Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313932353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a313932353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          6BMta9rpRx/GEvSWMNUleuZuGv84GjMCPlxbhUNRwUY=
Subject key identifier:   55:F7:13:65:D6:F2:BC:E4:C4:E8:3B:D4:B9:03:7D:76:08:F8:FA:ED
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       69F8F9C96418E7707EBDE2237AFB722866DCDC8E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313932353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 19:25:07 +0000
ROA not before:           Sun 20 Feb 2022 19:20:07 +0000
ROA not after:            Sun 19 Feb 2023 19:25:07 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:1925::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f8:f9:c9:64:18:e7:70:7e:bd:e2:23:7a:fb:72:28:66:dc:dc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 19:20:07 2022 GMT
            Not After : Feb 19 19:25:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6c:e5:6f:03:58:bd:a0:75:e3:85:3e:67:f7:
                    7c:3f:44:da:1f:be:94:f6:d9:42:0c:5e:f6:8a:44:
                    7b:13:2e:bc:26:df:7c:74:4a:23:e5:48:63:27:f5:
                    11:c4:69:c3:7e:e5:d4:1d:23:68:05:d2:62:02:be:
                    92:33:e9:1f:01:d9:a2:65:90:31:7d:d8:43:2c:04:
                    57:32:68:95:01:49:ef:08:a4:2c:99:3d:1c:6a:3b:
                    4f:4c:29:dc:03:08:b6:70:2e:4b:3f:60:b4:bf:e9:
                    d5:31:b6:29:0f:d1:6f:6b:40:cc:2b:43:47:4a:5f:
                    1e:35:ba:bc:13:d5:4b:12:26:c7:96:23:1a:5c:5d:
                    07:2c:02:0a:3a:ec:d7:7c:00:50:45:45:9e:f4:be:
                    c7:17:53:e5:81:f6:19:13:f7:69:bf:30:50:be:f3:
                    4b:7e:1f:09:03:08:13:c8:d8:5e:2a:aa:b2:6d:10:
                    e7:98:b4:55:8b:4c:ac:b8:95:5d:41:4e:37:ce:7c:
                    e3:0e:b9:10:a0:4f:81:0d:34:85:22:ca:2f:19:bd:
                    e8:67:94:df:9f:c1:7b:5b:e2:df:49:b8:94:8e:0d:
                    82:10:11:61:fe:fe:83:2b:ea:08:31:23:25:f6:87:
                    b6:63:ec:c3:ff:ff:fa:4b:17:c0:94:f3:7f:31:58:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F7:13:65:D6:F2:BC:E4:C4:E8:3B:D4:B9:03:7D:76:08:F8:FA:ED
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313932353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:1925::/80

    Signature Algorithm: sha256WithRSAEncryption
         4f:64:44:11:53:7c:57:da:df:80:7d:cf:b1:ba:22:a2:22:59:
         6d:aa:a6:22:ae:67:18:4c:d9:d4:c5:08:1a:b7:e3:6f:8c:3b:
         d5:52:0d:20:f2:6e:33:e5:af:9d:84:7f:ce:50:de:d3:f1:e1:
         cc:c0:ae:e0:ab:3c:8b:b6:fa:86:57:cf:51:f7:59:7b:f5:33:
         17:2b:6a:9a:75:0c:91:ef:14:4c:44:9c:21:f0:a9:67:fa:92:
         3c:fc:8c:5c:c8:5c:dc:11:c9:b3:45:eb:cf:d4:a1:12:7b:49:
         80:69:ec:0f:d5:c1:88:e2:a0:79:52:b8:3e:7e:fc:53:b8:73:
         38:45:cf:d8:72:90:fc:4e:d6:df:bc:67:fc:82:de:e7:ad:85:
         dc:3c:dd:c2:a1:50:85:0e:65:29:d0:7c:2e:eb:3e:6b:77:e8:
         0c:19:9f:e0:c9:57:a5:83:e6:c8:b4:b2:f6:1c:7b:16:dd:80:
         1d:6b:20:9b:81:7f:59:bf:93:5d:a9:bc:fb:e5:c7:8d:44:19:
         70:37:d1:6c:3b:b6:d4:fe:6b:f1:fb:ff:7f:da:24:73:0e:71:
         7a:7e:0a:9d:43:3d:88:ab:72:94:b9:90:69:d8:32:4f:68:73:
         87:5b:2d:fe:88:30:17:df:e7:ac:42:66:97:af:6e:eb:be:fc:
         52:2c:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----