Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3932353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a3932353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          ID28HUWNNJXrH4n6f2up3UdW/10UI98jRKTD3d+89ws=
Subject key identifier:   B7:A2:B3:06:38:5C:C0:EB:3C:7A:63:EE:E6:E5:18:0A:B4:C1:35:E2
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       411E90092E6C8840E737F308FD191ED4C1857172
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3932353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 09:25:01 +0000
ROA not before:           Sat 19 Feb 2022 09:20:01 +0000
ROA not after:            Sat 18 Feb 2023 09:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:925::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1e:90:09:2e:6c:88:40:e7:37:f3:08:fd:19:1e:d4:c1:85:71:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 09:20:01 2022 GMT
            Not After : Feb 18 09:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:89:37:ed:dd:e2:35:6c:42:0d:d6:9c:87:ec:
                    39:cb:e6:1b:38:ef:b8:78:5f:a4:ea:d1:65:b4:4d:
                    c8:28:49:7d:68:ff:a5:6d:a7:1c:1f:c1:ec:aa:9f:
                    59:07:18:c7:77:ff:ff:eb:8e:37:60:1b:68:ad:e1:
                    8e:12:3a:14:da:f0:cc:43:12:83:5d:45:31:d6:e6:
                    dc:93:2c:ba:11:df:31:0c:a0:7f:73:c2:36:64:85:
                    af:d6:e0:2d:8f:9d:90:e4:f8:af:01:ca:b0:02:51:
                    29:21:34:c9:4a:26:d4:8b:3e:26:b8:16:f4:f2:6a:
                    3f:f4:a8:74:b6:37:c6:0b:64:fe:7f:6d:c2:eb:2a:
                    76:78:f8:85:ec:61:07:69:2b:92:27:57:2f:7f:a4:
                    b1:72:9c:97:5b:2c:f6:a9:b6:42:de:51:c3:8a:31:
                    33:c1:cd:78:01:8b:d8:bb:9e:fb:79:f4:23:d0:41:
                    8d:83:57:49:d6:e8:b6:cc:d7:6a:87:3c:ad:4d:28:
                    c7:d1:8a:0c:3a:34:c7:3b:cb:b6:e6:21:79:bb:a1:
                    1b:74:1c:dc:1f:9a:5c:d0:06:8d:2a:ee:83:03:0f:
                    63:4a:72:68:7d:40:a1:23:64:fe:0f:a2:b5:d6:71:
                    bd:7a:65:b6:d3:1a:0e:e2:1a:5b:74:2b:ea:c1:30:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A2:B3:06:38:5C:C0:EB:3C:7A:63:EE:E6:E5:18:0A:B4:C1:35:E2
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3932353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:925::/80

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:85:55:77:9b:72:91:0f:d1:ce:01:5f:df:a8:8e:c0:3f:
         fb:5b:18:b7:0d:57:54:4c:08:bc:e1:de:22:e9:07:fe:82:e5:
         28:6e:71:81:ea:16:f6:03:a8:b0:bb:23:7a:e0:22:2b:81:cf:
         a0:43:f8:2a:d5:83:3f:a3:0e:3d:2e:fd:b1:7d:a0:ec:cb:a8:
         2a:e0:3e:91:01:34:dc:3e:09:4a:67:b8:1f:e4:8f:d5:61:fa:
         af:e6:2c:c4:e2:06:66:5e:42:26:36:11:b8:e9:6a:1d:38:fe:
         75:2e:e0:2f:87:f8:98:23:9e:92:e8:8c:b0:5f:2c:e2:c8:72:
         c9:c2:80:ff:cb:0a:7c:d5:db:6d:2b:6b:0f:9b:a9:d5:7c:f3:
         33:6b:9b:c2:a7:ea:e5:68:ad:fd:bd:9e:98:6a:cf:2d:86:37:
         e4:58:66:60:49:30:db:e3:69:bc:ec:f3:eb:6e:2e:d8:4e:eb:
         ed:ab:37:06:55:ab:cb:0e:64:30:56:20:76:34:8b:80:f6:d3:
         28:7e:30:10:94:c9:8a:9a:d2:b3:c6:c9:70:ff:85:bb:39:2c:
         b4:e5:b3:ef:1d:f2:4d:34:3c:91:64:a8:93:9e:d6:17:4e:c9:
         8b:00:78:c8:1d:9e:05:b0:85:4b:f9:9a:6b:21:66:b5:2e:44:
         a7:f2:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----