Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313335353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a313335353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          9agscAMlKpslzgnSMxQ8+KGkZPms+A+zDjOjEBWzDOg=
Subject key identifier:   44:B5:27:85:5E:88:EB:98:D9:87:0F:2D:22:A6:F4:33:CF:01:A0:66
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2F08FB24D929BD78EB9775462949CA9A80354B2A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313335353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 13:55:01 +0000
ROA not before:           Sat 19 Feb 2022 13:50:01 +0000
ROA not after:            Sat 18 Feb 2023 13:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:1355::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:08:fb:24:d9:29:bd:78:eb:97:75:46:29:49:ca:9a:80:35:4b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 13:50:01 2022 GMT
            Not After : Feb 18 13:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:93:01:d7:a2:3a:1a:1b:72:0c:ab:cb:2e:
                    27:8f:54:91:97:be:27:5e:84:d4:ca:d0:0d:4b:bd:
                    89:75:55:e2:5b:12:52:3d:88:5a:fc:2f:0f:b4:d6:
                    b6:e5:eb:34:ca:88:9a:11:9a:66:7e:8e:30:d0:6c:
                    b0:fa:a4:9c:5a:aa:02:a2:5f:47:2f:be:de:93:eb:
                    a0:a5:11:3c:65:2d:02:27:0b:e9:c5:16:2d:28:b3:
                    30:11:79:52:2a:1d:bd:62:d8:3c:f5:57:e0:17:19:
                    64:49:f7:ac:1e:11:54:c9:9e:2f:ba:c2:86:b8:37:
                    5f:af:f0:15:e7:e0:be:a0:ad:43:b6:a9:71:69:cf:
                    cd:b2:df:f2:cd:c3:6d:2b:e6:45:86:cb:96:fe:72:
                    04:1b:c0:09:2b:d7:04:ad:6a:8c:b7:c7:80:b6:8d:
                    f5:ad:34:6d:e3:cd:b7:77:a3:fa:bb:19:0c:6e:ab:
                    c5:f8:a1:f8:da:14:e0:05:90:fc:b0:04:4f:29:92:
                    d1:a4:60:44:8f:27:dc:54:9e:50:8d:ce:65:11:23:
                    1a:e4:52:1f:94:84:d7:57:da:27:8b:99:4b:2d:41:
                    8b:30:ff:b9:7d:8c:5d:d3:5c:e0:11:cc:cd:42:7a:
                    fa:9f:35:4e:93:b8:4c:f5:81:13:cb:5a:a2:07:ee:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B5:27:85:5E:88:EB:98:D9:87:0F:2D:22:A6:F4:33:CF:01:A0:66
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313335353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:1355::/80

    Signature Algorithm: sha256WithRSAEncryption
         d4:74:33:25:01:b9:2e:63:8d:80:f9:3a:f3:28:2c:36:55:a5:
         46:0b:c0:76:57:ca:e6:d1:d3:89:e6:39:67:b5:71:12:d6:cc:
         d3:ed:1b:ab:80:ea:dd:ef:1e:50:1b:e6:36:bf:2b:45:7c:61:
         f6:94:d2:1f:e8:71:73:b9:96:7e:37:63:e9:c7:09:90:18:06:
         88:1b:5e:96:cf:aa:1a:40:75:ba:24:25:47:75:ee:c0:b5:d4:
         9c:63:77:85:6c:10:f2:e5:a9:90:f2:34:8f:b9:45:94:80:52:
         ca:fa:60:23:2e:c1:1e:be:55:4b:79:8b:49:e1:2e:dd:cb:37:
         5b:29:86:41:a7:47:69:34:c2:be:fd:28:8c:48:63:90:7a:8e:
         91:d1:d3:88:ef:13:1e:f7:7a:e1:15:11:7c:34:eb:47:7b:fc:
         ce:f3:6b:57:8c:bc:73:bb:cb:20:dd:6c:b9:d4:32:2a:57:ef:
         73:ed:4a:8d:82:aa:df:77:f5:db:c1:6e:5f:bb:70:b3:22:ab:
         70:b0:f1:40:52:41:e7:c1:1f:2e:c1:90:1a:e1:a8:7f:01:15:
         45:76:c5:de:ff:9f:57:e2:3a:8b:c4:82:93:30:ce:47:00:b3:
         12:1d:95:90:7f:b9:57:d8:7d:20:01:f8:92:1a:74:df:5e:84:
         08:10:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----