Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313430353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a313430353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          QeiMbGP3SbW3XzUhXDKIxMBqr6nNkBz+SmNmC6x7tO8=
Subject key identifier:   60:F5:F5:3E:D9:AE:95:93:7A:EF:7F:E6:7A:24:A9:E2:32:C7:A6:E1
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       188DAD342495B2B1944EB8EA12BEFF373426C8AD
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313430353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 14:05:01 +0000
ROA not before:           Sun 20 Feb 2022 14:00:01 +0000
ROA not after:            Sun 19 Feb 2023 14:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:1405::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8d:ad:34:24:95:b2:b1:94:4e:b8:ea:12:be:ff:37:34:26:c8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 14:00:01 2022 GMT
            Not After : Feb 19 14:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:84:35:16:40:ee:7a:db:b4:2d:d2:90:01:9d:
                    32:84:23:9e:29:a8:48:bb:a1:d5:87:bb:b7:91:bb:
                    61:70:50:fd:81:3e:39:bc:9e:3e:73:e9:91:6c:81:
                    10:2a:c6:b5:e3:c7:7e:fe:98:6f:39:22:7c:96:65:
                    51:45:78:c3:4e:a4:39:67:ba:ca:ee:92:ec:47:5b:
                    64:60:ed:33:ee:63:34:47:3a:e4:74:8e:04:46:b0:
                    5d:8b:c4:f3:6e:bd:df:21:84:2b:f0:55:10:79:55:
                    d2:ea:70:1e:40:6e:a8:9d:19:ba:d8:21:dd:47:52:
                    d3:66:7c:f9:0f:0f:98:c4:16:22:d2:d5:1b:45:fa:
                    98:0f:de:c1:42:a9:19:71:23:a1:28:e5:13:95:1c:
                    93:86:65:98:f0:10:d0:ef:96:7f:c1:2b:e3:49:dc:
                    ad:0a:0d:b4:be:b6:b4:4c:24:37:16:4f:58:0f:e9:
                    81:46:2a:71:74:84:be:a8:27:68:48:64:5f:b9:ac:
                    20:54:8e:e3:78:d9:de:08:e4:bc:25:c2:88:42:3e:
                    57:d5:d4:d8:a7:01:19:2d:ea:61:92:80:da:07:23:
                    d5:6c:bf:37:80:0e:34:05:03:eb:41:a9:0e:11:df:
                    5d:4e:73:82:24:3e:08:43:3f:23:c0:40:2f:a1:82:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F5:F5:3E:D9:AE:95:93:7A:EF:7F:E6:7A:24:A9:E2:32:C7:A6:E1
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313430353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:1405::/80

    Signature Algorithm: sha256WithRSAEncryption
         44:c2:24:75:cb:d7:9f:92:a4:ff:52:2b:6d:a1:89:34:fc:10:
         bf:55:07:e2:69:21:bf:05:cc:a7:76:c2:43:0a:46:2a:22:f9:
         99:f6:01:7e:e1:0a:a8:54:ef:29:3e:46:9a:01:20:73:00:f3:
         19:13:40:2c:3a:5a:b8:dd:45:72:bb:7e:60:00:68:f4:a0:5d:
         8b:00:38:58:74:24:83:b7:e3:af:a6:84:50:f2:d6:97:2a:72:
         ce:7a:b8:2c:47:5b:84:68:d2:f0:b1:d2:2b:91:27:6f:da:fa:
         e9:59:48:d8:b3:ae:81:b6:07:30:e1:c7:01:69:79:ec:21:84:
         09:c0:7b:7b:88:44:d3:c0:c0:61:fd:e3:de:4b:35:ee:ce:26:
         87:0f:16:3f:c3:12:4d:a0:6e:bd:6f:eb:f4:50:6f:66:b7:d1:
         e7:5b:c8:c9:01:57:fb:63:ba:9e:a4:4b:22:56:bd:82:1e:d9:
         05:09:06:5b:cd:f1:f2:ba:5e:17:64:a9:09:32:b0:a1:1c:d0:
         a6:c8:f4:23:d5:a6:95:a1:3c:8f:11:7b:49:8a:c5:89:27:a3:
         77:66:ed:29:a7:5f:0f:59:cb:f2:10:81:c9:d0:12:9d:85:29:
         c7:87:35:6a:de:69:6f:5c:cd:74:85:55:c5:43:27:e5:38:c5:
         4e:e8:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----