Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3235303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a3235303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          tFtQJ3hhKsALuRMsnuQ6Uz+Q8wBt5DTlM+BP+2iEdZc=
Subject key identifier:   88:AB:2C:96:1D:5B:22:51:C3:0B:5D:09:B5:D6:F8:82:B8:F8:91:83
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0605A389BC3F20B98DC479B5388C370F9984FE25
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3235303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 02:50:02 +0000
ROA not before:           Sat 19 Feb 2022 02:45:02 +0000
ROA not after:            Sat 18 Feb 2023 02:50:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:250::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:05:a3:89:bc:3f:20:b9:8d:c4:79:b5:38:8c:37:0f:99:84:fe:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 02:45:02 2022 GMT
            Not After : Feb 18 02:50:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:f2:ce:73:f5:0d:39:89:5e:0a:ca:a3:8b:
                    e4:da:ad:4f:ec:db:b9:08:7c:d6:34:4f:bd:16:55:
                    d2:dc:7b:e0:63:f4:4b:20:fc:78:bf:eb:12:5c:c4:
                    f2:72:bd:06:81:bf:b9:2f:9b:e6:fd:05:ac:8c:68:
                    bc:5c:f1:3a:cb:b7:70:2c:53:99:d4:66:e8:bc:7f:
                    d8:8d:c2:18:54:82:68:b0:89:04:0f:71:d1:a2:88:
                    00:7e:63:e3:ad:1d:65:8d:e9:54:bf:6f:50:20:29:
                    70:9c:de:ef:e4:06:45:f8:30:12:36:ca:36:1d:d1:
                    08:af:aa:19:82:2c:bf:1c:bc:2e:26:cc:9c:cb:7f:
                    e5:29:ae:43:2d:b3:5d:cb:35:87:4c:fe:97:c6:d0:
                    61:c2:af:4b:d4:47:5b:13:3e:70:65:4a:3d:d4:61:
                    80:9f:7e:85:14:6c:c5:f1:d1:cd:b5:79:fe:6b:d3:
                    fe:72:6b:17:b9:df:56:20:2d:81:f8:0c:20:64:96:
                    6c:58:8a:7a:a9:38:4d:0f:36:41:43:b0:46:3f:00:
                    18:2f:b6:37:62:14:ce:93:c0:47:b4:de:57:ca:5d:
                    cc:aa:11:6b:d8:56:8c:e3:86:e2:16:9d:22:2d:42:
                    cc:62:5c:14:41:17:e1:f2:1d:1d:7f:48:5e:5b:c9:
                    c6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AB:2C:96:1D:5B:22:51:C3:0B:5D:09:B5:D6:F8:82:B8:F8:91:83
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3235303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:250::/80

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:54:01:c3:e7:df:3d:6e:b4:35:99:7e:78:86:df:60:75:
         33:7f:15:0f:63:58:e9:c4:33:1b:f5:6c:bb:42:b5:2b:e6:4a:
         9c:6f:86:0c:8a:fd:b9:ea:a9:cc:c6:e3:4b:63:07:a3:d3:10:
         da:a0:04:b2:bb:c0:e5:19:30:7d:d2:c8:54:e5:02:d4:a3:93:
         92:2b:f0:a3:ef:20:58:34:d1:c1:99:b1:47:50:9c:b6:bb:ca:
         72:b7:0d:39:b5:f5:3d:dd:81:f5:82:46:e7:32:37:7a:83:c0:
         77:ea:dd:2e:b9:b8:12:ba:35:2f:73:c5:3e:af:2d:b7:1b:7b:
         86:b5:19:a7:02:18:30:6a:a7:b1:3d:4e:98:db:d1:fc:ce:e5:
         09:3f:1b:08:8a:c8:4c:5c:45:e1:71:01:17:1a:5e:4b:68:5d:
         d3:77:92:b6:30:f7:1c:8c:8f:d3:27:7a:21:6f:59:d2:6e:da:
         51:6b:fe:10:9e:a5:1f:fb:7b:58:62:10:65:72:e0:cf:96:68:
         16:3c:60:bb:e9:d1:78:bf:62:91:93:ab:43:22:f1:e9:7a:85:
         d1:1c:98:04:bf:00:12:9d:58:ac:c3:5c:a0:80:e1:54:c1:f3:
         1b:d8:1e:83:29:5b:4e:ec:cb:75:e7:c7:97:22:ac:80:f9:3a:
         d3:ba:8a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----