:8b:a2:9b:86:97:1a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 15 01:25:01 2022 GMT
            Not After : Feb 14 01:30:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1d:66:e2:8a:d1:4a:0c:e8:4d:82:a6:bc:34:
                    ff:c8:f7:3e:df:65:f6:ce:3b:f3:66:bc:5f:ab:80:
                    f3:33:d5:7d:96:bd:34:8c:de:d9:05:ca:76:fc:5b:
                    2d:86:09:1d:82:21:ca:87:b9:13:a7:7c:e1:a1:ab:
                    98:ea:89:f6:db:e7:d4:8e:17:60:8d:17:88:6b:68:
                    12:c7:1b:6c:3a:ce:c1:3e:ff:db:b7:2a:a7:0a:9a:
                    4e:cd:42:d9:14:42:93:95:00:b9:97:5e:8b:d0:eb:
                    df:e6:33:a5:aa:a8:df:b8:eb:f1:2c:35:f6:97:c0:
                    63:fe:a7:ac:de:bd:1d:7a:ce:4f:16:65:bc:da:9d:
                    64:82:68:81:cb:97:a3:a1:b0:e6:96:a7:a7:84:42:
                    46:df:06:0b:14:3a:9f:bc:2e:93:1b:ad:5d:80:8e:
                    93:11:c4:c3:93:b3:f8:d9:68:71:55:38:1d:0f:11:
                    9a:f2:3b:5b:2b:92:c0:b4:08:8c:72:a3:45:07:1f:
                    e9:37:a3:23:6b:99:b2:6f:c6:ca:71:05:12:2d:9e:
                    f3:0f:66:67:e6:43:d6:af:8f:c6:e6:15:8a:9f:38:
                    9b:61:91:9f:52:68:94:e0:99:bb:78:59:00:0e:ea:
                    fc:da:4e:07:d1:44:b9:b3:ec:5b:c5:93:82:3f:af:
                    77:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C5:59:DA:7D:51:51:B7:63:0A:C9:0F:A4:F6:BB:DB:D4:CE:C4:2E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3133303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:215:130::/80

    Signature Algorithm: sha256WithRSAEncryption
         a0:c4:5b:c0:b0:cb:39:62:15:78:8a:03:35:86:45:40:12:5f:
         54:f9:05:97:b5:a0:64:59:97:55:3c:68:9d:18:07:e6:f5:36:
         af:10:1a:53:07:67:55:5a:23:2a:5c:7f:42:af:b6:66:70:f7:
         3a:28:e9:00:f2:40:f2:ef:77:18:67:3f:4d:6c:fe:bb:3a:3d:
         b3:48:79:9f:82:22:fb:fa:27:97:ea:2c:93:e6:09:68:2e:9e:
         16:d6:b5:2d:05:e5:df:e4:7e:14:05:59:3c:cd:39:7e:2b:56:
         4b:15:3d:99:83:29:0c:17:03:26:e2:56:55:cf:39:19:88:8b:
         4d:c0:83:2c:11:ac:80:0c:30:88:bc:04:25:60:96:df:52:60:
         12:cb:98:20:ef:05:14:5a:cd:86:12:3d:1f:7a:dd:03:96:59:
         d2:02:eb:00:ad:af:ff:0d:f4:10:c0:ef:91:62:e6:10:da:c3:
         1c:59:76:9d:f7:fb:5b:51:25:90:f0:20:4d:6e:45:08:24:29:
         90:31:64:25:e8:90:0b:cd:01:f3:89:20:7c:41:da:d1:47:14:
         fd:87:f5:8b:9a:04:68:41:e7:47:ad:25:ba:61:b3:07:53:a3:
         4e:ab:85:56:1f:c9:5e:df:e3:5b:11:9d:c1:6a:36:51:ba:fa:
         bd:fa:b8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----