Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3230353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a3230353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          AKirU6SOpQuceEf0aUGM37J5q2WPvuSJom7pfCP4TQ8=
Subject key identifier:   A0:52:64:EA:21:A0:1C:FD:5D:27:1A:7B:1F:65:68:B1:7C:56:BB:3C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2E89C762DE020E557075CB47BD9B77A3336EB471
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3230353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 02:05:02 +0000
ROA not before:           Thu 17 Feb 2022 02:00:02 +0000
ROA not after:            Thu 16 Feb 2023 02:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:205::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:89:c7:62:de:02:0e:55:70:75:cb:47:bd:9b:77:a3:33:6e:b4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 02:00:02 2022 GMT
            Not After : Feb 16 02:05:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:cf:35:ee:53:28:66:ac:ac:dd:ec:14:dd:
                    5b:23:25:77:66:ce:09:9f:b1:cb:e5:76:a9:f4:2b:
                    1a:53:b3:98:d0:be:17:54:6e:95:3f:85:37:eb:88:
                    c5:21:84:c2:d9:2c:f9:61:2f:98:6b:05:a3:a7:a9:
                    2f:61:25:a9:32:f9:3a:d0:25:3e:ae:fc:82:8c:38:
                    61:26:13:ea:a1:92:db:73:61:8a:ab:c7:0e:0c:b7:
                    74:ab:00:bb:82:4d:8d:f6:20:4c:f7:44:f3:ca:40:
                    fa:97:86:ff:8d:45:eb:81:c7:c6:d9:6c:27:cf:ae:
                    ef:9b:f9:dc:6f:a4:a2:0f:cb:e6:0e:83:00:93:52:
                    2f:f8:af:84:d4:8e:7c:d2:3c:e3:b7:a5:99:d2:b1:
                    e1:4c:3a:65:16:38:f3:db:b0:ff:97:8e:c2:a1:3a:
                    9f:27:f2:a4:52:29:e3:10:3f:2d:0a:9f:45:74:3b:
                    46:54:82:67:6e:81:82:54:12:64:c9:c3:07:81:e3:
                    f4:37:81:84:22:28:51:1a:1f:38:1f:ac:d7:72:b2:
                    b9:c9:9d:ff:16:eb:c9:f6:1a:41:1a:56:de:fc:bf:
                    78:26:b6:5f:c9:15:fc:11:3f:aa:1b:01:77:34:62:
                    85:b3:7a:4d:1d:29:9f:ef:cc:c3:8f:44:47:f1:3e:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:52:64:EA:21:A0:1C:FD:5D:27:1A:7B:1F:65:68:B1:7C:56:BB:3C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3230353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:205::/80

    Signature Algorithm: sha256WithRSAEncryption
         76:c7:d0:f9:e4:ee:ed:e4:dc:8e:f0:b1:51:7f:8e:58:ea:d0:
         97:25:02:cf:be:6b:62:19:f7:f6:64:07:d2:f6:0a:8f:b7:ea:
         11:c8:cd:f2:ce:4a:71:61:c4:eb:5f:9e:61:d5:e5:20:7a:ef:
         8b:2e:cf:7a:31:c8:68:75:f8:a0:5c:c2:ec:fa:af:1a:e4:92:
         3b:ff:42:cd:34:8f:50:2f:b5:24:e6:af:40:a7:77:3b:35:fc:
         23:e6:ee:f2:c3:2b:56:3d:c0:d0:ba:b5:25:56:19:0e:94:91:
         2e:ef:18:74:da:b5:76:e7:9b:10:e0:59:07:69:65:3c:4a:a6:
         8d:87:c1:1f:13:40:33:d2:e6:ec:d8:e7:e7:6c:8a:d4:57:85:
         ef:c2:95:09:27:d2:43:37:84:4a:1c:00:8e:85:6a:51:e6:be:
         4c:9f:a1:cd:ce:6d:e0:6e:b0:78:7b:ef:c2:7d:61:42:ab:d0:
         83:09:78:18:4c:9d:18:93:c6:cc:11:94:12:d6:30:89:60:9d:
         67:e7:98:ac:33:2e:70:b5:ad:46:58:98:64:d7:7d:c4:51:14:
         11:27:ce:85:33:93:46:83:41:fb:a9:c3:5f:fd:1f:bc:f7:54:
         06:a8:e9:e3:4b:76:2e:f3:a6:0e:d4:9d:1d:b4:11:58:30:f1:
         38:cc:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----