Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313830353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a313830353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          WIrs9gYEjIxvKqw+PTR4Raqiy5WJ/Q+wvSqWlNfsjps=
Subject key identifier:   CB:92:FC:6F:10:3B:5E:DE:94:ED:40:AB:0D:CB:38:5E:B8:C6:D4:7F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1EE5CE15B7AE040AC5948777796DAC6E00772BE8
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313830353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 18:05:02 +0000
ROA not before:           Sun 20 Feb 2022 18:00:02 +0000
ROA not after:            Sun 19 Feb 2023 18:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:1805::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e5:ce:15:b7:ae:04:0a:c5:94:87:77:79:6d:ac:6e:00:77:2b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 18:00:02 2022 GMT
            Not After : Feb 19 18:05:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:66:7c:ff:cf:c6:14:52:b2:cc:1c:61:8c:
                    b7:42:af:8e:d0:9a:d2:9c:0f:3d:98:25:87:6c:4d:
                    a9:d2:f2:cd:9b:63:b9:be:57:34:4d:2b:f9:4f:db:
                    2c:fc:ab:37:0d:40:4f:51:c2:87:7b:51:5a:c8:74:
                    fd:74:f4:cf:7f:98:c9:88:06:1c:13:73:7c:0e:4b:
                    de:60:42:9a:12:79:b7:98:bd:c4:b9:d4:9f:89:49:
                    27:6c:84:fd:93:81:5b:69:a6:fb:6a:5c:16:93:5e:
                    16:16:64:0a:c2:79:4d:79:be:fe:72:50:a5:bf:89:
                    6c:f2:dd:9a:ae:3c:22:25:ae:7a:08:6c:65:38:54:
                    6d:0c:77:ef:d9:e3:51:f5:9c:06:a3:c2:e5:50:0d:
                    df:c1:7c:13:39:eb:b9:ec:e6:63:4c:f0:fe:31:ba:
                    9e:7d:7e:f4:b6:88:c6:51:d0:6e:1f:4d:57:20:af:
                    4e:0e:f7:98:5a:89:14:e3:6e:77:ef:08:16:79:02:
                    d6:65:e1:e6:0b:cd:75:be:54:ef:31:44:12:3f:dc:
                    16:90:b7:bf:64:19:b1:59:a2:80:61:3a:1c:dc:7a:
                    8c:34:65:6e:8f:75:ee:d2:fc:86:97:77:f7:58:8b:
                    4b:1f:4f:df:24:82:a3:96:d9:79:3b:1e:9e:84:63:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:92:FC:6F:10:3B:5E:DE:94:ED:40:AB:0D:CB:38:5E:B8:C6:D4:7F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313830353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:1805::/80

    Signature Algorithm: sha256WithRSAEncryption
         65:83:4f:d6:ca:32:29:29:72:43:6b:2d:7a:99:ab:01:f0:9f:
         56:ef:5d:1b:b3:fd:17:7b:b0:68:65:ce:e0:09:58:71:27:54:
         9f:98:de:c4:23:0c:a5:40:c7:2e:e0:53:4b:ee:dc:94:90:fa:
         70:8e:f9:c3:28:93:76:0e:06:ea:26:4a:73:08:2a:e7:2b:df:
         05:43:85:50:ce:f6:92:f4:c5:0e:b5:d3:75:9f:c3:50:fa:35:
         98:4d:75:ff:ec:06:23:d6:ae:5e:09:25:bc:c1:95:b9:42:b3:
         2d:2a:12:cf:ca:ca:91:df:ff:18:1e:b4:72:85:a1:04:82:a9:
         14:73:75:ee:f8:ba:99:ce:52:eb:fc:a2:04:64:42:e2:73:8a:
         09:0f:0b:3a:78:b6:a6:77:9b:17:73:49:0c:db:6d:88:0d:5c:
         a5:6d:5b:60:7d:f3:12:bc:c9:34:23:d9:4a:4b:f7:34:12:df:
         9e:16:64:3b:37:ce:84:7c:7d:8c:2a:81:94:a2:01:6b:f2:83:
         29:2e:4b:56:36:2c:97:f8:ea:e9:32:4f:3f:7d:c8:4a:05:5d:
         e0:57:94:88:fc:3d:b4:b5:a1:24:02:86:1c:7d:ad:fe:fa:45:
         53:22:10:ff:ea:1a:81:57:98:4a:dc:a3:e5:1e:f7:94:ff:62:
         bd:a7:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----