Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313333353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a313333353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          7jsacJJ6fNw+HyypXfdb+Oznrj9dJ+/r/dknhUgTsm4=
Subject key identifier:   47:47:D3:48:E7:CE:2B:43:78:0D:0D:09:EC:E5:25:CC:5F:63:5F:D8
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7D83E916DB65335EC139A54D181802D37E6D62C9
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313333353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 13:35:01 +0000
ROA not before:           Sun 20 Feb 2022 13:30:01 +0000
ROA not after:            Sun 19 Feb 2023 13:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:1335::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:83:e9:16:db:65:33:5e:c1:39:a5:4d:18:18:02:d3:7e:6d:62:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 13:30:01 2022 GMT
            Not After : Feb 19 13:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:8a:93:32:a1:60:0e:a2:08:c5:9d:35:2f:
                    2d:0a:84:34:e5:44:e0:3f:6e:6c:d1:2b:a8:52:68:
                    67:1e:29:a4:cf:78:55:a8:c7:fc:77:c8:61:8c:1a:
                    57:45:54:45:b7:b3:ff:84:d1:ab:5b:d2:59:34:c0:
                    31:4a:f2:cf:31:d5:a2:75:78:2b:37:9a:6c:2f:28:
                    36:42:63:8c:f1:03:06:2b:65:41:d4:51:98:1d:9d:
                    ed:35:64:cf:57:9d:41:74:56:00:81:c6:0f:23:fb:
                    02:65:54:bc:05:31:b5:c4:91:f5:dc:82:93:ea:97:
                    0b:af:7a:63:42:53:61:dd:60:10:69:00:e1:de:99:
                    fa:29:e7:0b:08:09:86:b5:aa:a2:c6:d8:59:c0:fa:
                    83:69:b9:0e:2b:8b:db:dd:9b:cc:47:46:02:e8:2d:
                    15:c4:a7:f2:43:fa:b4:3c:40:e9:35:23:41:ac:ce:
                    2d:0c:61:f2:cc:c1:49:43:01:d5:c4:49:1f:94:d7:
                    e4:ae:14:46:ee:85:41:da:3f:08:77:5e:37:75:9a:
                    e9:67:21:3d:8b:12:63:68:9e:d9:7a:65:a3:cb:be:
                    d1:38:9e:80:48:c3:08:fc:0b:dc:35:4a:1b:99:78:
                    ec:13:e7:c1:bb:c2:1a:48:6c:d1:89:64:76:16:a9:
                    e2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:47:D3:48:E7:CE:2B:43:78:0D:0D:09:EC:E5:25:CC:5F:63:5F:D8
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313333353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:1335::/80

    Signature Algorithm: sha256WithRSAEncryption
         9c:3c:16:38:7d:f6:91:bc:84:f1:4e:b5:f6:f2:d7:d7:ce:c6:
         1c:2d:08:35:e9:46:ce:9a:8b:da:8e:24:04:2e:ec:7f:aa:7c:
         ea:41:2b:51:ab:54:e5:5e:ad:cf:56:9c:46:5e:1d:f4:1b:93:
         d1:86:5d:85:ff:a1:37:b4:92:86:6e:25:22:3d:bd:3a:09:a9:
         83:61:0b:be:68:7d:4b:84:f0:10:c3:47:0d:95:b0:94:ea:1e:
         90:7f:c1:4a:0b:98:04:38:3b:ec:03:20:d5:cb:52:ea:5b:56:
         5a:f4:61:9f:f2:e7:1e:74:00:93:cc:e2:05:cb:9e:fa:90:39:
         84:f9:0e:05:e8:a0:a8:b1:a3:cd:30:3b:8d:86:e0:30:7a:b5:
         53:fa:5a:bc:6e:78:dc:ad:24:45:95:0c:13:3e:6a:16:13:80:
         69:67:ca:6f:7b:c3:4f:00:75:4a:2c:fb:2c:dd:dd:3f:59:4d:
         1c:07:21:9b:73:9d:38:65:a4:c4:f1:ea:17:d5:66:29:44:c0:
         a0:77:db:ea:d8:83:ea:12:1d:dc:22:a1:2f:1f:c5:7a:7e:05:
         47:cc:ee:53:f7:d4:7d:08:cf:34:b3:03:e1:25:01:be:79:9b:
         c0:7b:2c:89:bf:e4:84:b0:03:68:3f:ed:88:06:3f:79:c6:eb:
         e2:f3:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----