Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313130353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a313130353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          aYObfBbIfHC0XLpaRdR4v43CRcZtbnLjN2KOKFfsv5w=
Subject key identifier:   1E:7F:57:82:65:3A:F7:61:72:A5:06:8D:32:C1:04:D1:7F:31:47:2C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0B45395300081B8BB714DDBD6A0ECBE79CD1CC55
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313130353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 11:05:01 +0000
ROA not before:           Sun 20 Feb 2022 11:00:01 +0000
ROA not after:            Sun 19 Feb 2023 11:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:1105::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:45:39:53:00:08:1b:8b:b7:14:dd:bd:6a:0e:cb:e7:9c:d1:cc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 11:00:01 2022 GMT
            Not After : Feb 19 11:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:33:1c:33:59:ec:b1:c9:a3:99:af:10:a1:
                    99:c2:2d:03:76:89:60:7e:f4:3f:48:4e:52:3a:19:
                    ed:c7:85:fb:04:97:16:49:92:ec:9c:47:a0:e6:0a:
                    7d:d7:2e:64:84:7d:42:ea:aa:75:87:70:25:e7:95:
                    17:5f:eb:1e:6d:10:26:41:93:1a:03:1e:1c:8f:2e:
                    bb:66:70:43:9e:aa:e9:38:99:96:5b:62:d9:42:bf:
                    73:e3:6c:49:63:7d:05:b0:6c:1a:84:bd:fb:a2:66:
                    e2:d0:9e:bd:58:0b:c1:8e:d9:f8:43:32:17:2a:82:
                    a3:f5:98:c9:ea:16:07:7a:0a:19:a8:f4:59:0e:56:
                    63:fa:6e:52:79:0e:78:2f:75:73:fb:8a:00:8d:a2:
                    53:8f:01:a9:d6:1f:ac:56:c5:8f:5a:91:ac:3e:14:
                    1d:fe:83:ec:b4:d0:f0:d9:c1:b2:c2:23:1f:d0:7c:
                    28:6f:cc:83:1b:21:29:ac:85:54:b8:53:5f:c0:18:
                    09:fc:aa:9f:21:e8:00:92:06:5e:6e:55:15:ba:87:
                    82:e9:55:cb:24:8b:b3:2f:bf:f3:a3:1d:1e:25:08:
                    64:3a:37:9b:bc:92:85:71:69:b2:88:33:1e:23:5c:
                    f4:c7:c0:89:f2:4f:07:e2:04:37:9e:46:1f:2f:de:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7F:57:82:65:3A:F7:61:72:A5:06:8D:32:C1:04:D1:7F:31:47:2C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313130353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:1105::/80

    Signature Algorithm: sha256WithRSAEncryption
         64:4e:c2:09:be:fc:d4:29:77:f6:89:7f:a1:fb:4d:c4:1a:de:
         94:c0:49:05:2b:61:32:2e:12:38:d7:ad:6d:e6:11:3e:15:86:
         6a:6e:3c:35:66:58:56:4f:1e:9a:ab:04:49:0d:c1:0b:d5:a6:
         9c:ff:67:6d:7a:0c:cb:61:6d:1a:ff:d5:7d:69:45:f4:4f:dc:
         db:48:5d:f7:a3:f6:b9:c8:84:83:ba:a8:a6:fd:2f:f1:d8:f1:
         eb:50:e2:e9:ba:fc:7d:60:11:f1:04:25:61:ca:15:8e:93:49:
         d8:49:db:bc:45:f2:24:7b:e6:ac:00:6c:5c:df:38:31:7b:23:
         4f:15:45:11:1f:f3:4a:a1:3e:11:d2:8d:17:65:a1:0b:39:01:
         8a:9b:f5:33:44:3d:08:bd:d1:bf:c2:44:36:a6:bd:12:45:92:
         0c:ae:37:46:3c:cf:11:31:94:43:1c:4c:77:a0:92:10:86:81:
         11:79:a9:66:a9:5f:0b:92:c5:bc:d1:e0:e2:ae:f9:e1:c6:73:
         df:1c:e0:c5:fa:c3:8d:35:31:de:b1:15:08:8f:98:bf:d6:7c:
         81:bb:cb:e2:d5:da:92:31:35:fe:13:d7:90:7e:e4:3c:14:2c:
         2e:0d:18:b1:56:72:11:94:43:74:43:86:e6:72:0d:eb:69:84:
         11:64:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----