Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3535353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a3535353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          S1BgnDQyplqrxBemSOoK6wICyfEPChCD9YpwBez+rAQ=
Subject key identifier:   B6:1F:AD:8E:D7:42:40:FC:C3:F7:2F:45:B8:74:46:E7:08:F0:28:44
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7642799E485BC01511C322B539A44C2FA197FDB6
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3535353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 05:55:01 +0000
ROA not before:           Wed 16 Feb 2022 05:50:01 +0000
ROA not after:            Wed 15 Feb 2023 05:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:555::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:42:79:9e:48:5b:c0:15:11:c3:22:b5:39:a4:4c:2f:a1:97:fd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 05:50:01 2022 GMT
            Not After : Feb 15 05:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:35:78:26:87:33:a6:27:51:a3:df:82:ca:
                    c6:1b:fc:ad:1b:7c:81:0f:16:50:cc:8f:86:9b:64:
                    1d:5e:45:f7:3c:7c:d3:1b:52:e5:7b:0a:80:da:e4:
                    5d:ec:77:3c:b4:18:6d:71:9b:ec:30:44:b2:ff:d0:
                    e8:31:38:3c:20:00:74:f3:32:6d:f1:d3:92:18:80:
                    c7:63:26:c4:6a:68:92:cf:49:3c:32:ca:1e:84:3f:
                    3c:00:b8:3a:57:d8:b8:ba:65:9d:88:56:55:66:98:
                    1d:6f:58:76:dc:38:d0:c7:62:2e:dd:1a:d9:b2:2d:
                    c6:11:e8:ac:39:43:71:94:f5:f2:4b:81:88:e6:dd:
                    03:8e:14:97:bd:a6:f2:0b:16:1a:f6:a2:e0:aa:d9:
                    d3:09:00:54:eb:fe:25:7f:e7:e7:a4:b9:32:f3:84:
                    6f:b6:a9:9d:a2:ea:fe:3d:d0:ac:30:c1:1d:be:66:
                    a9:d5:65:15:03:aa:ac:fc:59:5c:30:db:27:a0:88:
                    9c:0f:60:5d:84:1d:9e:5c:36:0b:21:95:d2:12:8a:
                    26:63:01:79:e3:08:f9:18:64:fa:66:ae:4c:7c:b1:
                    23:72:14:26:32:ae:4e:e1:de:4e:2d:c4:f8:cd:fd:
                    ce:1a:5c:b3:14:38:aa:9b:f5:e4:95:7f:bd:53:59:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1F:AD:8E:D7:42:40:FC:C3:F7:2F:45:B8:74:46:E7:08:F0:28:44
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3535353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:555::/80

    Signature Algorithm: sha256WithRSAEncryption
         8b:61:97:1e:f2:9e:80:91:27:03:3f:f4:4c:1b:5a:ac:01:79:
         a6:6c:8e:df:bf:c6:d9:9b:5a:97:c4:b5:70:39:53:51:77:69:
         af:11:dd:69:9d:da:3c:df:3d:30:c9:5c:4b:d0:c2:58:e7:29:
         f6:e4:b3:f9:3e:fb:01:4d:7b:f9:e8:f6:a4:4a:f3:04:49:bc:
         4d:12:fc:23:a3:1a:dc:e0:94:81:df:04:bb:a4:4b:b8:c8:33:
         01:e0:cc:e9:c9:5e:ba:bc:8f:a3:2f:00:9f:77:19:c6:0f:47:
         9b:95:85:2b:2f:bd:d0:1e:3a:31:37:0e:6c:9a:35:0e:5a:ef:
         c6:e6:c0:42:4f:ba:17:b8:2f:eb:7e:8c:48:95:12:cc:bd:bd:
         5d:73:5a:bf:7f:9a:c9:b4:bf:e0:e7:11:c0:99:b8:ae:72:9e:
         57:52:f7:58:a8:c4:10:0b:b2:29:e6:3f:df:43:8e:ae:0a:a1:
         f8:cc:b1:72:a0:f8:0d:2e:43:62:2a:8f:88:6b:da:28:8a:3d:
         36:87:32:e6:fa:e2:a9:40:13:fe:f9:37:4b:d5:9a:ee:77:cb:
         4f:25:7b:42:c6:19:c0:cc:52:66:b0:b3:4e:a4:2b:e3:c0:26:
         2a:7e:2b:fe:95:f9:91:8b:29:f1:f1:43:33:5d:be:09:17:55:
         0f:ed:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----