Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3133353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a3133353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          zRE2HPEaAARWCmJ7a/iDoLEh8dR0HlVDWKlrMo2BNlY=
Subject key identifier:   C5:D7:4C:F3:1C:CB:DB:16:0C:F2:80:90:D2:8F:B0:CD:DD:C7:58:CE
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1FCEF9AAF9CB83B375470F81BB15B778DC4D143E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3133353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 01:35:01 +0000
ROA not before:           Fri 18 Feb 2022 01:30:01 +0000
ROA not after:            Fri 17 Feb 2023 01:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:135::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ce:f9:aa:f9:cb:83:b3:75:47:0f:81:bb:15:b7:78:dc:4d:14:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 01:30:01 2022 GMT
            Not After : Feb 17 01:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:00:6d:61:d5:63:33:42:12:39:7c:d8:59:
                    14:07:57:2e:d3:72:40:c6:57:4d:18:03:13:45:3f:
                    8e:17:57:20:3a:43:35:49:17:f9:12:3e:b5:c1:f3:
                    c9:b5:92:bd:1e:8e:17:48:70:6b:20:1e:41:5c:76:
                    c9:78:e0:e5:7a:ff:ca:a6:d6:0a:2c:3f:b6:84:ce:
                    25:5d:c4:0b:d6:bd:2a:d8:0b:21:30:27:5a:15:94:
                    e8:1f:76:71:d6:c2:7f:d8:1a:5c:08:62:c1:02:1a:
                    78:2b:05:14:b1:66:7a:5f:25:32:c1:a1:05:2f:cf:
                    f3:36:be:c3:87:16:01:4f:64:94:57:05:e1:3e:da:
                    06:74:f5:33:22:e2:32:a4:87:1f:c7:d9:1b:a0:0d:
                    6c:a5:91:85:55:b9:10:e8:c9:bc:40:de:3a:a3:94:
                    0f:e2:49:34:cd:cf:7e:b2:08:80:eb:6a:f3:c7:61:
                    94:b8:17:89:08:6f:02:8c:86:0a:bc:ce:7a:bc:40:
                    5d:68:99:df:e6:59:52:9e:17:9d:e4:e8:7b:b0:bb:
                    a8:a6:1c:32:54:c1:6f:e9:ab:68:f2:0f:39:aa:90:
                    90:34:93:19:97:6a:ac:ca:7a:d7:ba:0d:b9:74:a2:
                    2c:1a:d2:fe:3b:34:86:d6:5a:e7:a6:89:3b:b2:e5:
                    01:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D7:4C:F3:1C:CB:DB:16:0C:F2:80:90:D2:8F:B0:CD:DD:C7:58:CE
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3133353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:135::/80

    Signature Algorithm: sha256WithRSAEncryption
         40:e3:3f:7c:5b:84:e2:bf:cc:83:cb:6b:2d:fc:54:13:ae:93:
         5c:e2:cd:14:db:bf:95:a6:e2:f7:87:b7:39:0b:cf:38:84:c8:
         67:39:75:a5:5b:69:19:a4:08:0d:76:0e:94:96:13:57:98:38:
         c2:b9:0d:f4:e5:fc:f1:dd:79:56:5b:59:2a:d6:e7:90:98:bb:
         75:02:ee:9b:0c:6b:e4:c5:f9:10:8a:69:19:58:88:8f:e8:4d:
         4b:2b:34:14:f6:50:eb:7c:a8:59:13:c9:97:6a:57:fb:f9:8c:
         57:5e:fa:cd:25:35:11:4d:45:74:38:d3:75:37:5f:6b:ce:a0:
         5a:2a:1c:e6:84:0b:58:fa:e6:d5:44:2f:ef:f3:f6:d3:19:0a:
         80:6b:4e:46:5c:22:e3:b3:21:b3:5d:8c:80:6d:c9:a5:35:20:
         d6:1a:1f:5f:97:11:f1:91:34:fb:27:d6:b0:78:98:12:a7:67:
         d5:b9:69:fe:30:b0:2d:94:c4:da:2e:a8:cf:fa:21:cc:29:f7:
         5b:7d:65:99:8f:98:66:ab:e0:cd:27:1c:6e:69:df:ef:a8:b3:
         8b:45:2b:80:7a:f5:67:1e:ae:4d:a3:22:e8:0e:63:75:77:1f:
         fe:f3:60:0c:be:de:8a:ee:89:93:82:70:d6:05:04:62:2d:e3:
         cd:9b:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----