Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3533353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231353a3533353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          19l2GVkD1A8L1fihI3l47xSYVYayaD0A6JLOyT5fxQg=
Subject key identifier:   A0:F3:F1:CB:49:41:65:BD:1F:3D:67:EE:69:AE:12:89:74:01:5F:D0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6348ECC9BA1C0152B4D616814818D7D277B26543
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3533353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 15 Feb 2022 05:35:01 +0000
ROA not before:           Tue 15 Feb 2022 05:30:01 +0000
ROA not after:            Tue 14 Feb 2023 05:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:215:535::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:48:ec:c9:ba:1c:01:52:b4:d6:16:81:48:18:d7:d2:77:b2:65:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 15 05:30:01 2022 GMT
            Not After : Feb 14 05:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:94:68:07:f8:a7:fa:21:2d:61:9c:3e:9d:55:
                    b9:24:ed:39:b9:da:1c:df:20:78:bd:6f:38:81:35:
                    7a:c0:43:4f:d5:43:b9:ac:ed:c7:34:7a:43:1d:12:
                    e4:57:97:81:ee:a3:ff:f6:ad:37:d1:db:e9:ea:fd:
                    19:ae:34:9a:13:a0:ab:88:f6:91:2c:a0:7b:f6:e6:
                    2f:66:df:fd:d0:10:47:d4:8b:fa:d9:74:b5:a1:18:
                    06:2d:66:3e:cd:93:31:b9:a7:d1:78:45:01:00:64:
                    d0:e5:3d:28:43:36:78:ac:6f:bf:0e:a7:fe:8f:c5:
                    c6:e0:f2:22:6e:a2:65:e3:f4:0f:5b:ba:1a:a5:04:
                    34:d0:5b:04:c2:cc:2b:3d:0c:64:1a:c4:bb:bc:16:
                    b6:f8:90:02:37:d2:f5:fc:86:f1:fd:da:09:7a:4f:
                    a5:41:d0:64:74:1f:b1:94:7a:61:9b:31:08:22:f6:
                    d3:43:c6:0f:2f:4b:ae:ee:7a:b5:5c:38:c3:03:e6:
                    ed:87:04:58:d9:cb:dc:da:44:44:21:20:dc:33:c4:
                    d8:3c:6e:6f:2c:fe:d9:ea:83:0a:dc:c1:53:b1:91:
                    c9:56:e7:f8:b8:c0:0a:f6:20:fd:25:ea:38:f7:32:
                    20:76:fd:96:5b:8a:a1:b3:1f:31:21:e8:ab:e2:f6:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F3:F1:CB:49:41:65:BD:1F:3D:67:EE:69:AE:12:89:74:01:5F:D0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3533353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:215:535::/80

    Signature Algorithm: sha256WithRSAEncryption
         47:97:3b:f1:ce:47:b6:23:45:32:28:17:8d:84:cf:95:47:7b:
         b5:e6:1a:3a:d1:c8:aa:14:6c:96:c7:41:27:88:9a:21:0f:4a:
         e6:4d:ee:3f:44:c9:12:bd:fd:16:56:f3:a1:67:75:59:0e:46:
         62:b3:77:3a:77:a1:9f:2b:b8:d1:91:8a:9a:c8:61:b5:8a:1a:
         4f:0a:ba:94:f6:dd:b5:4a:81:77:8e:7d:34:dd:ac:6b:1b:4b:
         57:c5:8f:4b:c3:4b:4a:59:6f:67:3f:19:4e:ea:d1:45:3a:1d:
         d2:b5:39:d3:0a:1c:76:ba:9e:e8:05:99:25:24:4a:a8:66:de:
         a0:f6:3b:8c:89:bf:74:2a:68:8d:c4:8a:6e:d5:72:e8:e4:17:
         69:94:ae:ab:f3:7d:bf:d7:30:e2:05:95:8c:7e:8a:46:4d:60:
         eb:8e:75:dd:b0:e4:9d:30:b0:ce:01:03:7d:6f:0c:91:18:f5:
         b3:18:34:75:9a:7e:21:d4:d5:cc:21:49:e1:bf:67:6b:10:c2:
         a6:34:26:fd:b8:0e:0e:0e:83:a0:4e:1b:5d:67:7a:89:9d:1b:
         d9:34:31:63:20:ea:e2:c9:71:a1:04:d8:26:89:ba:1f:1e:2a:
         b0:5a:25:f3:b2:46:39:d5:02:1d:12:05:3e:3a:2d:eb:7d:5f:
         4e:3e:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----