Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323131353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a323131353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          qdo+88IGj5JaIiKVhCsdOCnWF1gUAbmf7ovGZ9x2CGU=
Subject key identifier:   7B:24:8A:CA:B3:50:50:4E:B3:A3:21:5F:79:54:CB:9F:EE:74:97:D9
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5736D4415D9080ABC3959AA6720520D585D25334
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323131353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 21:15:01 +0000
ROA not before:           Sat 19 Feb 2022 21:10:01 +0000
ROA not after:            Sat 18 Feb 2023 21:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:2115::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:36:d4:41:5d:90:80:ab:c3:95:9a:a6:72:05:20:d5:85:d2:53:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 21:10:01 2022 GMT
            Not After : Feb 18 21:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:ae:dd:9e:c2:7e:47:10:02:6e:04:de:76:
                    b1:de:39:78:80:ba:06:96:d2:49:43:31:5f:35:ba:
                    02:fd:64:e0:0a:6d:5c:d1:8c:77:3f:bf:64:bc:9a:
                    ed:69:df:6b:63:cc:87:09:84:c8:80:67:8e:e6:13:
                    ab:0d:26:b8:7a:5e:79:58:98:8d:91:a7:77:a5:95:
                    28:61:00:a2:87:42:a4:d9:37:58:09:f9:04:cc:3a:
                    88:62:4d:76:c9:17:1a:73:53:c8:ef:2a:49:6f:c3:
                    67:3b:80:ef:62:46:7e:fd:56:16:7e:c8:45:5f:a1:
                    14:a7:bc:62:f0:56:34:4a:4b:25:ed:44:9c:ac:63:
                    13:9f:d8:13:b5:2f:51:68:ba:1e:16:07:fb:04:de:
                    7b:5f:8a:61:43:1d:d5:74:e6:fb:d5:8c:23:fa:37:
                    32:33:8b:39:30:44:2e:f9:a6:4a:e7:bd:fd:52:88:
                    e0:f4:0b:6b:0d:73:13:e9:bd:47:97:a4:c7:ac:2c:
                    67:08:82:48:a1:2c:d0:aa:68:c9:5b:ec:f6:dd:e9:
                    9e:31:e5:cc:a6:81:bd:c7:87:d9:a5:84:83:9c:ce:
                    5b:7d:47:12:fa:c3:ff:60:b8:99:28:55:09:1c:20:
                    88:ec:47:b3:e8:48:ee:4e:d6:95:fb:f4:2a:ff:2f:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:24:8A:CA:B3:50:50:4E:B3:A3:21:5F:79:54:CB:9F:EE:74:97:D9
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323131353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:2115::/80

    Signature Algorithm: sha256WithRSAEncryption
         32:4a:fd:85:6c:66:a5:75:86:66:f1:c1:b4:60:ea:51:6f:d3:
         2a:e1:4f:44:75:e6:da:92:50:51:bf:52:c2:8a:e6:96:d4:d8:
         eb:6e:cc:71:bd:37:e8:de:8e:87:71:e6:fc:54:82:ea:b0:b6:
         06:3e:4c:21:3c:52:13:27:c8:25:f8:c8:18:b8:9e:7c:da:b7:
         7a:18:2e:2c:ac:e6:f8:ba:f7:ca:e6:05:2f:a4:e1:99:36:bf:
         35:e9:95:44:2c:ea:b4:0f:87:67:93:28:f2:b9:62:97:92:83:
         2d:24:32:83:ad:fd:d1:78:86:ef:40:11:e0:3d:63:fb:80:ac:
         3f:d3:c9:5f:5b:9b:10:50:29:70:b8:81:83:8a:fc:d5:96:af:
         b0:7d:fc:ea:d4:de:42:a6:1a:ba:6a:92:83:ee:18:5f:5a:3b:
         1c:37:2d:5c:12:e1:62:45:4c:b7:4c:24:92:73:fa:53:49:ce:
         60:de:2a:c8:ea:36:51:f5:e0:14:e5:c5:15:7b:d4:3d:72:26:
         c1:76:21:01:c0:64:67:fb:7d:c2:82:cb:68:64:bc:ea:bc:1c:
         86:41:6c:68:cc:b9:94:fb:19:8c:78:03:7e:38:09:f1:37:33:
         9c:20:67:c6:5a:7b:22:70:bb:8f:74:de:43:ad:f7:48:69:8a:
         c1:49:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----