Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3435353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a3435353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          2qvexvud9ycL9XrNkLpIiIugjkum8T3qoY4+VYPJW9k=
Subject key identifier:   69:96:91:0F:55:4F:A1:1C:B2:FE:C9:FF:90:63:CB:F9:25:46:2A:4D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       521AAD1102B19B63CF287181ECB55967FCFB0946
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3435353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 04:55:01 +0000
ROA not before:           Fri 18 Feb 2022 04:50:01 +0000
ROA not after:            Fri 17 Feb 2023 04:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:455::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1a:ad:11:02:b1:9b:63:cf:28:71:81:ec:b5:59:67:fc:fb:09:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 04:50:01 2022 GMT
            Not After : Feb 17 04:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e2:59:52:fe:01:53:55:e6:83:9d:8d:df:f4:
                    8e:e2:fe:42:14:12:48:75:3d:83:2d:87:a0:e8:1b:
                    58:33:a7:ec:a0:68:bd:1e:db:40:08:ac:f6:0a:bc:
                    b6:d2:9a:18:12:f8:50:2b:b3:25:96:9a:d3:d7:9b:
                    3f:05:78:73:07:a9:6d:b6:7d:5e:e9:7c:45:06:d6:
                    39:59:23:28:4e:04:74:68:cd:74:a5:0b:e8:91:c5:
                    b4:66:ec:85:02:ff:07:10:56:4c:c2:f9:57:e7:09:
                    39:af:6d:02:55:3e:a9:3f:bf:54:88:f9:16:cb:4e:
                    e5:0c:c5:e8:e2:a1:09:e1:f0:d8:3c:c2:52:ff:fe:
                    00:68:5f:f0:ba:06:d4:d1:4b:ac:b4:16:c8:19:b8:
                    a4:7e:4c:5d:66:e7:37:8e:3a:7d:35:16:5c:02:e4:
                    5f:34:b6:68:bc:e5:95:65:19:cf:70:58:05:5a:dc:
                    84:ea:2b:9d:13:ac:f8:ff:5f:0e:91:46:ff:ac:33:
                    ba:ab:6e:ed:83:bd:bf:dc:28:ad:e4:df:d0:1f:8a:
                    c3:8c:4d:1a:db:d8:55:e0:43:85:9f:1f:8c:e8:f7:
                    ea:be:f2:34:26:18:cf:bd:51:1d:b6:49:29:04:b9:
                    75:89:e0:9c:dd:07:9e:20:54:53:ec:a6:6d:68:fb:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:96:91:0F:55:4F:A1:1C:B2:FE:C9:FF:90:63:CB:F9:25:46:2A:4D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3435353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:455::/80

    Signature Algorithm: sha256WithRSAEncryption
         0d:e8:e9:d0:8e:1b:ba:b3:70:a3:3a:ed:eb:9b:83:08:e1:e8:
         cc:54:58:1a:31:e6:ed:97:fb:a9:71:78:2b:d1:f5:20:42:56:
         e7:f6:2e:f5:f2:d0:36:30:fd:dd:d3:d4:b6:76:e1:3c:49:7a:
         45:90:43:cc:a6:d4:6a:44:4c:e3:dc:ce:b5:e4:c1:bd:73:d4:
         40:33:d3:d4:5e:b0:d5:33:e5:a5:c3:1a:f1:e5:ba:bf:89:bd:
         85:d7:9b:8f:94:51:00:0a:d3:4f:0a:bf:a7:02:28:c4:f2:14:
         af:14:8a:e6:1a:e2:00:86:6f:be:57:2f:2c:08:92:2c:11:e5:
         d2:89:d5:45:c6:48:b5:e3:8a:59:51:9b:a9:10:9d:b4:03:e5:
         b0:44:74:19:62:0b:af:42:8b:9a:62:58:31:92:a6:1f:d0:ac:
         bb:4b:a3:60:b7:a1:12:e2:8f:d3:93:95:12:d7:6d:92:1c:31:
         16:5b:bd:8d:98:7d:05:50:f7:ff:d7:7e:a5:b7:f2:f0:61:73:
         33:19:2a:8a:c7:08:c9:16:2e:ef:4c:b7:2f:7b:99:bc:8c:6b:
         54:5b:5e:e0:bf:dd:c7:f6:30:4d:5d:2b:e9:ee:73:d8:3d:f4:
         c6:d0:f3:22:df:a2:33:0b:1e:54:b7:21:13:3d:d5:bf:01:d2:
         c5:33:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----