Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313134353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a313134353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          gCD0Iv/7YEELliyrCUoJWyrFhOPDmzGTKX4jEdBqzrk=
Subject key identifier:   41:F1:A7:AF:AD:BD:80:8D:75:F7:A0:6C:68:EC:FB:79:E1:94:81:84
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5D89357036B8604F820D8F88137D54796B0902F8
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313134353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 11:45:01 +0000
ROA not before:           Sat 19 Feb 2022 11:40:01 +0000
ROA not after:            Sat 18 Feb 2023 11:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:1145::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:89:35:70:36:b8:60:4f:82:0d:8f:88:13:7d:54:79:6b:09:02:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 11:40:01 2022 GMT
            Not After : Feb 18 11:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6d:18:a5:96:a9:03:85:60:ec:28:9a:24:f8:
                    3d:f2:c9:7f:9d:6f:af:7b:08:0e:9f:ea:23:99:ef:
                    46:c1:6f:03:61:17:cc:23:8e:d7:75:d1:68:db:78:
                    aa:a0:73:26:88:19:54:f4:02:11:50:b5:81:7d:c5:
                    1c:78:ce:20:db:35:46:c1:01:cd:b6:11:b7:97:be:
                    0a:c0:04:5f:00:a6:4b:c9:fd:c1:8e:16:62:45:73:
                    ea:ea:0d:56:47:9a:95:9e:4d:91:fd:2d:cd:15:25:
                    bb:e5:32:9b:72:5a:2a:c8:72:0c:da:e7:5d:1d:5e:
                    25:1b:27:67:27:37:bf:80:ab:22:b7:bb:a8:ae:1c:
                    72:73:67:1f:36:e3:69:62:e5:46:a8:3a:10:52:8d:
                    d6:73:59:99:23:cb:7c:36:54:fc:e7:5b:85:16:6c:
                    89:fb:cd:27:93:dc:c8:41:eb:dd:9b:d9:73:25:2f:
                    fe:b2:5a:81:b8:68:ae:49:8c:ba:7c:be:a7:09:2a:
                    dd:9b:a2:ba:34:9a:4e:03:4f:67:7d:48:4c:a4:af:
                    fe:c0:5b:67:66:31:29:9e:68:d5:1a:15:b7:fb:13:
                    1f:be:3a:8e:09:0e:ed:68:58:a3:52:77:40:bc:58:
                    de:b3:51:b4:40:cb:7b:d0:11:55:bc:00:85:7c:0f:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F1:A7:AF:AD:BD:80:8D:75:F7:A0:6C:68:EC:FB:79:E1:94:81:84
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313134353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:1145::/80

    Signature Algorithm: sha256WithRSAEncryption
         33:e9:58:db:85:ca:29:66:19:c6:6d:b5:dd:7c:bf:2f:bf:2d:
         e8:86:e5:e1:b5:56:56:da:bd:41:c2:af:79:ba:45:70:f2:58:
         2a:6a:0a:59:21:00:97:58:ec:aa:f1:a4:b3:96:42:35:2e:54:
         74:54:eb:46:16:c0:bc:1a:d1:20:5e:ec:49:11:f7:50:82:d8:
         1c:05:1f:0f:9b:fc:61:4d:bb:46:a6:81:82:c5:11:1c:41:87:
         76:53:5c:4b:ef:6d:5a:ed:ca:9b:33:90:12:3b:1c:b5:6d:2d:
         7a:09:7f:a9:40:b3:3e:5c:7d:b2:18:f7:fa:4d:3c:c9:2b:2e:
         b7:e3:4a:47:83:1a:2e:1b:35:f8:69:ec:20:90:33:c9:62:78:
         66:d9:21:1b:a7:3a:98:4c:40:55:66:43:9a:48:91:e3:98:fd:
         6a:5b:ba:05:01:ac:5c:09:16:4c:17:65:da:dd:5d:ce:4d:c0:
         f9:9e:d4:be:d6:c3:04:45:66:5a:2c:77:b4:65:7f:92:9c:a0:
         1a:c7:f7:8b:fb:4c:42:70:91:95:19:77:d1:80:ea:99:63:7a:
         43:67:50:0b:d0:26:49:94:8b:eb:fc:0a:ca:71:bc:81:a9:6e:
         45:f2:b1:19:7d:af:1b:b7:52:74:f1:46:a3:49:2a:e4:ab:ed:
         84:a0:65:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----