Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3533303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a3533303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Xhjq83KbFfP/q3pNgD7IvX8majT5bCTFzEFlu7sXhFc=
Subject key identifier:   F0:CE:AC:E9:0F:18:B7:2D:21:E0:C7:82:3A:1F:EB:94:8D:FF:77:3F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       253BD4B4513C96DE11126E2ACF8220DF882A314F
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3533303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 05:30:02 +0000
ROA not before:           Sun 20 Feb 2022 05:25:02 +0000
ROA not after:            Sun 19 Feb 2023 05:30:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:530::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3b:d4:b4:51:3c:96:de:11:12:6e:2a:cf:82:20:df:88:2a:31:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 05:25:02 2022 GMT
            Not After : Feb 19 05:30:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:ae:54:bb:f7:95:21:e9:c8:2c:2f:0f:da:
                    8f:a5:fd:ae:2f:60:0f:33:12:a9:95:3b:b6:d7:20:
                    d5:56:65:37:e3:7e:e1:9d:50:73:94:ec:a2:35:9d:
                    ec:03:c9:1e:ce:c8:1b:40:5b:ff:7a:3d:11:8f:32:
                    15:b0:e1:df:3c:c8:c5:57:19:e1:d5:61:52:0a:a9:
                    5f:4e:38:bb:0e:3e:48:e2:6b:4c:c0:bc:ea:cc:fe:
                    d3:4b:97:df:27:4f:75:9e:f5:45:d3:87:a3:27:83:
                    84:cb:59:ea:0b:6f:8b:84:87:51:0d:4d:38:a6:0e:
                    79:01:b1:1e:71:9c:07:3d:cd:d9:96:d0:be:41:b0:
                    b3:80:1b:6e:70:3e:96:0f:55:10:13:24:25:43:b9:
                    f0:f0:67:92:7b:53:8f:ba:ea:42:f0:fc:f1:7b:fc:
                    bb:fb:be:48:e1:8a:9e:8e:a9:c2:ff:1e:87:ca:09:
                    b9:a2:1d:f7:02:c7:9c:44:55:99:32:73:5f:c5:70:
                    b2:0d:15:f3:05:71:0c:10:d8:40:84:71:d8:e0:45:
                    29:e2:27:9b:f5:78:75:c6:68:01:07:1a:2b:9d:65:
                    39:23:00:e1:50:01:f9:67:47:a5:92:a6:ce:ea:df:
                    9b:97:78:86:c2:97:8c:92:08:27:ec:95:74:d1:89:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CE:AC:E9:0F:18:B7:2D:21:E0:C7:82:3A:1F:EB:94:8D:FF:77:3F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3533303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:530::/80

    Signature Algorithm: sha256WithRSAEncryption
         cc:69:3a:64:6e:d6:1e:04:70:e8:9e:ed:ee:1f:5f:2c:9e:f2:
         69:a5:f9:7c:14:8a:e6:48:82:b1:63:3b:de:ca:c7:e8:d1:7e:
         5b:20:5e:4e:4e:bc:ef:3f:71:a8:82:f4:4f:92:65:16:d6:31:
         03:bf:f8:d3:3d:80:07:d3:1e:c0:96:97:7d:9c:7c:d7:dc:65:
         d7:cb:46:61:e3:9e:c6:e0:d7:e2:8e:8f:95:fc:87:4e:24:ed:
         5e:f8:c5:45:08:53:e4:70:56:88:3e:1d:6f:9b:bb:48:f0:98:
         d5:31:a2:cb:b9:6c:65:69:67:d9:27:d4:04:3f:1b:ae:b9:52:
         a5:55:31:54:27:9e:c2:31:58:03:11:f2:5f:a6:41:40:53:1b:
         12:cc:44:1d:0c:98:b3:61:74:ec:cd:6a:ca:c7:d4:fa:4e:43:
         f0:c9:18:91:83:98:0e:ad:60:eb:51:34:35:10:50:71:39:a8:
         c3:6a:96:98:ca:77:fa:52:56:83:8e:db:01:7f:91:b1:55:22:
         10:21:83:2b:ef:0f:ed:2b:79:a0:cf:14:dc:41:60:2e:10:2b:
         02:0c:f9:02:3c:7a:f1:2e:7b:65:72:3e:f9:f0:60:70:3a:93:
         bf:71:f2:f3:5f:2b:4a:9a:c0:d0:3a:f2:4f:46:57:ad:53:59:
         05:7e:fd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----