Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313034303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a313034303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /4+NjRRq0p1M9BPh3GyeWw3J6KUwNZoKIcyZ4ELUOHs=
Subject key identifier:   16:10:4B:BD:B5:14:30:12:5A:A8:9D:D9:B5:54:5E:D6:E4:37:1C:3C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4D3696B0B924C3CB4FF1184AF0B4B55D4911F3F5
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313034303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 10:40:01 +0000
ROA not before:           Wed 16 Feb 2022 10:35:01 +0000
ROA not after:            Wed 15 Feb 2023 10:40:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:1040::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:36:96:b0:b9:24:c3:cb:4f:f1:18:4a:f0:b4:b5:5d:49:11:f3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 10:35:01 2022 GMT
            Not After : Feb 15 10:40:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:3e:4d:42:9f:81:06:cd:9e:75:11:e6:ab:
                    21:7e:fe:1a:5e:79:d3:bd:98:63:30:11:c2:0b:2a:
                    e8:93:24:39:59:a7:70:5a:7c:66:c6:98:8e:c7:c6:
                    60:ae:f5:e9:9b:c9:b9:ab:26:fb:8c:9f:5c:53:5e:
                    b1:5e:f8:30:35:e5:ee:f7:7e:9c:7f:c9:aa:8a:0b:
                    9f:31:c5:75:70:30:fb:63:67:c0:98:3b:34:02:7e:
                    b4:68:33:7b:62:03:8d:07:b2:31:8d:6c:8f:9f:b0:
                    6d:bd:0b:d4:1b:f0:7e:cc:ee:dc:b3:da:fb:3e:ee:
                    88:f8:3a:25:23:60:d2:22:16:65:f5:83:ba:54:80:
                    36:57:88:e6:fe:78:8b:4b:e7:9a:ff:03:34:f7:d2:
                    88:4b:7a:0c:45:43:dd:b8:e5:be:62:69:d3:bd:88:
                    28:29:e4:3a:8d:c2:52:a4:cc:02:70:31:14:aa:aa:
                    ae:f1:09:ad:5a:de:47:cf:b4:31:84:25:7b:d5:f7:
                    c7:b8:16:fa:26:34:33:6b:22:e7:ef:79:0a:8f:32:
                    6e:4c:86:e2:e5:3a:55:6a:9c:c7:b2:e3:8c:fc:a8:
                    c3:5e:17:02:61:20:d4:58:53:9e:36:c3:13:5a:06:
                    d9:cc:f4:9f:09:15:68:34:55:85:b5:cc:43:9b:f8:
                    4c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:10:4B:BD:B5:14:30:12:5A:A8:9D:D9:B5:54:5E:D6:E4:37:1C:3C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313034303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:1040::/80

    Signature Algorithm: sha256WithRSAEncryption
         28:29:ff:ad:1b:66:c0:ac:f6:b1:bc:21:fa:7c:f7:cb:c0:4a:
         44:9f:36:13:54:a6:25:ba:34:84:8e:8f:48:cc:86:2c:65:b0:
         30:b2:7a:20:5e:4e:92:f8:66:d6:40:31:dc:1f:ec:0c:3e:c3:
         7e:f3:f2:96:b6:31:5c:07:91:5d:b1:51:6b:86:e6:52:1c:87:
         49:a3:c2:48:a5:71:b4:36:f6:4e:f7:11:79:61:14:3d:d7:65:
         70:a3:cd:a6:48:2f:18:03:5a:da:d1:25:f2:f9:3a:5e:b2:ce:
         a9:fa:d7:76:22:12:c0:05:08:07:e2:d1:d8:09:88:c1:eb:36:
         e3:f0:5c:88:1d:3a:c7:9b:5e:2c:1f:d0:c7:36:3a:40:f4:ed:
         d3:3e:59:d8:63:17:84:80:8f:9a:95:b4:b2:9b:2f:30:b3:a6:
         bb:86:88:8c:0d:06:9e:5d:1a:be:f3:2b:be:06:e8:bb:f7:71:
         47:5a:f6:c8:3b:48:b5:65:31:ab:97:72:1b:e4:3b:68:c4:f8:
         21:66:d2:8e:95:f9:0f:87:3e:38:62:b6:e9:10:38:3d:f1:b4:
         3a:e8:01:20:3b:c9:1a:1c:f1:dc:30:96:52:7d:27:a0:a9:aa:
         2e:08:c4:80:4e:3c:7c:9e:4e:b7:ff:ea:1e:be:c6:0b:74:e1:
         c6:55:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----