Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313731303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a313731303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          UPHvyg2YAK+G3QzMHLQInZCC+9XnywR7P5MU65Eded8=
Subject key identifier:   A0:9B:88:B1:1A:C2:08:03:17:A1:B5:E6:35:F7:53:F9:09:22:38:40
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       32D4D02F6AD4BFEBD3506B3B1732E2F6EAE569F5
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313731303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 17:10:01 +0000
ROA not before:           Wed 16 Feb 2022 17:05:01 +0000
ROA not after:            Wed 15 Feb 2023 17:10:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:1710::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d4:d0:2f:6a:d4:bf:eb:d3:50:6b:3b:17:32:e2:f6:ea:e5:69:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 17:05:01 2022 GMT
            Not After : Feb 15 17:10:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:45:86:41:68:dc:bb:ab:26:90:57:23:d9:
                    11:bd:4c:67:11:7c:02:b5:28:3d:b4:72:b6:80:4d:
                    27:da:19:10:92:54:d1:c5:31:ba:d1:b1:af:85:10:
                    85:ef:ab:3d:f1:33:45:2f:85:78:bf:1c:29:6c:47:
                    1f:10:10:f9:33:61:e6:bb:57:2c:86:25:d4:0c:2b:
                    6e:0f:d0:0c:4e:b5:cf:e9:59:0b:7a:da:18:7b:ae:
                    ac:b3:a7:c8:28:5f:f3:dd:13:96:29:f3:c3:07:44:
                    38:9e:e7:9d:15:09:00:19:eb:4a:26:2e:53:c9:b0:
                    8e:79:55:0b:30:d7:bf:fb:7d:55:41:65:3d:1c:53:
                    fe:fb:a9:d6:2e:34:f8:45:9a:57:6e:46:e5:95:1a:
                    85:1b:b6:7b:55:2f:dc:16:7d:9b:12:8b:5d:1a:3c:
                    e9:44:be:88:df:10:d6:24:a7:9e:03:18:8c:65:d1:
                    9e:e2:3d:6e:d1:cb:d1:1c:39:0f:e9:1b:b0:fe:1b:
                    13:2b:ba:b3:9d:46:c7:76:f9:84:d7:86:f3:db:4d:
                    28:63:8d:9c:f6:9a:99:0b:f6:16:12:c4:de:3a:17:
                    4b:eb:94:c2:15:13:d7:2a:18:99:e9:8a:78:7b:27:
                    f4:40:e9:34:b4:07:7c:05:1f:e2:eb:9c:b3:3e:e1:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:88:B1:1A:C2:08:03:17:A1:B5:E6:35:F7:53:F9:09:22:38:40
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313731303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:1710::/80

    Signature Algorithm: sha256WithRSAEncryption
         cb:53:52:94:37:4c:e1:66:83:87:30:22:d5:04:a8:c9:4f:54:
         79:6e:77:38:6b:7b:74:0a:37:86:b5:fb:a3:77:0e:54:c6:cd:
         a3:37:b9:fa:91:3e:f5:89:71:43:d2:05:e5:47:13:9a:d3:5b:
         1a:b3:7b:94:79:e6:c5:99:1a:40:b4:18:67:33:f3:7e:f1:de:
         5d:0a:dc:c8:f9:79:8e:3b:01:18:f9:47:f2:50:c4:83:03:15:
         26:f7:6c:76:89:13:36:b3:62:df:cc:51:04:ff:ec:df:a3:5f:
         82:8d:1a:34:51:26:a6:c9:0e:1e:3a:74:72:20:7c:a5:0e:06:
         80:dd:86:1a:10:db:f3:34:83:39:56:f7:88:39:1a:ea:1b:e3:
         bd:1a:64:90:6f:ad:b5:28:e3:a0:80:73:94:60:65:7a:a7:17:
         d1:65:5a:05:58:df:d9:0c:4c:14:36:5f:40:25:da:5c:45:7b:
         00:e9:a6:67:d9:ed:d0:36:af:78:f6:6c:74:ee:ef:f1:83:6d:
         c5:cd:6d:6a:8b:1b:5e:d9:39:62:ef:58:a5:cd:a0:b9:54:e4:
         14:ee:64:b2:e0:e0:f5:34:46:30:e7:5b:51:28:14:99:07:23:
         e0:f7:af:87:82:be:48:8b:de:35:8f:6b:7f:ed:42:73:df:7a:
         54:52:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----