Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313730353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a313730353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          2HIk/S3hjCC6P60D4r0e9hQ3f5tIhCeTmIlcTVFk5h0=
Subject key identifier:   AC:47:84:89:B6:74:86:00:41:80:A3:5E:AD:D4:9D:F4:CE:C8:9D:2E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7C9BC2AB55CF26E4D23294F7395247A45744E059
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313730353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 17:05:01 +0000
ROA not before:           Wed 16 Feb 2022 17:00:01 +0000
ROA not after:            Wed 15 Feb 2023 17:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:1705::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9b:c2:ab:55:cf:26:e4:d2:32:94:f7:39:52:47:a4:57:44:e0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 17:00:01 2022 GMT
            Not After : Feb 15 17:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:5f:e2:26:c7:f4:9b:02:eb:0f:78:de:55:
                    75:d1:04:44:cf:df:5a:dc:87:d0:a8:12:07:43:3c:
                    26:32:a0:25:02:a6:89:6c:92:ba:70:5b:7b:29:14:
                    e5:94:e1:64:ba:ab:06:18:ba:0d:03:d6:91:8f:c8:
                    9b:75:2b:4a:15:f4:9e:b1:6e:56:98:6e:98:81:b7:
                    bc:24:8d:d5:25:44:01:27:5f:23:5b:6f:db:bc:ea:
                    fa:4b:9c:2c:fd:b1:b7:73:d7:71:45:b3:39:6d:6c:
                    ef:3b:3b:ee:49:38:df:7b:f5:8b:63:bf:02:33:fd:
                    22:14:34:1e:09:34:ba:63:cf:32:a5:44:0e:ba:72:
                    62:96:5b:75:4d:7c:37:77:10:49:82:1c:ab:f6:12:
                    d1:15:2d:3f:34:0b:2e:ed:f7:af:dd:43:81:2b:d8:
                    a6:3d:c2:a2:0d:35:3b:52:ec:74:17:a5:bf:75:a1:
                    b7:a9:63:4d:c6:bc:bc:3b:4c:80:16:0d:d2:09:d2:
                    0f:94:52:b1:d0:6f:d9:0f:d9:e5:02:cc:09:9d:07:
                    6c:d7:d8:7d:e1:c0:56:a8:31:03:e1:23:67:82:fe:
                    ee:1f:37:96:dc:fd:01:30:69:61:20:a2:68:6a:00:
                    41:51:a2:c2:ed:1a:0a:43:3e:c0:52:7e:07:d4:f8:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:47:84:89:B6:74:86:00:41:80:A3:5E:AD:D4:9D:F4:CE:C8:9D:2E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313730353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:1705::/80

    Signature Algorithm: sha256WithRSAEncryption
         85:28:a9:44:f1:5b:a6:c6:c6:84:95:8c:95:cd:e7:7a:8b:b0:
         51:40:d7:80:fd:6b:1b:7b:f5:cb:5d:a6:a4:ef:21:df:e4:8c:
         d3:21:b4:f9:12:3c:63:90:05:65:35:a1:64:e3:4f:fd:6d:66:
         c7:a0:a2:b3:6c:ff:19:59:86:e0:06:5e:46:53:fa:39:54:4c:
         60:18:82:09:ab:e6:40:ee:02:06:67:79:e6:82:d2:75:81:3a:
         fb:4c:5b:31:ec:3d:ec:1c:6b:6b:1e:c1:22:97:82:c8:95:e6:
         c8:3a:0e:a0:dc:ba:32:ef:59:9b:35:f4:32:97:2c:6d:e8:8e:
         23:56:7d:03:fc:88:d5:1e:bf:c0:7d:7c:ec:57:22:76:ef:95:
         8f:f5:ea:e3:eb:d7:c2:a4:16:19:ed:92:bf:b3:78:19:40:6a:
         df:64:4f:a2:52:4b:e5:bc:77:ac:03:a9:8d:22:ce:e2:f3:c9:
         cf:5b:f5:5b:b3:7a:8a:5a:fc:5a:65:e8:05:f6:34:93:0f:8a:
         34:1a:34:e1:8b:35:96:71:39:97:72:cc:d4:ac:08:e1:5a:33:
         f7:64:de:a9:81:e4:3c:5f:b7:35:8b:c1:0d:71:60:e5:9f:2e:
         c4:02:81:98:6f:a2:c7:88:71:e4:07:ae:99:86:5d:78:2c:07:
         97:7d:e9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----