Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313235303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a313235303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          pcagf0iiu7hZBrySQE+T9SvBSycxQCW0Z9r/ikqu868=
Subject key identifier:   3D:30:C5:C0:A0:05:0F:2E:98:F5:DF:12:78:DE:B2:AE:33:C5:6B:E0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3A4A22C43A212344C89ACD11A86612260D64821F
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313235303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 12:50:01 +0000
ROA not before:           Wed 16 Feb 2022 12:45:01 +0000
ROA not after:            Wed 15 Feb 2023 12:50:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:1250::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4a:22:c4:3a:21:23:44:c8:9a:cd:11:a8:66:12:26:0d:64:82:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 12:45:01 2022 GMT
            Not After : Feb 15 12:50:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1c:84:4c:7b:23:9f:d6:df:68:38:1a:52:66:
                    05:40:cd:9b:7e:13:ad:e5:66:ce:87:dc:97:69:e7:
                    67:7f:2b:07:2a:8f:4f:dd:0f:63:cc:ba:46:99:e2:
                    cf:38:06:79:38:02:ef:91:20:aa:dd:6f:7c:19:e4:
                    aa:28:a2:b1:82:23:ca:1f:f9:e3:1b:fb:30:fb:97:
                    b9:22:ff:02:50:6a:7d:fe:6c:9a:93:31:1b:09:65:
                    d1:85:79:3b:cd:01:06:26:be:24:88:73:a9:b3:c4:
                    7f:7b:4e:9b:b3:0f:f4:cf:0f:54:dd:60:97:41:79:
                    22:93:73:3d:bc:2f:95:28:7a:b2:46:ee:82:b9:32:
                    d6:35:d0:2b:03:e3:83:20:26:61:d4:33:a4:f4:bf:
                    98:2a:33:b5:3e:34:a1:46:b9:84:80:1a:3a:06:77:
                    21:7d:5a:cb:4f:8a:eb:3e:75:71:69:18:25:2c:4c:
                    3f:fa:20:ef:fa:bb:24:2b:08:6e:95:7d:ae:69:df:
                    ca:75:c1:be:88:a1:30:bf:f4:a1:1f:30:36:9f:2f:
                    29:2b:bc:24:b6:ce:d2:33:b1:e8:b8:9e:bc:0c:38:
                    26:81:95:76:d3:92:45:d7:28:01:64:17:ff:98:f2:
                    7f:23:71:11:93:fe:52:36:95:06:3a:8a:de:c9:50:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:30:C5:C0:A0:05:0F:2E:98:F5:DF:12:78:DE:B2:AE:33:C5:6B:E0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313235303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:1250::/80

    Signature Algorithm: sha256WithRSAEncryption
         b2:78:52:78:a8:f8:44:b0:a5:88:76:1f:e4:80:5a:53:87:3f:
         d4:ec:78:47:a7:f0:b9:05:e6:cf:91:95:d7:a7:32:2b:34:ad:
         f4:eb:67:c2:cb:d9:b8:f8:c2:7b:4f:4e:a8:b0:c4:57:76:fd:
         7b:db:7a:8f:67:8a:c1:8f:dd:71:f2:df:b0:5f:01:fc:7c:4d:
         49:b7:f9:6c:ea:8e:66:fa:38:b9:47:af:68:61:ab:1e:e1:8d:
         51:5a:c0:55:ff:55:a0:56:0f:b3:67:47:2b:c7:92:4b:9f:4f:
         e0:0f:13:ae:47:30:6c:4e:9b:0d:99:b4:d6:eb:5f:ee:fc:1e:
         00:38:66:3d:db:71:ca:4d:60:6e:ce:82:7c:ac:30:e5:51:e3:
         1c:6e:10:d8:b0:ec:8f:dd:2f:85:d2:e0:39:d9:73:aa:2d:14:
         de:7a:90:d7:c1:55:3e:e9:e3:7e:ab:a3:ff:f1:25:ba:34:a7:
         e6:e2:8c:58:a4:da:0a:57:95:8e:25:d8:b9:db:b0:a1:d8:66:
         01:ff:16:b9:0b:74:64:56:91:94:db:b9:ec:b8:a2:1a:03:91:
         4e:52:2d:00:fb:6c:76:a3:08:01:57:fd:39:cf:8c:dc:f1:b9:
         78:29:0d:b7:27:f7:dc:57:cc:62:1f:9b:93:b4:e9:d0:fe:bb:
         aa:a4:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----