Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a313131353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232313a313131353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          s9WSodYTYjtKZ2ytw3ozmPLbHauFVl+JZZpb9P6NKco=
Subject key identifier:   48:A1:9C:E3:42:99:EF:A6:56:97:8A:37:EF:15:BF:E9:1B:C5:B4:5F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7F275497C5A4A14772EBE6A1905D524C5CCF437E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a313131353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 21 Feb 2022 11:15:01 +0000
ROA not before:           Mon 21 Feb 2022 11:10:01 +0000
ROA not after:            Mon 20 Feb 2023 11:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:221:1115::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:27:54:97:c5:a4:a1:47:72:eb:e6:a1:90:5d:52:4c:5c:cf:43:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 21 11:10:01 2022 GMT
            Not After : Feb 20 11:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:54:e7:50:e4:92:67:af:e0:65:54:bf:a2:
                    99:5e:a8:be:be:5d:72:c7:7c:3b:29:b4:b1:ab:aa:
                    3f:85:5d:1a:2f:2f:f4:be:94:8d:db:e1:86:eb:97:
                    1c:a6:44:10:ec:86:f6:2f:e2:db:72:03:b0:2f:6a:
                    67:67:3e:30:b3:28:a2:8b:78:30:ef:6a:43:d6:31:
                    eb:e7:95:63:c3:83:33:e5:9d:17:de:10:50:87:24:
                    b8:b0:e7:6b:61:70:fb:4b:a5:90:fb:30:8a:6a:4b:
                    15:a8:17:f1:bc:a1:0d:04:52:9f:cb:71:9d:1d:93:
                    7a:35:17:ee:79:c1:4a:74:49:32:78:24:08:cf:46:
                    82:10:7c:cb:9d:61:13:2d:09:ea:fc:1a:32:98:bd:
                    1f:bf:24:8a:dc:7f:45:45:c9:1f:f0:9b:aa:3b:23:
                    6a:f2:5d:86:3d:bc:60:d8:ee:05:1a:58:b3:41:83:
                    a0:e0:78:2d:f6:2b:66:51:a5:2b:4f:33:7b:d3:d4:
                    33:da:cd:8d:9a:f2:8a:2f:ff:15:0e:e1:05:89:59:
                    8f:b4:97:8e:c3:7e:5b:65:cd:13:61:c2:51:75:e3:
                    f8:59:68:ff:9e:5a:24:b6:dc:2a:cc:a2:38:fc:04:
                    11:71:37:de:dd:c1:0c:71:1d:39:a9:6a:9b:56:2b:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A1:9C:E3:42:99:EF:A6:56:97:8A:37:EF:15:BF:E9:1B:C5:B4:5F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a313131353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:221:1115::/80

    Signature Algorithm: sha256WithRSAEncryption
         76:ef:16:8b:e0:d3:81:29:60:c8:ba:cd:1e:86:66:b8:70:39:
         a3:5d:7a:fe:80:ee:11:87:61:d2:c2:1e:d9:36:2a:d2:f1:b5:
         b8:c0:f7:c6:24:56:7a:97:70:e2:ff:4f:95:e3:14:a1:24:97:
         5b:58:1f:0c:81:d1:c5:40:15:e1:d6:81:79:2f:b5:53:de:0b:
         84:11:a1:df:c7:81:29:13:25:7f:0e:60:99:68:27:8d:6d:6b:
         d6:bc:24:23:de:dc:20:ef:66:bc:6e:5e:19:56:0a:14:77:7a:
         77:d4:7b:fd:2b:6d:f1:d9:05:93:1d:83:dc:83:2e:4a:eb:43:
         44:ef:70:88:0f:0d:37:95:d3:30:75:0b:c3:72:cc:13:fd:51:
         29:3b:31:20:4d:e7:67:7d:12:71:43:1b:ba:41:63:5c:30:02:
         b1:ac:1b:de:a6:b8:55:cb:18:0f:d7:aa:9b:7a:87:d0:3e:22:
         38:f1:8c:82:a0:4a:47:a5:ca:45:c4:18:92:b6:45:d7:89:30:
         09:35:78:40:6d:b0:93:15:2f:a7:44:fb:e5:2e:c5:bb:6b:9f:
         c7:e5:20:db:ea:2d:41:26:16:8f:7b:c7:61:be:9b:f6:13:b1:
         42:98:a7:c7:7e:c8:3e:ba:91:36:18:c1:bd:98:20:34:a9:1a:
         57:a8:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----