Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3734303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232313a3734303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Ak/nWlSbGbGgQ9Yr0bNYsvGUhA8RhBsEhFZxEmx4McA=
Subject key identifier:   85:A0:05:68:3D:55:CF:A3:BD:7A:73:7D:30:52:37:7E:93:32:7E:B5
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1A560477071C5B1DFE86E7623410968940A38BF3
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3734303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 21 Feb 2022 07:40:01 +0000
ROA not before:           Mon 21 Feb 2022 07:35:01 +0000
ROA not after:            Mon 20 Feb 2023 07:40:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:221:740::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:56:04:77:07:1c:5b:1d:fe:86:e7:62:34:10:96:89:40:a3:8b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 21 07:35:01 2022 GMT
            Not After : Feb 20 07:40:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:b5:e0:0e:ea:8b:5a:1b:a6:1f:ba:20:18:
                    6a:38:cc:d4:72:d2:17:1a:2b:83:e6:b5:c4:b3:b5:
                    0c:6d:78:2b:f2:96:8c:b0:93:eb:fa:b2:6e:98:e7:
                    69:97:33:7f:27:76:16:1d:60:ab:2f:f9:d8:11:ec:
                    93:48:f6:c7:9d:7b:9f:31:c7:67:8c:f9:fe:07:04:
                    a7:92:a7:91:38:5f:47:52:aa:07:15:0e:d0:83:c6:
                    cf:cb:ef:cb:c7:29:64:95:4e:cd:87:f6:1f:08:cc:
                    bf:46:f0:d0:c4:d4:7e:90:99:5f:e0:ec:98:4b:00:
                    12:fa:9d:55:fa:d9:33:ef:38:fb:4a:41:b7:e2:b6:
                    ad:19:e6:b3:bf:89:09:b4:36:46:3a:29:5d:b2:7d:
                    d2:74:cf:45:3f:c3:45:bb:2c:8c:1d:1d:0f:1d:a4:
                    9d:a9:77:11:c8:70:42:a2:e8:e1:7c:fc:34:bb:0e:
                    00:f9:d5:72:bb:74:b3:05:6f:1c:4c:a7:ff:8b:c9:
                    ff:1e:23:a4:b8:b3:e6:70:9d:3b:07:ef:d2:91:0a:
                    c8:7b:ed:eb:79:78:e2:4b:58:d5:a9:7a:79:1e:35:
                    38:32:96:d2:1c:bf:82:d0:ee:7f:50:03:22:7d:dd:
                    d0:88:7e:ad:45:0e:c4:1a:a9:fa:28:5c:e9:65:49:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A0:05:68:3D:55:CF:A3:BD:7A:73:7D:30:52:37:7E:93:32:7E:B5
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3734303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:221:740::/80

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:b5:84:28:f6:b9:af:97:27:b8:67:74:57:46:b7:c9:e7:
         91:ee:22:b4:68:0c:bf:81:6e:4e:17:f5:b7:df:67:e0:0b:54:
         0b:c3:5b:5c:3e:f0:18:11:58:0a:7b:b6:65:d9:08:98:8e:03:
         d2:66:66:28:ee:31:64:ea:31:5b:89:41:42:31:70:dd:94:1d:
         82:c5:11:38:be:c3:af:06:a8:82:03:e8:8b:de:23:0a:56:20:
         dd:51:17:54:20:f3:da:5f:3c:25:df:1a:9b:66:dc:12:71:ec:
         2a:37:2f:d4:a7:72:cb:7c:99:48:31:1a:b0:40:bb:fe:3f:8b:
         bb:b2:06:9f:11:65:54:a0:20:b3:8e:13:cb:45:c4:b6:8a:e3:
         1d:f5:16:78:e5:34:07:4d:08:1d:84:e7:6e:57:4b:22:14:3a:
         36:b6:22:05:f6:7a:48:77:db:92:15:89:de:c6:65:bd:72:43:
         42:34:ac:6e:1f:fe:d4:6d:f2:51:59:b7:7f:92:9f:c3:b7:98:
         1e:6c:04:42:69:0d:f3:59:d1:84:ac:d7:ac:5d:30:e6:5a:ae:
         7a:92:83:72:ab:d9:0c:c0:67:73:b6:77:7b:01:29:9a:68:46:
         21:7c:f0:04:7c:a4:92:3d:c5:b1:c7:e5:1d:85:c5:f5:ee:de:
         f0:5d:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----