Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3531353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a3531353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          ax2UO/AEuOQdqPXOcUcuvt/AbuP67Piqj7DGZcVwNiw=
Subject key identifier:   60:85:14:40:55:54:F3:B4:EF:9D:CD:8F:AF:75:82:36:4D:A7:F1:64
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       194C4A0566B9CB3BA82D391F67BD2F067E4FAB0B
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3531353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 05:15:01 +0000
ROA not before:           Thu 17 Feb 2022 05:10:01 +0000
ROA not after:            Thu 16 Feb 2023 05:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:515::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4c:4a:05:66:b9:cb:3b:a8:2d:39:1f:67:bd:2f:06:7e:4f:ab:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 05:10:01 2022 GMT
            Not After : Feb 16 05:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:2a:d0:f6:f8:3a:26:fb:39:ff:b3:23:e6:
                    8c:58:9a:db:de:58:43:39:31:a5:03:a7:aa:97:97:
                    68:3f:b7:2f:30:7b:ce:86:8b:f9:8a:2a:08:ca:b3:
                    a0:fd:9e:8b:0b:20:56:69:34:87:d4:4c:05:87:a0:
                    99:00:48:fb:64:96:0f:f3:d1:bb:18:40:22:30:f8:
                    00:a7:5e:36:86:ee:6f:5c:20:29:b7:25:38:0e:04:
                    59:98:c6:f5:24:59:ef:18:fa:ff:d3:42:26:b7:7d:
                    62:6f:fa:c5:7c:36:a6:b6:2b:43:c7:8b:62:c9:95:
                    73:8c:24:21:6c:9b:7b:26:94:df:d9:d1:d9:e6:b3:
                    f7:fc:08:4e:67:c6:53:01:09:36:e4:28:9e:b0:76:
                    1e:b8:1c:72:99:df:b4:53:63:3f:ee:81:d7:35:ae:
                    4e:38:05:8b:57:b5:92:e8:26:e1:90:e1:09:68:43:
                    27:61:80:0b:62:f7:20:0b:40:e7:15:08:5d:00:16:
                    12:dc:d7:6d:a9:d4:bf:46:4d:59:31:38:59:ea:00:
                    8d:c2:5e:96:98:0d:ce:44:8d:fb:64:6a:09:dc:e4:
                    cb:47:45:05:a5:39:41:1a:f6:a0:aa:6c:b7:64:e3:
                    71:b6:b8:e4:f0:7c:fb:80:30:cc:45:1f:83:5f:a2:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:85:14:40:55:54:F3:B4:EF:9D:CD:8F:AF:75:82:36:4D:A7:F1:64
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3531353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:515::/80

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:96:2d:45:2d:55:3a:fe:f3:d3:fe:1d:c0:fc:f9:8f:4d:
         af:29:49:f2:b3:4d:37:82:4a:d6:04:15:56:44:65:be:44:5b:
         a4:be:3a:df:54:9f:e5:82:48:45:f7:62:63:ec:24:46:63:5b:
         f4:1d:2c:74:8e:31:06:44:c3:b4:7e:a5:22:a4:2c:03:34:dc:
         ef:00:10:11:8c:90:ad:b3:ae:0d:53:c6:2b:f1:28:6b:1e:d5:
         f2:c6:6b:85:21:e0:9c:73:05:17:c0:db:97:39:6b:d4:dd:18:
         22:f7:ff:00:94:28:a3:45:e7:e8:36:bf:cc:b3:40:a5:54:b2:
         60:bb:36:68:2d:a4:f9:bf:6d:71:cb:4d:5e:44:dd:04:51:f9:
         8b:0f:12:6a:9f:fe:93:44:c0:db:08:66:fb:52:91:7a:cd:2d:
         94:68:cd:3e:52:07:4b:db:af:01:58:51:36:a6:aa:94:22:43:
         44:67:c1:10:cd:ef:84:0b:68:30:0c:ea:81:5c:f8:24:fc:3b:
         b6:c7:5e:0d:84:a3:54:1a:46:88:45:a2:25:17:c2:39:80:ac:
         9b:04:e7:22:1c:6a:4c:6b:8d:60:16:63:77:13:b0:40:86:ea:
         ce:39:e9:83:7f:86:56:7a:d1:f1:3e:ff:5c:b6:9f:35:7d:6a:
         39:34:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----