Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313933353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a313933353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          FGbEiNz/j6DvrfIxnnJ6X5Wg/cRMiEDhzEF+xt9uCjo=
Subject key identifier:   7E:D4:85:03:9B:1C:90:5C:83:57:DC:FF:D5:71:6B:DB:9D:60:DC:09
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6E58CE27772B953AAACEBB12BF95381B23483200
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313933353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 19:35:01 +0000
ROA not before:           Fri 18 Feb 2022 19:30:01 +0000
ROA not after:            Fri 17 Feb 2023 19:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:1935::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:58:ce:27:77:2b:95:3a:aa:ce:bb:12:bf:95:38:1b:23:48:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 19:30:01 2022 GMT
            Not After : Feb 17 19:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:ab:93:14:47:47:d6:82:57:da:11:59:b9:
                    06:1b:35:ce:f0:af:74:df:3e:68:6c:e2:08:fd:b5:
                    71:15:b7:5b:db:09:54:ed:f8:60:13:30:e9:b3:da:
                    3f:aa:fc:e9:ac:62:ab:d9:e8:38:cf:93:cb:6b:55:
                    ba:1b:ae:64:1b:c8:a1:03:a8:a1:04:51:1b:be:0d:
                    ed:ef:ba:d1:0c:45:99:cf:ea:2b:8e:e5:aa:83:24:
                    e6:f0:59:27:02:33:5c:8d:00:5f:b9:d9:f6:8c:a3:
                    23:98:40:33:bd:fd:82:a7:e9:ad:9e:a1:76:c8:8b:
                    d3:98:80:64:fc:79:65:06:a1:63:5c:ae:d6:12:1e:
                    1c:95:45:fb:4a:76:63:61:bb:bd:02:2c:72:7a:62:
                    01:8c:ea:9d:84:a3:34:3a:88:b2:4a:84:6f:74:72:
                    01:5b:1c:0e:e8:5f:c2:e9:4a:b6:ed:01:91:39:36:
                    3c:a1:20:94:03:7f:9e:ac:15:e5:f2:89:88:9c:a1:
                    84:40:67:3b:5e:07:0c:81:bc:dc:32:fb:e1:cc:83:
                    f5:80:56:67:b8:07:fa:58:25:7c:7f:bb:ef:cb:80:
                    ff:d1:87:d6:16:0a:92:da:7e:59:13:6e:fd:55:17:
                    49:ae:75:18:cf:7c:f3:3f:7f:a3:06:2d:ce:e6:99:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D4:85:03:9B:1C:90:5C:83:57:DC:FF:D5:71:6B:DB:9D:60:DC:09
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313933353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:1935::/80

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:e7:6a:c0:4d:07:c6:69:63:d5:91:ca:40:9e:8d:2c:28:
         57:35:c9:db:ff:ed:30:67:54:f1:de:4c:d8:78:ae:e5:e7:2f:
         64:f4:be:35:6b:4a:f4:51:49:5f:4f:27:2d:60:ab:39:0a:59:
         5b:5e:11:46:54:b3:fd:d6:26:3f:c3:12:9c:68:a4:84:be:f4:
         2a:30:c8:67:c6:d1:b6:0a:a5:6b:bd:f5:98:b2:44:f9:7a:ea:
         58:bf:65:c2:a3:56:c4:48:76:ff:80:0b:d0:ca:59:7f:5f:97:
         a0:3f:50:9b:c9:b4:18:5a:b4:42:b2:e2:f7:04:1b:89:84:cc:
         d3:05:b8:e2:a2:12:92:7b:fd:73:cf:51:47:ad:ad:db:15:40:
         ca:8b:8f:1a:df:43:71:c5:49:58:8a:5f:e2:70:97:55:ca:c1:
         c8:9e:41:c3:34:29:62:7c:96:3f:6e:0a:13:56:0b:da:c2:90:
         6a:7e:b6:ab:5a:04:75:82:73:55:47:5c:ec:02:2a:6c:eb:1b:
         df:94:28:66:80:de:27:21:01:97:33:c0:05:60:f3:0a:ac:95:
         20:0c:a4:bb:e8:06:cd:1c:9c:87:1f:14:e5:8e:90:6b:9b:19:
         60:c9:78:84:08:2f:ce:68:9e:56:ee:18:7c:f6:b9:95:3b:06:
         9d:75:ff:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----