Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313435353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a313435353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          ram8T8zWwFpQOMwVA8H0V9rhxAIBZg7aWfTpLRX0uQM=
Subject key identifier:   83:EB:5E:C8:47:85:1D:F2:D6:DB:41:7F:9C:18:56:66:2D:7A:1D:38
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6B5A59EF7EEFFF539BD4979987F7879CB7B8484C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313435353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 14:55:01 +0000
ROA not before:           Fri 18 Feb 2022 14:50:01 +0000
ROA not after:            Fri 17 Feb 2023 14:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:1455::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5a:59:ef:7e:ef:ff:53:9b:d4:97:99:87:f7:87:9c:b7:b8:48:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 14:50:01 2022 GMT
            Not After : Feb 17 14:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:0f:aa:48:34:6b:ce:18:09:85:8e:e6:ad:
                    0a:56:b4:d1:ed:03:03:7c:54:3f:72:f1:d5:dd:66:
                    70:6f:15:f4:59:a5:fc:6c:b4:78:69:96:ce:8f:68:
                    25:4d:85:ba:98:fa:91:ad:ee:4c:a8:48:41:25:23:
                    75:ba:83:ad:6e:d3:0d:bc:94:53:50:93:13:14:3d:
                    cc:50:db:aa:97:30:2a:95:ed:db:cd:47:10:99:86:
                    7f:2d:b0:16:e9:0d:11:04:1d:6e:79:55:0b:95:db:
                    0a:83:d4:00:db:58:27:7e:9f:b4:2f:d5:49:73:ab:
                    9c:7a:e8:88:c0:a7:b0:fb:92:41:bc:fb:f5:c9:9f:
                    2e:d7:3b:f5:39:dd:49:11:58:58:15:86:c3:83:5f:
                    bb:c0:f1:e7:48:0e:70:c9:f2:f9:07:55:76:bb:4e:
                    50:e1:1d:2c:fd:13:b6:fa:db:86:d8:3e:65:ae:13:
                    ca:d3:9d:8a:50:83:63:42:23:12:3a:41:9c:61:e9:
                    63:07:7a:7a:56:1a:66:09:b5:40:be:06:3d:ae:fd:
                    6b:25:b9:b1:f6:ea:10:53:a6:2e:33:1f:06:04:c0:
                    b1:40:c7:11:57:2b:3d:3f:17:c1:7a:d5:95:c6:df:
                    1d:af:57:a1:5e:94:3d:f4:fb:c6:4c:67:11:40:8d:
                    11:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EB:5E:C8:47:85:1D:F2:D6:DB:41:7F:9C:18:56:66:2D:7A:1D:38
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313435353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:1455::/80

    Signature Algorithm: sha256WithRSAEncryption
         c2:2a:c2:c5:f2:d9:74:01:b1:ee:d7:59:e5:f8:16:b6:2a:c5:
         8b:35:79:e0:db:1d:d4:e4:ce:c5:08:24:10:f6:3e:d1:78:a1:
         f8:9f:71:82:c1:2e:f3:1c:e2:3a:cd:06:e0:f8:85:3b:6e:c9:
         97:32:51:c1:e4:de:a2:f8:19:80:03:70:d1:03:87:ab:d3:a2:
         ef:39:ee:b9:d9:ed:21:42:12:1a:3e:8c:3e:a7:d4:7d:2b:f5:
         d3:5e:33:bf:2b:ca:0d:10:0e:38:03:7f:cc:3e:04:f8:a2:92:
         32:99:05:32:11:97:e2:71:e4:2b:19:30:0e:30:93:c8:e2:b6:
         7c:b3:2f:14:2c:ad:c6:0c:6b:69:e0:6b:d1:98:27:57:9a:53:
         d8:30:6f:a4:b8:d7:77:52:65:39:2e:5c:f3:10:07:c7:a3:a8:
         57:3e:e3:c2:98:18:98:f6:25:64:c6:94:cc:71:96:3f:67:a3:
         a9:0e:84:2a:f3:c8:ec:c3:2b:89:b5:de:1e:2b:75:f9:ef:d9:
         fc:27:b5:7a:46:46:ac:05:cb:b0:c3:81:35:8c:6f:a5:92:16:
         c4:25:1b:74:1e:14:75:cf:b8:db:28:12:16:72:cd:0f:7b:60:
         57:07:7b:19:0f:4b:00:8d:a6:f5:ff:95:be:bd:d1:b8:84:07:
         29:5b:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----