Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3334353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a3334353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Z54R1Q46IP9rsH3X4Q6HZxtVD1koUeIeAYW3UgifjEk=
Subject key identifier:   57:E2:A4:95:D7:56:E3:5A:3E:F3:89:29:A3:AD:EC:C9:7F:FD:2E:D2
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2718C665D741F7AF86FC1EE4D62C5E87EA8F029C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3334353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 03:45:01 +0000
ROA not before:           Fri 18 Feb 2022 03:40:01 +0000
ROA not after:            Fri 17 Feb 2023 03:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:345::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:18:c6:65:d7:41:f7:af:86:fc:1e:e4:d6:2c:5e:87:ea:8f:02:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 03:40:01 2022 GMT
            Not After : Feb 17 03:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:04:65:78:42:89:f4:66:5d:11:31:10:34:
                    8f:26:4b:81:8b:a6:85:16:42:cb:3f:bf:01:f8:06:
                    63:3e:a7:6b:ec:a2:cb:af:51:7c:55:38:c0:f3:a2:
                    9c:fc:96:a9:54:c2:59:63:59:77:02:a1:7f:67:c0:
                    44:ba:e7:93:b1:5c:82:fb:71:86:04:5f:47:8d:76:
                    b2:fc:19:12:2d:b9:fc:02:19:00:fa:09:9e:48:23:
                    0b:00:4f:be:1e:49:5e:2d:38:ef:7c:93:60:35:0f:
                    a0:1e:b9:4a:72:2b:74:68:04:95:de:a7:ef:6c:1a:
                    53:1e:b7:03:a4:7d:ec:1c:39:43:1f:87:6a:ea:02:
                    09:0f:42:28:9e:8d:19:2b:50:0a:9f:9a:65:2b:3f:
                    ba:6e:42:63:f6:d4:fe:27:00:a1:e3:da:f4:23:64:
                    cc:a1:d8:08:3c:dc:14:0d:dd:58:3c:dc:ad:3b:95:
                    24:45:b4:b1:d8:59:b8:9a:9a:7d:14:1e:70:b4:3d:
                    94:05:e5:8c:bb:57:bc:dd:d3:0f:13:97:dd:8a:72:
                    78:0a:2e:4a:89:ff:77:21:e2:b4:af:85:37:d6:4f:
                    26:33:24:34:30:ad:37:7d:f3:d8:2e:29:16:28:3c:
                    bb:af:66:69:55:8b:91:f8:ef:92:a7:ae:47:ed:2f:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E2:A4:95:D7:56:E3:5A:3E:F3:89:29:A3:AD:EC:C9:7F:FD:2E:D2
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3334353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:345::/80

    Signature Algorithm: sha256WithRSAEncryption
         3f:16:17:b4:47:c2:2a:68:22:80:ca:3c:6c:ca:2d:5e:52:bf:
         11:59:71:6d:d7:ab:b8:f7:3d:d6:6c:07:14:0d:a6:10:84:f7:
         18:75:61:33:ff:75:57:d0:04:75:83:ac:1a:44:f3:eb:fb:e3:
         58:26:28:ae:e1:9a:06:fc:14:05:cc:41:59:76:c7:f2:57:30:
         3b:bf:ef:ed:d0:d9:cc:f2:8e:cb:2a:c6:0b:83:f4:0d:cc:ce:
         b4:ec:98:bd:fb:4b:df:33:b4:71:ff:72:ce:ce:58:7e:ac:5e:
         a3:25:b1:b3:21:23:f7:60:00:c6:2e:fc:c5:33:30:61:95:4a:
         3e:a5:86:3e:7d:d9:9b:bf:a4:52:2d:d0:5c:3e:6d:73:14:26:
         09:3e:6c:7f:df:e3:d3:56:20:c0:63:af:9f:b3:12:df:7b:e8:
         d3:72:28:f5:10:ec:5a:6a:e1:15:f4:b0:d2:1a:fe:f4:58:6f:
         ec:1f:ba:7c:50:2d:31:12:5e:07:8f:23:fd:11:86:79:0b:4a:
         75:11:9d:07:2e:07:d9:0a:1d:2f:9f:70:c5:01:b1:65:c2:e8:
         bf:6c:34:63:55:d9:bd:19:cd:27:77:65:f6:a3:0e:97:13:74:
         f9:2f:6a:44:56:97:c8:3a:f2:90:ed:53:ad:63:32:a2:ed:30:
         e4:9d:95:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----