Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3934353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a3934353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          XrqyCurw6bgF1pHVc9un9D6L8A2HJFDBYlAqhgGEsRs=
Subject key identifier:   77:36:D0:63:87:91:5C:78:56:3C:C6:D4:94:86:18:2B:B8:FE:05:B9
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3A06E1389C86D0C512A3424C58F12B7148697A6E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3934353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 09:45:01 +0000
ROA not before:           Sun 20 Feb 2022 09:40:01 +0000
ROA not after:            Sun 19 Feb 2023 09:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:945::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:06:e1:38:9c:86:d0:c5:12:a3:42:4c:58:f1:2b:71:48:69:7a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 09:40:01 2022 GMT
            Not After : Feb 19 09:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:98:af:db:9c:c2:fb:9b:7c:47:c4:a2:88:f9:
                    16:97:3d:e3:1d:43:00:7d:ee:8b:8d:15:6f:94:e0:
                    07:89:14:86:ba:07:04:31:0f:32:ae:52:a0:dc:c6:
                    4b:ff:6e:2c:cc:5c:02:ae:57:1e:66:61:db:a5:9c:
                    31:e3:39:a7:5c:10:1c:2b:14:b8:19:12:df:71:92:
                    41:20:c6:d9:45:1f:65:88:e2:f7:50:4b:38:1d:20:
                    82:f1:9a:b9:c0:e0:7c:b7:b5:1a:a7:a5:b8:60:72:
                    7b:74:27:c9:5c:64:49:45:3e:c1:47:cb:b5:26:8c:
                    6f:42:23:0d:15:22:ca:39:cb:2e:12:18:1f:61:11:
                    66:39:a9:ca:d2:c2:73:99:fa:75:e3:10:9f:c5:7c:
                    59:ea:c8:d0:89:fc:af:09:cc:4c:c6:09:81:0c:2e:
                    3f:a7:be:9c:df:9f:47:c9:25:ac:51:d6:5c:5f:63:
                    e8:2f:3d:f6:40:45:3e:36:ba:d4:0f:87:31:8c:c0:
                    25:f9:1f:57:1c:a2:74:f9:75:7e:1d:d2:ec:64:ef:
                    cf:c8:a3:c7:ab:2c:f5:f1:70:74:c9:00:e0:1a:12:
                    ca:44:7b:64:0f:b0:32:36:2e:89:23:f4:94:07:0c:
                    fb:eb:c7:13:4d:c1:b0:c0:9b:60:cd:54:81:8f:ab:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:36:D0:63:87:91:5C:78:56:3C:C6:D4:94:86:18:2B:B8:FE:05:B9
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3934353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:945::/80

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:5a:96:39:ed:6a:47:7f:6a:a7:db:60:d0:44:dd:fe:af:
         c6:d4:12:6c:93:09:33:7a:8f:0c:ff:6a:5d:e6:7a:2e:da:db:
         35:90:6a:bc:f5:af:f8:46:02:f7:ea:81:01:5f:f8:ae:9e:76:
         e7:e2:4a:87:b3:c6:f9:ad:39:15:c6:5c:f5:fe:6f:c5:d1:6a:
         ef:83:93:c3:23:88:b2:3c:f8:31:dd:26:9d:cd:6b:af:75:3c:
         36:ea:92:f6:53:c9:5c:85:db:fd:0a:92:53:1e:a5:29:96:c3:
         6f:3f:2d:10:e6:af:b0:1e:e6:cd:bc:26:9c:81:3a:7b:63:10:
         17:6f:bd:c6:ff:75:fc:ea:de:ba:90:8e:8b:c4:c7:2b:0a:5c:
         72:ff:6e:93:fa:3b:4f:78:54:7c:ce:79:32:14:49:5e:c9:18:
         60:ab:3e:2e:c0:b7:e0:8a:92:e7:36:b1:0f:02:11:d6:80:06:
         fc:ac:2c:a3:88:3b:5b:63:a7:5c:82:7d:3e:4f:dc:bf:4d:b3:
         29:f3:1e:ab:d4:f7:f2:20:82:2d:b3:35:cf:c3:dd:88:54:42:
         d8:ff:4c:be:70:22:5f:2d:6a:a8:ca:b3:c3:3e:36:a4:2d:07:
         8c:5d:d4:53:6e:72:34:7f:d9:c6:f2:56:a8:67:fc:21:ca:6b:
         eb:59:98:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----