Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3532353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232313a3532353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /WKS9HLwgmHlhXhykKB90TZ+6lClRmkw56k6ARVoK6E=
Subject key identifier:   83:71:F0:59:56:DE:A4:BA:8E:A4:92:24:37:97:B9:68:F7:B3:EE:45
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       65CC78D30BA53AA2BDBA227394EACC8B58993984
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3532353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 21 Feb 2022 05:25:15 +0000
ROA not before:           Mon 21 Feb 2022 05:20:15 +0000
ROA not after:            Mon 20 Feb 2023 05:25:15 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:221:525::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cc:78:d3:0b:a5:3a:a2:bd:ba:22:73:94:ea:cc:8b:58:99:39:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 21 05:20:15 2022 GMT
            Not After : Feb 20 05:25:15 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:92:99:84:7a:5f:6a:53:36:b8:e8:c5:b7:
                    d1:84:8c:09:fb:5e:d2:f6:b9:58:a2:aa:34:bb:3e:
                    e9:c1:e2:7a:b4:ae:66:0d:38:8f:47:b5:1c:87:64:
                    e3:c5:c6:c2:1d:86:fd:97:93:84:af:5f:d9:81:f3:
                    17:fc:c8:13:ad:b5:ae:93:6b:a5:94:99:fa:1a:c5:
                    9d:cd:24:f7:a1:50:b9:cc:46:f3:4b:44:9a:51:0b:
                    a2:ed:13:e1:ad:38:2f:d8:76:c2:a2:d3:81:d5:7f:
                    27:de:78:ac:64:3c:39:d2:05:83:36:c8:fb:a1:a0:
                    e7:3d:7e:be:85:b5:e3:b2:ca:e8:3e:94:f5:69:ac:
                    f2:cc:7b:bb:e7:79:c7:dd:4c:cf:22:52:5c:6e:7e:
                    f6:22:c8:88:69:3f:58:e0:8b:16:57:de:8a:eb:71:
                    ab:96:ab:46:c4:ec:33:f5:73:80:ec:b6:b9:63:96:
                    15:85:d7:6b:27:15:cb:e8:c5:35:9d:1d:4a:ff:ae:
                    9f:59:7c:a2:5a:6f:09:49:20:fb:88:dd:5c:20:81:
                    17:fe:ae:09:e6:b7:a6:3f:66:c3:3b:1f:16:9b:d6:
                    ec:7e:47:38:c9:5c:18:34:90:a3:9f:eb:f4:20:30:
                    32:84:69:9d:dd:eb:b9:c2:1f:81:da:31:6e:0d:21:
                    ce:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:71:F0:59:56:DE:A4:BA:8E:A4:92:24:37:97:B9:68:F7:B3:EE:45
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3532353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:221:525::/80

    Signature Algorithm: sha256WithRSAEncryption
         7c:ef:56:40:8b:64:05:26:68:a2:cd:cf:9e:0a:56:8d:de:29:
         10:b7:d6:9a:4b:b5:c6:50:30:6d:02:b9:db:17:e2:a5:11:99:
         83:1b:69:a6:34:eb:d5:41:47:23:97:56:01:37:b6:fe:9e:e7:
         70:5e:b7:86:b8:ed:b4:df:a2:89:34:9b:33:e6:72:ea:7d:47:
         ce:c1:b3:32:7d:18:4b:49:d6:ae:38:30:a5:0c:1a:61:c0:6a:
         68:46:46:dc:49:36:a0:01:84:d0:86:62:a8:8d:a5:a4:a4:8c:
         9b:50:ae:67:a4:c9:36:a5:a0:71:93:5f:f6:12:11:cc:77:27:
         80:9c:77:48:05:0b:45:20:6e:ac:43:0d:6c:c8:a1:67:3e:bc:
         cb:10:c4:e1:16:93:7f:c3:bf:b3:9c:ba:57:57:f1:f5:16:a7:
         ed:8a:5b:0a:37:a6:6f:e3:d4:b9:99:8c:8f:ba:c2:69:e9:ac:
         ae:2b:60:5b:a8:9c:81:6d:b2:57:62:14:97:04:7a:a0:db:d5:
         23:bd:47:f2:44:bb:e0:0f:43:76:75:46:f6:a6:d1:97:6b:52:
         17:c0:b5:13:fd:81:d4:02:63:25:29:8b:75:ee:d2:00:12:8f:
         8f:8c:ae:3f:f1:68:8d:79:31:4e:cb:f9:03:01:bc:91:73:f6:
         ab:0c:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----