Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3331353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a3331353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          mjLfDTnmr9ZUNRzhL/5BP0XAtZWxcw6obS8JR0Cb52Q=
Subject key identifier:   E1:CC:6E:E8:D9:59:93:3D:BC:49:15:32:B9:76:EE:90:79:51:FC:30
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       66F24BD05D08ADF1D0087FFD78BB6A3804E13CA2
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3331353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 03:15:01 +0000
ROA not before:           Sun 20 Feb 2022 03:10:01 +0000
ROA not after:            Sun 19 Feb 2023 03:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:315::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f2:4b:d0:5d:08:ad:f1:d0:08:7f:fd:78:bb:6a:38:04:e1:3c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 03:10:01 2022 GMT
            Not After : Feb 19 03:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c0:34:86:1c:ab:b8:58:75:b8:39:97:87:a4:
                    58:5d:31:cf:80:4d:ec:ed:63:22:c7:c6:b4:9e:6a:
                    aa:c9:5f:b6:4e:eb:34:e0:82:d9:08:07:1e:f0:7c:
                    5e:55:a9:b7:c9:5f:31:7e:69:21:fb:73:28:34:b5:
                    a5:2c:59:dd:bb:30:02:35:21:cf:34:1c:10:56:b5:
                    8d:7c:7f:b5:27:5e:05:1e:c5:d0:66:ea:51:04:2a:
                    34:75:c0:b9:4e:05:1e:a9:6f:02:28:3b:2c:06:7f:
                    04:c2:ec:c4:45:44:38:cc:fc:e0:58:20:32:c6:09:
                    00:24:55:b9:3b:6c:02:a9:0b:93:3c:2f:89:81:83:
                    c7:85:4f:65:3e:b9:e1:17:67:f3:37:ae:1c:c3:aa:
                    b6:5e:8d:04:bc:e6:6f:c9:06:36:6f:3f:81:db:c7:
                    64:75:89:b6:e2:be:a1:98:aa:84:87:c7:2a:2c:a2:
                    d7:66:b2:a2:10:da:5b:f2:91:3f:95:f1:ed:ac:4b:
                    6a:7d:7c:d3:dd:14:c6:46:72:e6:fc:a3:ef:11:e4:
                    25:c8:17:8f:c6:2a:5d:d5:e6:b5:11:56:d4:ca:6a:
                    6e:a0:e7:39:c2:6b:94:93:34:e0:15:97:0c:59:55:
                    d5:e5:bc:0c:70:0c:78:85:2b:a8:bc:c8:19:cc:a5:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CC:6E:E8:D9:59:93:3D:BC:49:15:32:B9:76:EE:90:79:51:FC:30
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3331353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:315::/80

    Signature Algorithm: sha256WithRSAEncryption
         12:db:8a:fb:48:a3:8d:ae:87:de:40:13:69:eb:8a:31:6e:a1:
         cd:af:fc:52:26:a3:3f:36:f7:1d:f2:b1:42:18:79:26:a1:3c:
         5d:03:c4:be:32:81:84:84:55:b4:f6:63:cf:61:28:a6:97:99:
         0a:70:bc:de:8a:f6:28:91:47:31:6d:6a:c0:d5:0a:90:1c:48:
         44:9e:6f:e8:73:a2:04:3e:2f:e7:35:08:18:e1:d8:46:7f:9e:
         c9:4a:3f:d2:39:c6:35:83:56:d5:19:ee:7d:54:75:4d:be:78:
         51:24:d3:5d:21:ec:b4:50:23:1e:f2:4f:07:39:65:d2:1e:23:
         cc:2e:ab:e9:55:1e:a0:e4:32:82:a9:dd:d1:7c:ac:12:6c:58:
         3d:c4:fc:cb:16:86:51:9b:a2:4f:31:a1:cd:c6:f5:01:45:02:
         22:67:ad:bb:80:b0:8d:b5:51:44:46:8b:9a:14:5d:0b:5d:04:
         38:6c:ea:60:ae:c3:03:ed:a6:14:24:38:10:10:52:3f:88:cd:
         68:21:cf:e5:36:45:d9:ab:44:44:e0:d1:a2:9f:02:31:61:a6:
         aa:f9:fa:f3:e6:0b:e2:8e:ef:41:83:51:13:5b:70:2f:9f:2f:
         ce:30:11:01:26:ce:b5:39:39:1e:d1:38:92:36:90:17:af:81:
         70:49:94:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----