Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323235353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a323235353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          e0D+KKlYDKMOE6n770RcynyZQBJEyW8mYPXxoRgBEeA=
Subject key identifier:   5C:00:D5:CB:7B:CC:85:AB:51:BA:45:F4:DA:21:CE:CE:45:F5:4C:F5
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0179AD703E594BBB124E453B3E9B89627160144D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323235353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 22:55:01 +0000
ROA not before:           Sun 20 Feb 2022 22:50:01 +0000
ROA not after:            Sun 19 Feb 2023 22:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:2255::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:79:ad:70:3e:59:4b:bb:12:4e:45:3b:3e:9b:89:62:71:60:14:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 22:50:01 2022 GMT
            Not After : Feb 19 22:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:ee:04:35:a0:54:8c:42:3b:8a:7d:8d:60:
                    7a:a0:62:12:e4:03:77:4c:12:71:7f:68:7c:da:e1:
                    27:d0:29:b6:79:62:c6:62:b9:ea:a1:b9:67:d4:a5:
                    35:a0:08:0d:ca:d5:c0:ee:39:7e:4c:c3:a8:ef:ae:
                    50:f0:54:52:92:cb:f3:41:d3:08:9f:92:db:67:e5:
                    6c:93:a1:1c:7c:8b:68:06:7c:86:51:f0:0e:c5:86:
                    4b:b4:3b:6e:b0:b0:93:ef:2d:55:18:57:71:0e:03:
                    aa:1d:0d:89:40:c9:a9:42:40:7c:bb:3a:1a:8d:ad:
                    2b:8e:13:5d:f3:71:c3:c7:e2:7e:c7:95:10:ae:c8:
                    c4:31:80:6d:a0:4c:54:f5:3c:6e:85:76:bc:21:83:
                    71:59:86:b8:09:90:02:3f:42:7d:b7:d1:16:40:61:
                    25:f7:c2:7e:ae:d8:eb:a3:2a:98:5d:6b:eb:cf:9b:
                    37:d8:45:2a:aa:f5:11:11:68:43:c8:80:00:fe:84:
                    d8:51:cd:19:3d:b5:8c:68:dd:9c:bc:e0:53:ee:80:
                    01:6c:6d:64:5e:0c:88:78:a0:97:a7:b8:5b:0e:87:
                    88:8e:74:99:71:43:36:ac:ac:03:31:95:db:2e:39:
                    18:b5:3b:24:08:2f:0c:52:dd:c9:04:d1:ec:db:d2:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:00:D5:CB:7B:CC:85:AB:51:BA:45:F4:DA:21:CE:CE:45:F5:4C:F5
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323235353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:2255::/80

    Signature Algorithm: sha256WithRSAEncryption
         27:d1:c0:51:77:c1:b6:e7:d3:24:28:d0:4f:54:7c:06:c7:59:
         b3:5f:fb:42:69:04:1a:85:d6:01:5d:2f:6d:23:f2:b7:cf:23:
         55:54:87:f8:55:5a:03:d9:71:49:0e:94:b3:dd:dc:12:4d:26:
         db:da:ea:74:4c:0b:7b:34:48:a8:0c:b0:1d:22:11:d1:84:25:
         dd:f8:2e:21:0b:c1:14:97:88:ee:01:36:70:73:3b:58:b8:ba:
         2f:f6:86:ce:a9:b0:4e:2e:9a:d2:06:77:74:7f:34:4f:16:56:
         98:4a:98:e3:2d:9a:2b:06:c5:8f:ab:18:23:aa:59:de:89:4f:
         27:d3:42:85:87:8b:90:c6:98:63:33:1b:6d:ef:f4:07:33:40:
         1f:bc:fd:63:58:58:0a:fe:ce:64:99:a7:32:fc:11:61:3b:db:
         75:1f:53:be:28:bc:d8:27:cf:96:81:de:d6:0d:c8:44:7b:ae:
         d0:e9:fb:72:da:59:b7:90:f7:8a:54:9a:4a:1f:26:b9:6c:ef:
         93:98:c2:64:70:22:28:7c:e2:d4:de:3d:f6:6b:32:39:c2:1c:
         cd:70:7b:d8:58:80:d8:98:fa:03:e8:85:44:2f:ea:ac:0d:a7:
         3a:df:5f:4c:b0:e4:dc:59:7b:17:dc:c6:73:fe:4b:ed:be:d0:
         e5:fa:1b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----