Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3932353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a3932353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          ggCj3y+A6ZLoLjnByr8B6CaP7QCL77sH7ajCwck+4pw=
Subject key identifier:   CE:6B:94:FE:81:29:01:CC:63:33:92:39:B9:8A:23:CA:E4:AA:D2:59
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5A6372528FBA48285405099DAC073E3F126E57C6
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3932353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 09:25:02 +0000
ROA not before:           Fri 18 Feb 2022 09:20:02 +0000
ROA not after:            Fri 17 Feb 2023 09:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:925::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:63:72:52:8f:ba:48:28:54:05:09:9d:ac:07:3e:3f:12:6e:57:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 09:20:02 2022 GMT
            Not After : Feb 17 09:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:83:be:c8:c1:c7:af:79:7c:d6:9d:e6:89:
                    d5:27:0d:01:75:1c:0a:e4:fb:65:83:b3:7e:67:fa:
                    b7:dc:e9:d4:66:50:00:7a:05:e3:d1:5b:27:a2:0d:
                    a2:cb:4f:fc:55:16:ce:d6:ed:f6:91:e4:c8:d4:a6:
                    f4:fd:fa:08:d6:47:ad:c7:e3:7e:f2:80:da:68:e0:
                    07:d3:3b:fc:80:b0:b4:32:ac:eb:37:cc:cb:b0:7d:
                    76:ba:cc:b3:6b:53:d5:58:4c:5d:65:98:d7:ed:51:
                    62:2e:38:f6:cb:f7:db:04:bf:04:02:b1:bd:00:d4:
                    c4:a8:1c:6c:ae:f7:01:fd:1e:53:cf:52:78:15:09:
                    f0:7c:48:4a:dc:b3:e7:16:77:6b:c8:0d:dc:8e:62:
                    2f:c8:be:a9:06:52:1a:f1:02:87:32:62:d7:bb:c9:
                    b1:25:2d:46:3a:a1:f5:be:79:90:ca:d6:67:07:98:
                    c1:56:f7:f9:78:98:13:66:da:40:0e:43:db:0b:ff:
                    77:5b:3a:52:61:7b:28:be:cd:e8:1c:0b:d4:6a:f9:
                    17:0a:d5:b4:2b:ae:e7:37:13:74:fd:c6:0b:1b:02:
                    65:52:02:ff:c7:57:15:02:06:20:e8:c9:11:0d:a2:
                    b7:7b:9c:f8:e8:7a:0f:b0:52:43:00:ae:16:6b:03:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6B:94:FE:81:29:01:CC:63:33:92:39:B9:8A:23:CA:E4:AA:D2:59
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3932353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:925::/80

    Signature Algorithm: sha256WithRSAEncryption
         25:a9:fc:48:83:c3:d5:ab:a8:84:2e:5d:0a:75:68:73:46:d1:
         46:d5:13:49:bd:a6:6f:96:b2:54:1c:a8:7d:5a:9f:0b:24:f9:
         c6:76:0e:37:25:33:42:0c:11:50:61:20:61:ca:33:cb:56:dd:
         1c:38:74:84:88:f8:c9:be:cd:d2:75:dc:a3:cb:26:13:ec:a8:
         f0:e7:cc:60:32:cb:27:4c:32:c2:a0:1b:6f:6c:f9:c7:97:ce:
         3a:81:58:9f:a8:57:06:04:3a:48:3b:45:67:5a:25:eb:cf:82:
         da:70:0b:fa:33:37:73:d8:35:ca:12:bd:7a:59:c8:27:6d:51:
         1a:78:03:13:7b:05:b9:b1:e8:74:1d:6b:24:76:d5:f8:41:98:
         8c:2e:77:13:64:22:18:a7:5d:6b:f8:4c:83:19:fd:10:1f:55:
         9f:e5:10:7b:b7:be:c7:cf:29:ee:88:f6:61:46:3a:65:17:91:
         03:18:e5:fb:6e:69:c3:ec:63:d8:75:84:79:d2:80:18:58:42:
         45:39:aa:4c:49:21:03:f3:7c:f5:a4:1c:bc:86:e1:37:a1:f5:
         01:54:bc:ed:44:e1:86:21:66:6e:66:13:fa:14:09:62:38:c6:
         9f:0c:e4:a0:a6:d4:a6:26:4b:cb:79:94:33:3f:49:fb:29:e7:
         d3:15:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----