Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a34353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a34353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          uFcoShFd0sIirHxhd/Oen7xCmD94/9EKdbj9vuR1jjU=
Subject key identifier:   D5:BC:C6:D4:57:48:52:20:AF:63:3F:3E:7C:01:11:B9:7A:A3:1D:95
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       22429800658070E2BD5A2623B90CAE6450CA5687
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a34353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 00:45:02 +0000
ROA not before:           Sat 19 Feb 2022 00:40:02 +0000
ROA not after:            Sat 18 Feb 2023 00:45:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:45::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:42:98:00:65:80:70:e2:bd:5a:26:23:b9:0c:ae:64:50:ca:56:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 00:40:02 2022 GMT
            Not After : Feb 18 00:45:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:2d:80:33:6c:18:b4:1b:c7:32:3e:ca:84:
                    5b:0d:30:f7:3f:78:9e:04:71:ab:05:81:3b:e8:b1:
                    cc:83:c5:dc:bc:d0:58:7b:2d:eb:d0:f1:c3:70:22:
                    e1:fa:ca:64:60:70:1d:9c:1b:a1:a8:46:a3:2d:07:
                    36:28:ee:77:9b:57:c0:99:45:af:57:b7:cd:88:65:
                    eb:3b:71:f8:08:34:b1:35:98:8f:bb:c1:ff:d8:f2:
                    be:38:0d:df:41:ef:e6:e1:21:3b:e2:7b:cc:c6:71:
                    ff:25:ef:06:17:27:f5:08:85:be:b7:7c:d6:4c:cd:
                    b2:b9:96:21:2e:c7:58:54:a9:55:9b:d9:b8:08:b7:
                    a1:c8:fd:e9:3f:96:73:37:c7:e2:5d:4c:ca:a3:9c:
                    44:56:1a:14:2e:ab:b3:b0:4b:e4:26:b0:b8:86:10:
                    98:c4:e7:ef:f4:9b:31:7c:f3:39:a9:a8:a9:97:98:
                    6e:60:f4:f2:9b:57:af:bd:af:12:dc:1f:5f:77:3d:
                    b0:b8:87:d1:62:99:bc:72:53:85:e4:49:0f:79:db:
                    ce:39:37:06:6b:9f:fb:2b:7f:70:b8:56:7c:02:50:
                    85:9e:e4:73:dd:a6:f1:c6:16:6c:28:7f:ce:af:69:
                    dc:f1:86:c8:9d:63:da:f5:84:67:aa:10:ad:ef:09:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BC:C6:D4:57:48:52:20:AF:63:3F:3E:7C:01:11:B9:7A:A3:1D:95
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a34353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:45::/80

    Signature Algorithm: sha256WithRSAEncryption
         d1:e5:5d:ca:6d:cc:91:0f:b0:61:19:a5:a7:55:1a:e0:bc:e8:
         7b:34:38:25:31:39:f7:61:46:06:63:92:3f:7e:7c:ff:57:79:
         af:71:16:94:25:d8:bc:c0:58:a0:9a:d2:51:0b:a4:52:a0:47:
         23:a0:30:e7:93:4c:80:6b:de:7b:55:cb:c6:dd:6f:78:e7:ee:
         98:4b:77:ab:f0:09:41:9a:31:35:c9:94:82:ba:17:db:14:aa:
         62:bb:87:bc:fe:03:d7:d9:ac:eb:93:2c:d4:74:5c:94:bc:01:
         b4:c4:0a:ae:28:15:1c:43:7b:44:59:30:c0:40:95:58:c7:16:
         38:12:78:2c:cd:7f:d1:12:fd:24:b2:4a:00:a2:a7:f6:ff:cb:
         86:0d:08:f2:33:b6:a8:3a:f0:ad:fd:7f:4f:c4:2d:19:61:bc:
         c8:ff:0a:24:b5:c6:7d:59:61:aa:33:0f:fc:c1:09:b3:9e:af:
         e4:29:c5:2f:18:20:b2:59:4c:f3:73:a6:80:ff:38:95:62:8a:
         16:2d:27:b5:8e:b1:20:89:74:3d:00:e5:2a:3a:56:52:65:05:
         4d:db:42:8e:98:27:b0:b9:93:f4:59:a4:0a:9d:94:2d:5d:91:
         7a:54:44:16:16:80:bf:49:aa:a3:f1:c9:d7:9f:ab:84:a1:04:
         f8:b3:e7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----