Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a323333353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231353a323333353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          PSqmGZcjl15lI0mOXu31owlDGBhlZ7jtToeCAzbM5/U=
Subject key identifier:   AC:43:B0:4D:DE:93:D4:CD:78:32:BD:13:98:39:91:F8:8B:12:24:1A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       03074A8D828B091FEC7FAEFA3F092C413D78BB55
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a323333353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 15 Feb 2022 23:35:01 +0000
ROA not before:           Tue 15 Feb 2022 23:30:01 +0000
ROA not after:            Tue 14 Feb 2023 23:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:215:2335::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:07:4a:8d:82:8b:09:1f:ec:7f:ae:fa:3f:09:2c:41:3d:78:bb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 15 23:30:01 2022 GMT
            Not After : Feb 14 23:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:8f:63:17:e8:c1:be:15:8f:47:a3:e2:c5:
                    36:a1:c6:96:41:40:86:02:17:66:6b:c6:cf:04:33:
                    c0:90:f0:4b:5e:7c:d1:52:2e:db:23:88:66:c2:a6:
                    d2:b9:24:98:ea:f4:54:2f:57:a3:9f:31:f2:59:a3:
                    d5:c5:67:a5:d9:ae:3a:b9:07:f2:aa:13:a3:9f:1b:
                    c6:f1:d1:23:3a:25:52:d9:2d:50:d0:10:34:a9:10:
                    03:af:ab:11:da:d7:20:61:1d:ee:68:23:20:26:9f:
                    35:9d:8c:b9:52:d4:59:fa:1d:a6:6c:09:63:c2:6f:
                    37:2b:32:38:ab:63:5a:d4:9c:0c:b3:a0:15:84:88:
                    50:18:63:ba:fe:eb:a1:1d:cd:e3:42:d8:6a:d8:df:
                    7e:59:ed:59:65:e8:13:d0:66:06:4c:e9:c8:4a:a4:
                    26:89:19:75:fb:18:05:a4:92:ee:b1:49:6c:7e:7a:
                    9e:2f:32:af:62:bd:0a:d2:1e:51:fa:8b:fd:be:35:
                    68:f0:8f:f8:5c:8a:69:21:f1:db:aa:6a:bf:56:16:
                    2b:8d:fc:62:ed:db:30:35:0c:02:be:54:b8:a6:52:
                    c9:a7:d0:f0:7c:d1:19:bf:06:aa:f3:f9:4f:1d:4f:
                    63:0f:28:6c:f1:a6:22:85:ac:8f:17:ae:fe:d4:44:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:43:B0:4D:DE:93:D4:CD:78:32:BD:13:98:39:91:F8:8B:12:24:1A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a323333353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:215:2335::/80

    Signature Algorithm: sha256WithRSAEncryption
         6a:25:e6:fd:9e:32:f6:72:5e:89:02:62:25:4f:10:58:76:fd:
         78:94:99:38:a8:e2:ff:f9:ef:af:fd:75:6c:be:12:f7:c7:dd:
         95:1d:be:61:6c:6b:fe:af:a8:14:ca:d4:09:10:57:95:6a:fa:
         c8:74:4e:80:6c:3f:8f:28:66:28:41:94:4c:cb:dc:3f:8d:dd:
         d9:21:2d:d9:93:68:7b:a2:be:1f:d0:4b:c8:25:cc:8b:0c:d5:
         3a:78:38:a9:be:d8:f7:2b:00:9e:1f:d7:90:ba:3b:02:38:0d:
         f3:b9:3d:84:1f:1d:17:8a:39:b1:e5:d4:84:ec:4b:5e:21:64:
         3f:62:fd:99:f4:2f:9d:a0:08:d3:69:66:31:77:34:65:dd:cf:
         e2:84:09:79:89:30:0b:15:b1:e3:7d:1f:83:7d:4b:a5:7f:0e:
         48:03:6f:06:9b:d7:14:d2:e0:0e:94:3a:c3:d0:12:5b:4b:35:
         0d:df:89:0e:d4:4e:1a:48:97:81:ba:0b:e4:3a:1f:a0:02:8f:
         ff:13:c3:6d:de:63:ef:77:55:05:33:79:f6:cf:f5:09:fa:af:
         c7:7a:2d:ed:47:12:47:cf:3b:ca:50:23:e1:37:34:85:14:43:
         44:20:e6:19:a7:35:bc:30:09:25:b5:8c:8a:fe:b4:4c:9c:11:
         0e:0a:fa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----