Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323034303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a323034303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          adF7N2Zn+XcZUTC4WUpSq9hWeMqMfqla93Cp4QCO5vc=
Subject key identifier:   EE:9F:A6:1A:D9:3D:CE:77:0C:6F:C0:A5:A1:98:1C:DD:AB:90:B6:F0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5A43DFC236D66ECFA2B9AFD34E010EE16D5890C1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323034303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 20:40:01 +0000
ROA not before:           Sun 20 Feb 2022 20:35:01 +0000
ROA not after:            Sun 19 Feb 2023 20:40:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:2040::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:43:df:c2:36:d6:6e:cf:a2:b9:af:d3:4e:01:0e:e1:6d:58:90:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 20:35:01 2022 GMT
            Not After : Feb 19 20:40:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:6a:11:51:ec:f0:96:10:23:c3:6b:0f:37:
                    a2:55:4f:d9:80:ec:02:32:08:e6:23:00:a8:4e:30:
                    55:3c:47:6e:ec:53:06:a4:29:03:88:97:de:b4:0a:
                    5c:8c:37:e7:a8:77:65:51:43:c4:ad:08:92:0f:63:
                    d4:a2:18:7a:15:8f:30:ad:6a:62:c2:ee:42:43:a6:
                    17:2c:c8:6f:1e:50:e2:c3:8f:ef:6b:88:56:92:19:
                    58:3c:2a:44:f1:2c:ed:16:fe:5d:40:c1:10:e3:fd:
                    00:37:9f:9b:68:79:8a:5f:c3:b1:07:6a:14:4e:21:
                    e9:37:de:3b:e2:59:70:ce:33:a8:33:76:ac:bd:d8:
                    f5:ba:ef:7a:8c:2e:a1:a5:a1:81:67:5b:a6:6c:7c:
                    44:bb:1f:b2:37:8d:e2:fa:ca:7f:33:52:1e:ec:18:
                    c3:50:6e:b8:c8:0c:a7:a6:c5:ee:e9:6f:30:44:c4:
                    df:a0:03:3d:51:ba:c1:94:6a:d8:eb:de:8d:f6:14:
                    8d:ab:f2:8a:40:9e:34:5c:69:f9:c8:17:69:80:18:
                    b5:68:f2:ac:79:63:8c:bc:d9:fc:98:f0:d7:88:28:
                    a9:fc:c5:a3:7f:42:b0:73:39:3a:04:69:55:e5:94:
                    bc:48:7c:49:35:a6:25:94:9d:6f:37:29:79:17:7c:
                    b1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9F:A6:1A:D9:3D:CE:77:0C:6F:C0:A5:A1:98:1C:DD:AB:90:B6:F0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323034303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:2040::/80

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:5d:07:46:cb:53:0b:a9:eb:a4:16:b1:65:f1:da:78:42:
         c8:3b:60:ea:d7:90:7f:ca:12:8f:35:c0:3a:e3:a3:39:fa:83:
         2d:40:89:54:81:db:55:fa:da:2d:1a:8d:c7:8d:ca:52:22:e0:
         9e:23:0c:54:ac:e9:93:ef:60:87:ed:d0:de:e0:28:bc:d7:7e:
         50:65:66:de:7b:85:49:d5:98:67:d3:ec:a4:af:98:e9:65:db:
         ea:44:1b:4b:af:73:72:c0:41:7f:80:2a:62:05:ee:78:d4:7c:
         d7:06:f3:74:2d:34:a2:cc:9c:c8:89:18:13:d6:c9:9a:6e:6b:
         72:f3:f1:f2:48:00:a3:fe:6b:23:0e:30:ea:17:24:8c:da:39:
         a4:c6:52:59:fb:74:1a:b8:e3:15:22:9d:6c:ff:15:05:91:b5:
         d5:01:5e:43:cd:d1:6e:3f:7e:7a:34:73:84:8e:d6:3b:48:83:
         c4:04:5e:de:bd:33:57:0a:f0:ba:52:80:7d:54:d4:f0:9f:88:
         ac:9e:79:5a:6d:ad:c4:b7:55:a7:a0:b6:f1:62:06:cb:cc:ee:
         04:37:1a:91:9f:87:a1:80:70:e2:dc:45:74:60:db:23:7b:55:
         c8:b1:fb:a2:74:1e:07:59:7e:b2:a3:36:e4:b2:6d:1d:ae:4c:
         f5:70:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----