Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3833303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a3833303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          vQoZQ9DesGucQF4BTEuR2yBRFZ2bHmb5qhAaWEXSTXQ=
Subject key identifier:   73:EC:D8:14:95:C7:52:D3:5C:BA:A2:A9:4F:28:3F:8A:A1:8D:9B:14
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       50C24BB50D30CF90EEDEA969874E20F157B2D922
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3833303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 08:30:02 +0000
ROA not before:           Wed 16 Feb 2022 08:25:02 +0000
ROA not after:            Wed 15 Feb 2023 08:30:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:830::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c2:4b:b5:0d:30:cf:90:ee:de:a9:69:87:4e:20:f1:57:b2:d9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 08:25:02 2022 GMT
            Not After : Feb 15 08:30:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:eb:33:71:cd:11:6a:e4:54:33:79:be:ba:
                    c3:a0:29:5d:e3:a6:9c:7b:68:cf:95:e0:6d:6b:33:
                    ee:c0:80:e8:68:29:f9:d2:2e:71:77:8e:89:f8:00:
                    3d:70:ef:69:5f:4a:93:8b:9f:d4:6e:ad:82:fb:71:
                    01:05:cb:95:f0:58:3a:50:0a:89:d2:02:c3:5e:d5:
                    8f:15:ef:50:18:86:b0:4f:fa:11:49:86:93:43:74:
                    04:3c:75:bc:c9:ff:c1:e4:fb:81:46:af:45:dc:0e:
                    cd:72:30:bf:15:c3:59:20:ce:c0:08:a4:48:d6:ae:
                    23:9a:f3:50:02:ce:1f:85:6f:da:5c:fd:8f:b3:c2:
                    cd:aa:57:8a:41:d0:83:a1:69:d4:5a:38:fd:9a:13:
                    35:74:cd:5a:97:d8:01:55:35:8a:1d:d3:ac:79:25:
                    9e:75:b8:a5:af:45:9d:71:a6:30:a4:5e:63:2d:dd:
                    be:9f:ab:eb:36:a1:a7:a0:e4:b4:98:d8:3f:e5:be:
                    b0:56:b4:c9:6e:b2:3a:bb:b5:01:88:c8:45:e1:58:
                    1b:65:3d:b8:fe:a1:c4:30:17:d5:b8:ac:a6:e9:c6:
                    a6:9e:5d:2c:98:c3:ca:f3:80:71:bc:7a:dd:b7:8c:
                    b2:a7:a9:db:52:d2:c6:03:9e:a7:65:38:46:17:af:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EC:D8:14:95:C7:52:D3:5C:BA:A2:A9:4F:28:3F:8A:A1:8D:9B:14
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3833303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:830::/80

    Signature Algorithm: sha256WithRSAEncryption
         79:f7:10:27:11:3b:67:35:7b:78:ba:71:d1:e7:09:bf:18:7e:
         15:57:48:65:9d:dc:90:db:da:15:6f:2c:d4:63:fa:24:d2:e1:
         22:20:f4:b5:dd:99:b1:6c:e1:52:3d:1a:55:d4:61:f9:a8:8d:
         7b:cf:f8:c7:85:4a:df:8f:ec:f3:e9:21:e6:68:e1:ce:3a:ab:
         d7:f4:5d:c5:02:9a:7f:d9:2b:62:fd:04:96:9b:e0:8f:7c:ed:
         7c:c1:ec:e4:58:ae:9f:b0:9e:24:c4:1b:cc:70:c4:de:be:16:
         b9:aa:9c:c8:06:2e:e4:3a:f6:69:24:dd:e1:6e:d1:24:53:8e:
         05:36:f8:2f:9d:32:37:12:19:01:3e:de:a1:64:01:4e:f6:64:
         e4:e9:35:36:68:9a:cf:60:ce:e9:61:5e:4e:a3:82:18:43:35:
         19:e2:1b:04:77:6a:7f:71:be:d5:2e:0e:e7:1a:fd:2d:86:c8:
         db:49:1e:0e:65:5b:21:51:bf:77:f5:d9:f7:2e:81:88:bd:9a:
         07:39:e7:0c:45:bf:ea:3c:e3:04:5d:17:56:9e:9d:cc:d7:3a:
         af:d9:fb:1e:9d:94:4c:ba:e9:e7:d3:b9:98:95:4a:92:97:98:
         45:5c:a9:d9:fc:0c:13:1c:f7:3d:7e:84:26:ae:2e:4d:c2:03:
         6e:4b:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----