Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313931353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a313931353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          A3TDnkbNsa3bUeoSMgFdccVDMmhFHlhp6kymMzYrh4s=
Subject key identifier:   B6:84:9D:55:41:42:47:ED:6C:07:5B:92:EF:B0:4A:B8:80:12:B2:7A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       71FA329A6729EB57625847ED68725F098F491F55
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313931353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 19:15:07 +0000
ROA not before:           Wed 16 Feb 2022 19:10:07 +0000
ROA not after:            Wed 15 Feb 2023 19:15:07 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:1915::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fa:32:9a:67:29:eb:57:62:58:47:ed:68:72:5f:09:8f:49:1f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 19:10:07 2022 GMT
            Not After : Feb 15 19:15:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:bd:c1:5d:97:bb:31:84:10:a8:dc:98:a9:
                    e2:22:5b:b3:4e:2b:98:57:93:b6:ca:29:97:cd:58:
                    28:51:61:e3:86:2e:6c:89:14:18:91:93:0c:79:7a:
                    e5:eb:d4:72:c0:19:0e:74:7e:40:86:08:7e:35:0e:
                    9c:48:01:7d:e7:99:cb:b4:e6:43:05:a4:d1:05:8a:
                    2c:21:0a:f6:b0:83:e0:53:af:87:9e:31:37:48:36:
                    d6:a5:1c:34:06:5d:58:e2:03:26:90:fd:1d:2b:db:
                    29:37:17:fa:fc:7b:9e:87:88:ee:82:64:99:f2:b2:
                    2c:d8:2d:ac:da:f5:af:40:cc:c6:1c:c3:21:49:3d:
                    af:98:9c:e8:e7:4a:50:36:6b:5b:ca:ce:87:06:66:
                    49:16:6f:e2:ff:76:02:6b:ba:93:6d:ca:6f:ae:ff:
                    dd:5c:8c:59:ad:11:d9:0c:53:a7:dd:2e:4b:ac:90:
                    3f:b3:12:9c:93:a1:38:46:d4:e8:83:f9:ff:cf:51:
                    d8:66:e3:53:33:ec:97:e5:ff:a7:80:6b:43:17:7e:
                    74:f4:c9:11:9c:c9:6f:fc:f7:4c:71:84:4f:5b:dc:
                    d4:dc:0a:af:77:24:2f:d6:a3:c6:dc:0e:2a:58:fb:
                    6f:33:46:2e:d3:11:07:a5:6b:81:38:0a:21:19:84:
                    fd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:84:9D:55:41:42:47:ED:6C:07:5B:92:EF:B0:4A:B8:80:12:B2:7A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313931353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:1915::/80

    Signature Algorithm: sha256WithRSAEncryption
         b2:c0:2c:72:e0:ed:98:b1:53:c7:f4:ce:4b:f7:95:7a:ae:41:
         c5:0e:74:d4:21:55:74:e0:ab:ea:95:cb:6a:a1:80:dc:3f:2d:
         08:4e:f1:3b:12:55:79:34:aa:28:80:b6:2d:c4:af:84:bd:cd:
         47:f4:1c:23:5d:6d:a6:ed:76:bd:05:29:1f:57:6d:aa:d3:be:
         6d:10:f2:fb:64:46:dc:ea:2c:82:f3:0c:43:a8:58:6a:f7:97:
         3d:66:b2:cf:d2:1e:bb:a0:77:a5:43:6a:7f:1f:1e:05:63:e4:
         9a:7f:57:15:32:8f:db:f7:79:96:80:03:63:c3:9d:83:43:92:
         b2:24:4f:31:d9:9d:f3:77:a9:be:15:84:72:6b:2b:48:cb:18:
         8f:49:29:9a:73:b1:f9:b0:e8:1e:09:b6:eb:6d:07:ac:76:94:
         a3:9f:d1:29:17:c9:1e:c5:66:ed:f0:9e:58:a5:62:9c:52:38:
         fd:3c:b6:3f:a8:4d:37:2e:02:1b:0a:8e:1d:d4:37:d9:a0:a6:
         b1:0a:b4:06:d5:36:fa:2b:0a:40:34:7e:8a:7a:19:5a:7a:f9:
         9d:99:91:f1:d7:4f:a5:2c:66:e6:93:2c:fb:c8:98:3a:2c:91:
         e9:0e:4a:64:19:74:d0:5d:d5:bb:d4:4b:48:44:02:f7:40:2b:
         b6:6d:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----