Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313631303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a313631303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          HoicUcEhTnYpeQMJKpMLpCXa+CohzsBOY3gccZ2mtac=
Subject key identifier:   B1:1A:F5:6C:BE:1C:A0:7C:F6:82:62:EA:ED:17:1B:7C:C3:7D:FC:BD
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       32A807AAFC22D897ADE842B23C5D2FBE5C479D25
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313631303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 16:10:02 +0000
ROA not before:           Sat 19 Feb 2022 16:05:02 +0000
ROA not after:            Sat 18 Feb 2023 16:10:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:1610::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a8:07:aa:fc:22:d8:97:ad:e8:42:b2:3c:5d:2f:be:5c:47:9d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 16:05:02 2022 GMT
            Not After : Feb 18 16:10:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:e4:1f:38:1a:89:3d:7d:39:e8:98:e2:57:
                    11:21:4e:66:e4:c2:a6:2c:0b:e2:a0:b6:92:ab:7a:
                    d0:6e:2d:68:2d:98:2a:f4:ef:01:6d:4d:3c:d9:fa:
                    d4:97:d2:0f:8d:fc:36:00:91:7d:4f:c3:6d:5e:08:
                    27:3f:7e:22:6c:17:0e:a4:74:86:ab:18:ab:3e:98:
                    79:fa:56:83:1a:2a:f5:6b:9d:42:ca:37:dc:6d:62:
                    fe:30:a8:2e:da:69:60:f3:45:33:d4:ce:d7:18:7f:
                    ce:3b:72:e6:34:8d:a9:87:4a:80:90:03:df:37:8f:
                    a2:17:c1:bc:33:af:5c:1d:96:7e:52:b0:54:46:0c:
                    44:d8:0c:ff:9c:21:6d:b7:8d:88:8a:bc:ab:b7:e5:
                    1b:f0:04:f5:bb:14:b4:72:67:0a:46:04:12:13:f6:
                    3d:89:c0:32:10:b9:ac:76:01:a4:00:74:04:94:86:
                    5b:44:34:ec:84:da:a4:ab:d4:2c:32:41:51:2b:b9:
                    b4:19:69:d4:f1:26:e2:9d:0a:e5:57:6a:02:d1:86:
                    7b:95:26:29:45:e2:79:cd:04:19:6f:52:b4:d5:8f:
                    1c:91:86:5a:75:c5:0f:95:e7:f4:58:d8:7a:d2:62:
                    04:77:b7:47:d2:a2:0e:6d:d7:0d:76:92:21:90:c5:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1A:F5:6C:BE:1C:A0:7C:F6:82:62:EA:ED:17:1B:7C:C3:7D:FC:BD
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313631303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:1610::/80

    Signature Algorithm: sha256WithRSAEncryption
         1b:af:20:aa:ea:39:b0:05:e2:3e:99:9f:f0:34:40:78:2b:5e:
         61:47:07:0c:9f:43:85:24:db:cc:d8:a9:3c:42:55:f6:6d:38:
         39:90:49:41:68:37:8f:14:a4:0c:52:2c:40:5a:29:db:a6:37:
         4a:a6:6d:80:78:f5:9a:79:cb:f9:1f:3b:55:fd:56:69:fc:20:
         0f:07:d8:99:34:cb:3e:14:79:3a:e7:7a:ee:d9:d5:79:07:36:
         7c:f6:34:a1:30:3c:5c:74:ae:42:f8:20:94:5c:15:b9:3b:f5:
         8c:e9:1f:b1:14:8f:34:6d:a8:be:75:aa:6a:57:e4:67:94:37:
         62:2d:ad:b8:5d:74:f3:e1:46:b5:ef:dd:b2:dd:b2:f7:ae:ff:
         a3:98:d4:e6:4e:c9:1a:08:4c:46:85:31:d9:7f:86:a3:b4:ce:
         0e:d5:db:8b:13:37:b8:20:98:d2:e4:4c:ea:03:a9:38:0f:82:
         2e:ea:a4:6f:37:ad:b5:62:4b:13:9f:d4:8c:ff:ad:25:02:a6:
         f7:41:02:4a:c0:fb:d3:7b:ad:2d:81:8a:57:64:0d:f7:76:d6:
         07:cf:bf:f4:60:d0:08:5c:35:f6:bf:93:0d:4d:c3:1e:3e:be:
         33:cc:57:80:05:6e:e5:78:d6:83:8a:b5:a1:b9:16:23:62:af:
         95:a9:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----