Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a323131353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231353a323131353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          DuUo8DJt8D1NGCbNM3QWbscGAc8Pc9ZL1qJmA37WASI=
Subject key identifier:   5C:14:AA:23:E2:21:DF:96:5D:92:FC:F1:B6:55:C8:ED:F4:E8:A9:34
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3CEE8D9FC9E4C5E8EC9B255AF05DAD8FD0C86E42
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a323131353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 15 Feb 2022 21:15:01 +0000
ROA not before:           Tue 15 Feb 2022 21:10:01 +0000
ROA not after:            Tue 14 Feb 2023 21:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:215:2115::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ee:8d:9f:c9:e4:c5:e8:ec:9b:25:5a:f0:5d:ad:8f:d0:c8:6e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 15 21:10:01 2022 GMT
            Not After : Feb 14 21:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:0c:fe:8b:51:2f:7c:0b:8d:26:5e:95:89:
                    6a:fc:c9:95:56:02:77:e0:27:4d:1f:5c:7d:4b:ad:
                    da:56:93:d7:40:bf:ff:fc:eb:0b:f5:c5:f9:80:e2:
                    cb:ff:c3:f4:3e:44:1e:52:a9:2a:6d:b2:cb:94:31:
                    66:35:d2:0c:8d:0f:35:86:ec:7a:31:00:e7:13:34:
                    27:6e:a9:56:8a:10:e8:6d:17:09:76:6c:84:03:99:
                    ec:75:33:74:75:e5:08:b1:5b:ea:7e:42:28:36:86:
                    f4:88:f7:73:ef:1f:4e:d7:98:27:32:ae:c1:2e:eb:
                    f3:f4:74:60:33:5e:9d:8f:23:22:ee:9d:5a:d1:ad:
                    17:ff:45:24:61:96:14:83:a9:a5:9b:d0:77:96:71:
                    a8:c0:58:06:3a:79:87:68:15:c4:2c:13:46:56:75:
                    b0:a0:b7:1e:d7:f5:8f:2a:84:a6:a1:b5:ff:cb:d1:
                    91:a6:fb:20:bb:6f:77:58:a8:40:b7:7f:e6:81:88:
                    db:97:02:40:0e:1a:f4:f6:38:fc:d8:bf:7b:25:55:
                    c8:a7:e9:8e:c7:15:ab:80:f6:69:84:fa:41:17:7e:
                    ac:61:e6:4b:bb:f6:b1:02:8d:8e:1b:9a:94:a6:d7:
                    1d:26:2d:d8:f2:a3:3f:7b:4c:fe:c7:4c:17:ca:15:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:14:AA:23:E2:21:DF:96:5D:92:FC:F1:B6:55:C8:ED:F4:E8:A9:34
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a323131353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:215:2115::/80

    Signature Algorithm: sha256WithRSAEncryption
         41:f0:67:13:a2:31:41:16:96:ce:ff:85:63:be:64:e9:07:3e:
         d7:3c:46:5b:76:7c:a9:6d:e9:c3:f4:f3:1b:13:a4:62:29:eb:
         37:06:fb:a7:7f:60:58:a1:17:8a:a2:aa:a7:bb:79:b2:c4:e0:
         57:3b:28:14:38:5a:b4:20:81:46:bf:d4:fa:c1:1d:ea:62:af:
         af:4d:64:5b:a5:2b:82:8f:a8:19:c6:c9:34:90:6a:ce:a1:71:
         e0:08:00:83:e4:5b:69:c0:6a:f8:09:9f:d1:ae:a1:cf:2d:61:
         c6:94:6a:4f:6c:33:e0:65:e8:d1:ae:fd:61:cb:ac:c1:a4:99:
         91:45:08:1d:95:27:47:61:9f:1c:dc:47:c6:c4:e1:39:33:18:
         ec:d7:3e:8c:ca:bf:68:34:94:9b:1a:0e:ca:44:5b:de:0f:3a:
         bd:2a:22:39:2f:dc:32:80:56:ed:a5:68:81:db:51:e1:21:85:
         ff:b4:2f:03:94:f0:28:95:60:d3:e1:c6:e8:29:33:06:aa:95:
         a3:5e:2d:3a:e3:77:ef:12:3e:01:01:f1:bd:cb:21:cd:99:d0:
         8a:be:83:26:a3:ac:67:98:7f:7d:49:50:51:7e:ad:c8:d0:66:
         93:4e:27:9a:32:59:88:94:f8:8a:eb:62:07:0f:4a:71:22:90:
         f2:eb:84:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----