Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a323030353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a323030353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          bxEGqvub8biRC8GxtiapfKpJ2+2li0/gTVIjKRBnLV0=
Subject key identifier:   CF:7C:15:E6:21:E8:29:3C:2C:3B:4B:DD:9D:71:AE:4F:1E:5A:DC:E4
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3535BFDC88211A7B6920D17B5F460D6C34B19140
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a323030353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 20:05:02 +0000
ROA not before:           Thu 17 Feb 2022 20:00:02 +0000
ROA not after:            Thu 16 Feb 2023 20:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:2005::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:35:bf:dc:88:21:1a:7b:69:20:d1:7b:5f:46:0d:6c:34:b1:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 20:00:02 2022 GMT
            Not After : Feb 16 20:05:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:4e:6c:cb:0b:cd:8e:cf:9e:f4:72:76:85:
                    2c:09:4a:73:ae:4f:65:9d:8e:0f:75:64:37:67:d9:
                    df:85:5d:49:48:77:25:cf:3c:09:b5:97:0c:0c:13:
                    ae:8d:e4:12:27:4d:d4:b6:9c:9d:93:48:ef:74:3e:
                    c7:a5:c6:c9:47:f6:89:ae:7c:4b:ce:be:56:d2:4d:
                    e9:ce:c8:47:90:55:fa:8d:f7:32:fb:70:0e:9d:03:
                    5c:f9:3a:f7:3d:b9:4c:1f:86:d8:60:4d:f4:5f:3b:
                    9b:38:dc:91:df:65:42:51:a0:49:e6:74:55:2f:47:
                    b0:14:33:60:4c:bf:f6:ff:71:2d:5e:2d:80:11:1f:
                    1b:56:51:6f:07:ee:28:f7:6a:33:12:53:cf:f2:75:
                    2b:da:49:04:7c:d6:d7:6e:0c:94:86:28:e2:ba:5d:
                    11:a0:6d:f6:e3:00:72:b8:78:8f:e8:c1:ca:e4:2b:
                    05:62:b9:3b:7f:9b:75:03:2f:87:6c:c1:b3:2d:ef:
                    80:4a:d7:82:61:3b:0f:4f:b7:88:4f:20:cb:4c:14:
                    f1:6b:15:9c:23:cd:04:e2:03:f0:89:c5:94:64:02:
                    ee:da:f2:98:2a:13:97:ad:cc:81:a0:8e:27:15:04:
                    fa:42:b2:11:be:7b:de:49:c0:78:0f:20:86:48:33:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7C:15:E6:21:E8:29:3C:2C:3B:4B:DD:9D:71:AE:4F:1E:5A:DC:E4
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a323030353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:2005::/80

    Signature Algorithm: sha256WithRSAEncryption
         9a:fb:ed:cd:e1:d7:1c:f0:e1:4a:b2:4e:5b:72:5d:ea:8b:ef:
         91:73:41:f6:87:4a:a5:c4:bc:58:e6:8e:08:c8:78:04:9e:2b:
         21:fc:fa:ef:64:8c:10:75:85:9b:44:94:98:62:40:90:bf:73:
         5f:be:d6:09:cc:d8:3f:9b:7a:c5:35:f7:60:87:07:e7:9f:14:
         a3:86:6d:81:e1:d7:d6:d1:47:70:88:f7:75:d8:56:49:3e:00:
         65:4f:e3:59:d5:30:6e:de:e5:31:22:83:6e:f5:ce:c5:d7:0b:
         d1:ae:d9:53:25:b6:b0:3e:b8:cf:51:08:7a:69:35:ec:ab:95:
         b1:5e:e9:3d:4b:f1:ae:30:c8:3a:34:56:f8:a2:1d:04:ca:9c:
         ad:ed:82:7e:bf:1d:1a:54:0d:99:c0:fb:38:2e:8e:9b:77:7f:
         58:1d:9c:65:f6:a6:b2:ff:57:91:5b:11:da:94:4c:2a:c6:b7:
         4f:8f:a1:93:be:ee:a9:00:73:3d:ce:7d:ea:3d:b0:1b:19:fc:
         a5:69:fa:32:48:7a:84:f5:56:63:81:26:b1:70:48:8c:70:de:
         2a:ea:7d:ac:1c:7f:86:cd:e6:48:64:c4:85:bc:92:28:8a:67:
         fd:cd:64:b9:11:59:03:d1:bb:1e:ce:db:a8:dd:26:b9:f0:4c:
         a1:70:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----