Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3833353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a3833353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Q5tD496Sg+89wy+HV/VHaHCloUeMSLwyujO/Zw0GmYI=
Subject key identifier:   50:F9:E1:46:57:67:19:0E:9C:46:B2:BF:D5:F4:BE:19:53:7A:7B:D7
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2B6CCD5452D3C519ADD553ADD866A90C30DA3742
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3833353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 08:35:03 +0000
ROA not before:           Thu 17 Feb 2022 08:30:03 +0000
ROA not after:            Thu 16 Feb 2023 08:35:03 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:835::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6c:cd:54:52:d3:c5:19:ad:d5:53:ad:d8:66:a9:0c:30:da:37:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 08:30:03 2022 GMT
            Not After : Feb 16 08:35:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:8c:34:42:61:48:66:47:e4:69:a5:29:d1:
                    0b:12:64:5b:63:e1:4b:b8:5e:87:5d:6d:ec:ee:09:
                    25:4a:b5:f7:82:b6:01:b8:61:4c:8a:09:34:d0:cb:
                    a8:70:6a:a3:5e:f6:be:56:cf:35:ea:6b:97:16:da:
                    3f:2a:77:0c:db:8a:8d:52:05:2d:54:2e:14:7b:43:
                    3e:9c:53:3c:9a:10:7c:bf:66:2e:c6:e0:f2:a9:18:
                    5d:3c:29:09:68:8a:54:ce:70:db:b6:a9:e4:4e:28:
                    d7:a6:09:ad:6f:ee:c6:37:6e:37:ea:d9:f5:d5:e9:
                    5a:b1:31:f5:91:ad:9b:30:0e:73:8d:31:24:0d:c9:
                    bf:93:8f:7b:56:14:22:b3:58:a3:92:5c:40:98:32:
                    4e:e0:df:d9:f8:31:b9:11:12:29:27:53:75:ce:26:
                    d2:9e:61:1d:ed:ca:4a:ce:89:8f:09:be:18:e6:fc:
                    31:8a:4f:4f:cc:b2:6c:13:a5:d0:af:40:1b:d7:fd:
                    e5:f1:a0:f8:45:84:4a:d5:85:24:43:c1:a1:74:a5:
                    ff:53:0b:ac:6b:73:d5:f0:6d:a0:60:e0:02:b5:66:
                    8d:4e:99:70:da:93:a6:f9:8c:48:68:d0:93:66:bd:
                    31:c6:8c:50:4b:ed:2f:1f:66:17:d8:25:70:5e:96:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F9:E1:46:57:67:19:0E:9C:46:B2:BF:D5:F4:BE:19:53:7A:7B:D7
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3833353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:835::/80

    Signature Algorithm: sha256WithRSAEncryption
         d3:91:4d:02:04:ea:10:ed:55:96:92:bf:43:5d:54:36:55:ae:
         c8:c4:f5:5c:36:6d:04:05:e5:c6:fb:6d:21:30:de:3a:d7:cc:
         a5:cf:f4:c5:77:6f:8f:59:e5:ca:75:e6:ea:c3:3f:b9:c7:71:
         bf:c6:43:ab:74:ab:9a:61:54:ba:c5:10:bb:c1:84:25:f0:79:
         ab:b3:87:33:f2:ae:ea:31:c5:27:75:16:3c:22:47:ea:16:1a:
         3d:b7:58:76:d1:a6:61:4f:a1:38:ec:3e:0c:b1:70:be:8c:c2:
         f6:d3:6f:ed:43:8c:f3:ab:77:ff:f1:a4:d1:1d:cf:ef:cb:3f:
         c2:2f:88:fb:9d:b0:33:21:f9:4f:0d:40:cc:77:b4:63:ce:36:
         57:06:f0:e2:ad:ae:b1:ad:f2:bd:ef:e3:83:f4:76:6a:87:d4:
         47:13:51:fe:6c:c6:92:52:22:97:8a:ae:eb:d3:7c:83:be:a6:
         70:b0:c7:88:9f:66:54:a6:4f:e9:be:ec:c7:b1:2c:27:71:63:
         4c:94:09:03:c2:d0:46:b0:dd:fc:87:2b:9d:42:f2:59:3c:e6:
         f0:62:6d:b7:47:62:b6:b0:b0:dd:a3:31:da:79:4d:e8:33:1c:
         4e:45:fd:b4:c5:e9:f7:68:da:2a:51:26:7a:6e:16:24:ef:5b:
         05:e6:4b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----