Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a3430353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230393a3430353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          3HIt/cRDS4yq96AWsvKyDjdtYtVJOEaT3qlQkoWTViM=
Subject key identifier:   7E:5E:2D:94:E7:12:BD:5B:01:92:BB:2A:2E:E1:62:50:2B:74:A8:32
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       49C4E97BC37E58BB4BE592C0C1613E932B771C68
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a3430353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 09 Feb 2022 04:05:02 +0000
ROA not before:           Wed 09 Feb 2022 04:00:02 +0000
ROA not after:            Wed 08 Feb 2023 04:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:209:405::/80 maxlen: 80
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c4:e9:7b:c3:7e:58:bb:4b:e5:92:c0:c1:61:3e:93:2b:77:1c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  9 04:00:02 2022 GMT
            Not After : Feb  8 04:05:02 2023 GMT
        Subject: CN=3082010A0282010100BA44BC2FE9C6ACF7B08AF188A8B27FD76C577D6E57F419B6563C3ACA0E01535102C0EE160831BC598E654827E440C3898AD760E4F83612FE0ED3B5A7CA89D9A041185AA26ABD6D299F451B9DADBBF384EECA2A0F19F6B8CA9374F643411229EA5F509A311504419FD34C60B8FDA41337AF1CDD49CA540A46A6B4D6D173D50754729FF4AFF9D134B876EF78519F6FBABB2EFDE9785B5A393BF01B54F72A62522B32528C8179E085F49C22735832504CBAF142D9708CE033E3B0D60CC10DA5E3483F9F526DD75AD2EAD138A8795D294DAEA5E190B9BBAAD2D2BB97531EE2644F88EBD85F25364765C995F6408D9593E8F316F1F52EEFBEB0109951215A26648FC70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:bc:2f:e9:c6:ac:f7:b0:8a:f1:88:a8:b2:
                    7f:d7:6c:57:7d:6e:57:f4:19:b6:56:3c:3a:ca:0e:
                    01:53:51:02:c0:ee:16:08:31:bc:59:8e:65:48:27:
                    e4:40:c3:89:8a:d7:60:e4:f8:36:12:fe:0e:d3:b5:
                    a7:ca:89:d9:a0:41:18:5a:a2:6a:bd:6d:29:9f:45:
                    1b:9d:ad:bb:f3:84:ee:ca:2a:0f:19:f6:b8:ca:93:
                    74:f6:43:41:12:29:ea:5f:50:9a:31:15:04:41:9f:
                    d3:4c:60:b8:fd:a4:13:37:af:1c:dd:49:ca:54:0a:
                    46:a6:b4:d6:d1:73:d5:07:54:72:9f:f4:af:f9:d1:
                    34:b8:76:ef:78:51:9f:6f:ba:bb:2e:fd:e9:78:5b:
                    5a:39:3b:f0:1b:54:f7:2a:62:52:2b:32:52:8c:81:
                    79:e0:85:f4:9c:22:73:58:32:50:4c:ba:f1:42:d9:
                    70:8c:e0:33:e3:b0:d6:0c:c1:0d:a5:e3:48:3f:9f:
                    52:6d:d7:5a:d2:ea:d1:38:a8:79:5d:29:4d:ae:a5:
                    e1:90:b9:bb:aa:d2:d2:bb:97:53:1e:e2:64:4f:88:
                    eb:d8:5f:25:36:47:65:c9:95:f6:40:8d:95:93:e8:
                    f3:16:f1:f5:2e:ef:be:b0:10:99:51:21:5a:26:64:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5E:2D:94:E7:12:BD:5B:01:92:BB:2A:2E:E1:62:50:2B:74:A8:32
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a3430353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:209:405::/80

    Signature Algorithm: sha256WithRSAEncryption
         b5:1b:58:a2:0d:80:c2:9b:bf:d9:ab:39:dd:f4:aa:f7:0a:ca:
         6a:c7:b9:a2:35:a3:7f:e8:4c:d1:ea:ca:7e:29:b3:af:34:ef:
         1e:bb:3b:f9:b7:01:86:f4:2e:27:4c:a1:3c:16:17:fd:3b:28:
         3c:28:2b:85:3b:42:63:38:a3:60:ac:9f:32:b2:a1:44:14:f3:
         f8:11:f1:b8:86:0c:03:6e:90:71:42:8d:f9:e2:91:59:2f:6e:
         46:4a:5a:c5:9a:3e:9e:c4:1d:93:bc:9c:83:ff:0f:14:a4:44:
         85:68:47:2f:9c:3d:79:a2:d5:b4:80:46:c5:ee:3c:c5:cc:95:
         5d:b5:39:b1:fb:b8:f9:c2:bd:65:87:59:58:45:7c:85:08:a8:
         ba:53:fa:0a:27:5f:25:b5:31:57:01:7d:bc:b7:1f:8d:6a:27:
         0c:b4:6d:bd:cb:8e:eb:94:25:31:71:74:a8:d5:db:b1:29:23:
         de:33:1a:7a:57:66:c7:77:aa:69:42:94:eb:e5:77:51:7e:54:
         1e:0e:23:26:5c:3c:47:20:4b:9d:da:cb:e2:9a:bf:56:ae:15:
         2a:62:83:4e:15:08:69:4b:37:f8:af:79:f5:ab:c0:b6:c2:2d:
         bc:ef:70:1d:fe:04:7e:27:2f:8b:a1:d5:ed:62:4b:ae:9f:ae:
         03:82:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----