Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313831353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a313831353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          wK3SNvle/Ho0II3cVWM38wHXdiN2zv1pi08Ae/jTgsE=
Subject key identifier:   82:A5:74:A7:01:15:2E:C4:7B:7F:F4:D6:E5:25:4E:03:6A:C7:94:0C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1C12F09046887E5C64082734C52E1E8E17A67068
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313831353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 18:15:02 +0000
ROA not before:           Sun 20 Feb 2022 18:10:02 +0000
ROA not after:            Sun 19 Feb 2023 18:15:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:1815::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:12:f0:90:46:88:7e:5c:64:08:27:34:c5:2e:1e:8e:17:a6:70:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 18:10:02 2022 GMT
            Not After : Feb 19 18:15:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:75:ec:55:9e:50:e1:68:46:e5:ed:4d:49:
                    78:49:83:e9:e0:56:35:33:11:fc:eb:33:0b:53:c0:
                    1c:d6:9c:e3:13:2b:06:db:93:88:d4:aa:c0:ed:fe:
                    90:8f:35:e5:e0:3c:1e:96:ca:42:20:27:e0:be:ac:
                    e7:07:0d:86:1a:c0:42:90:4a:b6:44:5b:2e:dd:4f:
                    bf:10:6a:2e:19:72:5e:b7:24:69:fe:a8:5a:f8:e1:
                    16:58:e7:9f:e4:3f:87:bf:fe:40:ef:a6:0e:0a:f5:
                    71:73:e6:3a:39:37:33:ff:de:92:e0:bb:22:8f:c5:
                    c2:56:a0:d7:b1:31:62:8f:23:4a:55:a8:fc:45:6d:
                    7e:87:81:1c:cd:77:1a:9e:ca:8a:6a:ad:4c:ad:f0:
                    38:82:be:54:2e:50:90:6b:cc:2f:9e:45:63:73:df:
                    b2:08:cd:99:07:dc:f1:0a:2a:10:25:69:ed:81:aa:
                    36:54:59:0f:b8:b0:22:05:03:27:a5:2b:6e:b8:d6:
                    f2:ce:e7:32:ac:1b:2d:c9:9c:49:63:d0:c8:58:14:
                    c3:95:b4:34:58:d6:f0:29:54:7b:d6:db:f4:e1:a9:
                    e2:13:7a:f8:ca:18:a7:d0:3b:62:ef:9b:58:7d:ad:
                    76:08:d2:e4:dd:43:a6:f3:b1:bf:af:ee:c2:a5:9e:
                    1d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A5:74:A7:01:15:2E:C4:7B:7F:F4:D6:E5:25:4E:03:6A:C7:94:0C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313831353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:1815::/80

    Signature Algorithm: sha256WithRSAEncryption
         c9:bd:68:a3:06:90:85:53:70:65:41:c6:98:a1:16:4f:19:6b:
         61:35:81:dd:c9:3c:7b:5f:9c:97:87:09:06:d9:c7:a3:65:c1:
         be:dc:ad:c6:13:99:74:f5:d0:2a:0b:48:a0:7c:a8:6b:bc:13:
         bf:45:6d:61:f5:25:f1:55:6e:14:0a:48:7c:01:23:b7:e9:7f:
         66:50:e2:f3:9b:d7:ec:66:db:b7:b2:d0:67:bb:a8:a3:72:c8:
         02:2a:80:c0:62:80:b6:7d:f9:e2:98:98:81:a9:79:ba:55:f0:
         86:b2:2b:58:52:b1:1c:aa:74:1c:f1:be:58:00:98:73:0d:c9:
         57:c1:b7:4d:a3:a5:0a:5c:c8:47:a4:25:d4:5f:f5:1e:b0:d2:
         d8:12:c0:1e:b1:86:2c:e7:76:34:3f:b0:ca:70:31:b9:aa:f9:
         e6:c3:6e:3a:7b:91:91:3d:db:f7:df:41:81:0a:4e:8a:10:9b:
         e2:89:88:fa:fd:ce:e8:8f:8e:ed:77:8d:d2:2d:b9:18:24:6d:
         7b:25:08:1c:db:c8:ca:bd:bc:fe:36:d1:e1:23:92:57:c9:9b:
         86:60:85:51:40:22:cc:e9:ad:37:7e:a8:66:66:ad:9a:7e:d4:
         25:8b:6e:ef:7e:29:80:66:ea:a0:e7:b1:7e:b1:10:39:f5:41:
         c1:b4:bb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----