Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3135353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232313a3135353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          HvJy4zULduEgR47F2RUp0ncKmVfbhZYb/oJS5kQc01I=
Subject key identifier:   47:0F:B8:EC:74:01:D1:C6:B9:16:DB:BE:F4:9C:26:14:AA:5D:C5:89
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       67EA738F6219E7E43ED3389EEB3A802E1C5ECC3A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3135353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 21 Feb 2022 01:55:01 +0000
ROA not before:           Mon 21 Feb 2022 01:50:01 +0000
ROA not after:            Mon 20 Feb 2023 01:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:221:155::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ea:73:8f:62:19:e7:e4:3e:d3:38:9e:eb:3a:80:2e:1c:5e:cc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 21 01:50:01 2022 GMT
            Not After : Feb 20 01:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:63:50:a1:20:86:e0:12:41:73:7f:ef:53:
                    29:13:f3:37:39:ce:9e:2a:06:8a:f2:cd:c2:a4:8b:
                    af:5a:1a:54:80:9a:08:32:9c:09:b6:67:a2:ba:27:
                    39:57:10:d9:54:17:be:6e:c1:90:7a:9b:5a:2f:56:
                    45:16:6c:7c:57:a7:d8:dd:a5:d9:9f:8d:61:e9:a2:
                    dc:f5:f6:a5:33:27:31:b5:a7:34:b8:7a:6f:00:25:
                    1e:4f:4c:3c:be:cf:e5:22:de:44:75:78:6e:d2:a9:
                    6d:5c:e0:14:0c:66:9b:e8:79:55:8b:bb:f9:0d:d4:
                    42:7a:54:0c:92:e0:93:6d:ff:06:16:03:98:d6:25:
                    3b:ad:16:64:8d:15:bc:94:8a:ce:3d:73:dd:f5:ed:
                    97:a1:14:ed:c1:6b:ff:1b:77:43:0d:ae:9e:50:44:
                    83:3d:c8:7e:8e:fa:79:2a:51:ec:31:cd:8a:b3:d0:
                    9d:6e:ae:b5:a2:80:b8:c5:4e:7c:b4:57:16:5d:65:
                    4b:b7:79:07:ed:d9:e6:1f:2d:b7:0a:2c:09:55:68:
                    c2:bd:b6:ab:f9:f8:ad:83:75:f5:16:73:c7:49:6c:
                    db:5b:ba:84:79:25:0a:b4:42:ba:e7:3e:41:7c:77:
                    1b:09:1d:f9:d8:49:5e:90:2a:0c:2a:c9:96:2d:e6:
                    75:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0F:B8:EC:74:01:D1:C6:B9:16:DB:BE:F4:9C:26:14:AA:5D:C5:89
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3135353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:221:155::/80

    Signature Algorithm: sha256WithRSAEncryption
         85:8b:ad:78:c3:8a:d0:eb:b6:44:98:1e:3f:8a:48:d9:0e:8c:
         02:8d:c7:fa:88:92:df:32:84:6e:88:ed:25:a4:f4:e9:8a:9b:
         5f:11:22:ad:a8:43:f0:ed:6a:63:b2:69:9a:57:aa:70:92:c6:
         fb:37:0f:27:01:e0:f1:4a:84:04:cf:34:c8:f1:7f:4a:15:a9:
         23:c8:24:c2:66:c1:71:1e:26:91:75:a6:76:93:83:bf:39:cb:
         91:ac:a8:2f:56:b3:9f:c8:bb:32:f6:bd:05:1f:ee:3f:1d:77:
         1e:b5:36:d2:f5:97:e7:d4:b4:e0:75:65:54:36:c1:ef:b3:9b:
         af:b9:b7:3c:82:92:80:1f:d5:77:37:c1:a3:42:fc:56:a4:ff:
         ba:2c:11:bd:1c:08:4a:70:3a:ca:a7:59:dc:1d:e0:65:e6:17:
         be:a6:11:05:8c:62:d1:76:64:ba:95:c9:c7:7a:ed:57:b5:b5:
         9b:cc:e1:c2:b3:c7:74:06:7c:c4:68:9d:69:0c:d8:63:51:5a:
         f0:64:2d:e2:d6:93:17:57:c3:c4:1a:d0:ef:2c:06:8b:bf:60:
         ef:4e:39:0b:30:ee:cb:8e:da:a7:3e:de:d7:19:50:85:7f:9a:
         07:96:77:6e:ae:8c:62:c8:10:2e:cb:a6:53:6e:58:3a:f1:f7:
         09:e7:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----