Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313331353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a313331353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          C97Bg+aXS7/c32m2JXeoOpZmPm6GgAJ12169An1WqeQ=
Subject key identifier:   01:C4:35:6C:4F:C5:A1:56:E7:E5:A1:BE:B8:DF:D0:76:BE:61:82:AF
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5529F9E14BF85DD5462C724754AD26970F1D886E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313331353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 13:15:02 +0000
ROA not before:           Thu 17 Feb 2022 13:10:02 +0000
ROA not after:            Thu 16 Feb 2023 13:15:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:1315::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:29:f9:e1:4b:f8:5d:d5:46:2c:72:47:54:ad:26:97:0f:1d:88:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 13:10:02 2022 GMT
            Not After : Feb 16 13:15:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:1a:c6:0e:37:74:61:60:94:c0:cc:ad:ff:
                    09:3b:30:64:80:0a:07:b6:f0:1e:84:a7:13:7b:a9:
                    a6:52:d1:6f:ab:e0:3e:78:7a:10:6e:36:eb:c6:3e:
                    98:0e:86:dc:b5:2e:f3:c9:e6:b9:d8:fb:52:bc:4a:
                    e7:f5:9b:86:e6:99:fe:b2:8f:58:81:95:aa:3d:21:
                    bd:07:77:5d:aa:57:46:ce:2e:e3:55:a8:2c:60:f0:
                    72:69:04:ee:2d:be:4e:96:25:15:80:29:3b:14:0d:
                    0a:ac:ac:6d:94:0c:3e:a5:13:b5:4c:cc:c3:67:93:
                    12:42:41:a1:b3:69:33:be:8c:a5:bf:a1:3e:41:a2:
                    30:b7:70:bd:39:c4:be:6a:fe:23:47:12:b1:8f:2e:
                    26:9f:1d:31:2c:d2:3e:97:32:2c:09:6c:ae:45:16:
                    7d:ad:ae:0c:78:b8:d8:fe:e5:db:a5:ea:f0:0f:a6:
                    00:d8:38:fe:4e:c6:c7:01:aa:91:06:de:14:f0:64:
                    3e:9a:f1:21:32:e8:79:37:de:fe:19:75:94:e5:af:
                    78:9e:91:2d:7e:32:d6:30:be:57:8b:a3:c8:af:23:
                    28:f9:91:16:70:d6:ec:d8:8e:30:c6:ee:f1:56:8d:
                    67:22:41:bc:20:3c:12:65:14:d6:b5:42:f7:6b:10:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C4:35:6C:4F:C5:A1:56:E7:E5:A1:BE:B8:DF:D0:76:BE:61:82:AF
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313331353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:1315::/80

    Signature Algorithm: sha256WithRSAEncryption
         b6:12:d2:30:ba:05:52:41:29:b4:28:ad:cf:6c:4d:3a:91:c2:
         d9:08:e5:4f:86:44:45:51:3c:6d:dd:55:4e:ff:fd:da:13:55:
         e1:7b:74:0e:fb:4e:81:d3:41:c2:9f:d6:13:e5:fb:d5:a4:2d:
         2e:62:9e:d8:49:e7:fc:bb:e8:54:5f:4a:ce:21:a7:b6:a1:f4:
         b1:54:0e:1c:e1:53:cb:fa:09:42:5c:7a:0c:5d:70:67:a5:7f:
         f7:17:00:64:a6:54:63:7f:92:08:a8:a3:16:68:ea:7f:42:6c:
         15:c8:1e:c7:28:de:25:d3:a8:9f:4e:10:04:ba:be:d0:5b:d3:
         d1:b3:60:98:10:d5:e2:9c:c6:08:32:b2:89:58:3b:31:b2:fa:
         d9:a6:b7:50:71:47:cd:8f:99:34:c4:d3:df:80:60:26:c8:52:
         21:58:c2:fb:a8:18:c5:4d:66:37:1d:50:86:4c:ab:30:3c:d5:
         5e:d3:9f:79:6f:79:6f:e4:8b:0e:8e:88:24:9f:28:b8:23:84:
         3f:fa:b4:78:30:0e:c9:64:7e:74:ee:76:55:e4:55:2b:ab:eb:
         7a:96:3a:2d:77:ee:3c:8a:5f:ed:1f:7c:20:83:e4:65:28:78:
         2e:0a:b9:73:79:fd:67:09:06:b5:3e:29:ee:15:1b:f1:c2:c7:
         c3:1a:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----