Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323034303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a323034303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          8rlKZT3mSKMf54nPAY0uvkHxX0NYe68P2VVddQOijpo=
Subject key identifier:   13:0B:C7:E4:CB:51:49:F2:B3:86:E5:96:71:1B:5E:34:A8:83:F2:27
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0F2099DA80E8C59B833BC63A3A4E266B9530FE6C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323034303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 20:40:01 +0000
ROA not before:           Sat 19 Feb 2022 20:35:01 +0000
ROA not after:            Sat 18 Feb 2023 20:40:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:2040::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:20:99:da:80:e8:c5:9b:83:3b:c6:3a:3a:4e:26:6b:95:30:fe:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 20:35:01 2022 GMT
            Not After : Feb 18 20:40:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:18:3c:0d:fd:10:f4:03:4f:85:57:12:35:ed:
                    37:ba:84:cc:f3:2a:7f:b2:d8:4c:e4:d2:c6:eb:e4:
                    43:7d:07:f4:2f:32:8c:65:a1:38:5e:13:c0:63:82:
                    db:ab:f9:d1:7f:f5:92:ae:ca:be:70:ee:3a:cd:04:
                    83:a1:70:06:ce:5a:d3:c3:86:dc:e3:90:af:a3:ed:
                    72:bc:b7:4e:1b:68:9b:03:c8:a2:f3:40:86:bb:18:
                    27:29:a7:9d:d6:c1:c0:04:35:40:69:90:45:54:0c:
                    f8:f3:f1:af:ee:3f:14:4b:1d:a8:2e:73:30:db:1a:
                    58:31:0e:ee:26:02:be:96:5a:2d:28:6e:3b:7d:09:
                    a8:e5:0b:c3:be:09:4c:7a:33:b5:e0:bc:8e:46:0b:
                    38:b3:ea:cb:19:78:26:60:92:5c:d7:48:df:f0:a3:
                    37:cf:de:75:7c:ae:df:a0:7c:46:20:c8:27:e0:17:
                    5c:06:a4:81:e5:b2:a1:31:c0:9e:26:11:f8:86:d7:
                    cc:10:20:66:32:e6:4f:ab:c4:e0:fd:f2:bc:71:fe:
                    90:9a:4a:3d:ea:65:bb:28:77:fe:c7:22:1a:ac:bd:
                    f7:1d:5d:f2:ef:17:60:d6:ba:55:88:6c:c3:43:2c:
                    0b:43:f0:13:31:ca:61:06:64:2c:2d:92:70:1e:20:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0B:C7:E4:CB:51:49:F2:B3:86:E5:96:71:1B:5E:34:A8:83:F2:27
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323034303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:2040::/80

    Signature Algorithm: sha256WithRSAEncryption
         43:c9:d0:f8:39:08:f4:6e:7a:78:cc:68:12:99:69:33:9e:8f:
         9d:9a:8e:de:63:6d:16:b5:cc:8e:a5:69:09:c4:88:6a:27:0f:
         63:5a:7f:8f:bc:5b:84:7d:ea:cc:a1:03:96:a6:84:15:e0:61:
         14:2b:a0:e6:d9:af:15:69:d8:1b:7d:99:33:1c:3e:aa:52:f4:
         37:34:c5:6c:64:34:f0:80:26:f0:0b:50:eb:36:b5:42:0c:ce:
         c9:58:4f:23:3c:bc:9e:07:ae:f3:79:e5:27:d6:e9:1d:46:e0:
         77:76:20:f2:a1:46:e2:54:1d:45:4f:55:81:62:63:68:2b:09:
         fd:96:34:a2:bf:f6:d9:8f:85:a7:df:95:6b:c7:14:df:37:ab:
         24:03:1f:5a:22:64:c3:fc:5e:1d:a3:e9:e8:76:bb:e8:13:c9:
         6d:9a:bc:36:2a:13:45:87:9b:38:d9:6a:e1:c6:ca:e3:de:1a:
         44:b1:ce:89:c3:29:de:8b:75:86:d3:64:84:ff:4d:4b:22:5a:
         79:48:d8:0a:34:6e:39:6a:02:cc:27:cc:9f:09:cc:e4:10:b0:
         3a:ca:a0:96:ac:09:48:73:60:49:60:ee:49:a9:e1:e7:68:8a:
         79:5f:21:57:ac:5d:7b:04:de:4e:58:24:86:fb:cd:ee:b2:0a:
         22:5b:0b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----