Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3433353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a3433353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          LdG/PbG6nd3q3rsNmcKwzV3vaRqiESloicRVyuoxqtI=
Subject key identifier:   98:37:EF:C4:87:D2:DB:1A:35:BC:3D:E6:3D:38:6C:12:57:99:AD:E9
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7EDA8289947290B9918E62928F0EE4EFEA96A290
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3433353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 04:35:02 +0000
ROA not before:           Thu 17 Feb 2022 04:30:02 +0000
ROA not after:            Thu 16 Feb 2023 04:35:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:435::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:da:82:89:94:72:90:b9:91:8e:62:92:8f:0e:e4:ef:ea:96:a2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 04:30:02 2022 GMT
            Not After : Feb 16 04:35:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:95:10:f6:2a:35:60:de:06:a4:76:ce:3d:
                    aa:4b:f0:70:3c:d1:10:61:e7:d6:5f:f6:72:05:07:
                    41:7c:eb:b5:01:88:02:3d:bc:b2:88:42:24:3a:dd:
                    73:d0:4d:0c:c2:96:15:5b:9f:75:aa:5b:07:be:4a:
                    03:c4:59:2d:a7:dd:3f:86:6c:67:e5:43:f5:c3:4e:
                    45:fc:6f:cb:9e:59:cc:b3:47:15:f4:3e:8c:49:f3:
                    64:76:4e:25:bb:6a:52:93:d1:cf:88:08:85:ef:82:
                    40:f0:6a:43:19:c2:5e:aa:f5:5d:ad:0d:04:da:7c:
                    92:df:b5:0b:57:94:2d:2f:2f:7f:73:e2:2d:e5:07:
                    a9:c2:99:70:f6:c7:e3:93:f4:ca:b4:a9:b7:41:3e:
                    ea:8d:d4:bd:6b:e8:ee:f4:fd:26:48:0f:5c:ed:81:
                    b4:c1:f9:13:30:c9:2a:24:f0:8c:a7:2c:98:8d:63:
                    d8:d7:87:cc:49:16:ef:f1:ce:3f:f5:11:ab:34:c4:
                    d8:44:b4:7a:6d:4b:22:9d:92:8d:84:09:80:86:0e:
                    6a:56:39:68:bd:a9:1d:f8:51:8c:09:ba:fd:82:79:
                    b7:70:8e:7a:89:c0:a9:a8:10:32:fd:1a:28:66:8b:
                    8e:90:4a:52:95:4e:8e:a9:75:a6:34:eb:21:e9:91:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:37:EF:C4:87:D2:DB:1A:35:BC:3D:E6:3D:38:6C:12:57:99:AD:E9
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3433353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:435::/80

    Signature Algorithm: sha256WithRSAEncryption
         79:a5:fb:11:b7:22:00:bd:e6:76:cd:28:9f:ad:95:90:20:7d:
         9c:9a:40:f0:32:25:d4:92:20:15:bf:02:d8:87:6f:e6:38:27:
         de:1d:96:63:38:72:3c:5f:96:4d:f6:10:77:d1:d3:10:79:c3:
         6b:80:6c:02:7e:80:69:df:e9:59:15:47:e7:23:14:da:08:d0:
         e2:5e:f4:98:35:a0:56:79:84:b3:6d:af:3f:a2:e6:fe:eb:0f:
         b3:0d:83:7a:bc:bd:e6:d4:a9:60:b3:5e:18:92:38:41:ef:12:
         41:c5:a7:43:74:60:02:7e:bf:ee:e3:5f:c0:6f:11:a0:64:41:
         19:48:7d:ec:86:0b:ee:6f:c3:f7:ad:c3:e8:b9:0d:a6:65:ab:
         91:54:38:3a:8b:fe:8c:03:3e:b4:8f:ee:f0:01:02:62:a7:de:
         5c:05:2a:3f:70:83:f1:79:84:3a:30:8a:f7:05:01:c8:9a:7c:
         c4:4b:10:7d:2a:0f:7d:b7:89:9b:23:37:e5:e7:ce:2a:61:6a:
         68:8a:88:41:96:90:e1:95:20:c8:73:71:32:cf:12:76:0b:66:
         f5:39:ae:97:c6:fd:9c:8c:00:3a:39:91:38:66:af:54:04:bc:
         7a:ca:7a:da:fd:0d:32:14:e7:73:b6:c1:9c:39:66:a1:6a:40:
         6a:20:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----