Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3832353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a3832353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          IbW2gEgiGMLEkT8qnq5VFTff5L14xeY5JP2yMlDnyQU=
Subject key identifier:   C1:47:CF:23:60:17:B6:90:06:E5:68:F6:CD:6F:83:D8:56:2F:3A:E3
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       645E9FF98FA1E51701DE5A6B630FAD8B4FF6D1ED
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3832353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 08:25:02 +0000
ROA not before:           Sat 19 Feb 2022 08:20:02 +0000
ROA not after:            Sat 18 Feb 2023 08:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:825::/80 maxlen: 80
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5e:9f:f9:8f:a1:e5:17:01:de:5a:6b:63:0f:ad:8b:4f:f6:d1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 08:20:02 2022 GMT
            Not After : Feb 18 08:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:e6:85:dc:c0:d0:50:59:6f:ea:39:46:55:
                    a5:8e:34:25:67:12:eb:d7:ca:53:4c:d7:00:84:a8:
                    f8:7b:f1:c8:2d:8c:b2:43:04:14:ed:29:a3:1c:4c:
                    35:02:cf:c6:88:a2:43:ca:dc:8c:00:8a:85:b2:50:
                    2c:e7:1c:0c:24:f2:a1:19:8c:ea:e8:5f:67:42:e7:
                    d4:99:6b:ad:4f:f5:e2:5f:8d:e6:a2:1f:31:73:e2:
                    0e:b2:c4:a3:d4:1e:0c:6e:21:06:30:01:c9:62:52:
                    36:9d:81:d1:89:f9:0e:f5:5f:67:9e:26:d1:bd:57:
                    52:f5:48:88:67:ff:b7:c9:ac:f9:a6:bb:24:2c:09:
                    11:40:da:ea:78:82:7e:b2:22:f0:7d:2e:f0:e9:cd:
                    54:21:c9:b2:b7:64:54:bc:bf:a1:69:ca:6c:0a:65:
                    0c:cd:c1:e6:a9:5d:5f:95:d4:9b:68:d6:ac:c1:c1:
                    bd:06:a8:08:7e:e9:07:d5:19:d6:e4:37:5f:1d:97:
                    de:c8:d8:4b:0b:02:f5:cf:53:3b:7c:25:1c:af:f8:
                    5c:d9:33:b6:01:0f:cf:50:62:67:66:19:e7:33:01:
                    5d:6b:79:2a:53:cc:a3:a0:15:b3:97:4e:50:08:b2:
                    df:fe:0e:78:67:b7:dd:41:07:a7:de:4f:6e:b8:b6:
                    01:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:47:CF:23:60:17:B6:90:06:E5:68:F6:CD:6F:83:D8:56:2F:3A:E3
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3832353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:825::/80

    Signature Algorithm: sha256WithRSAEncryption
         c3:e9:34:0d:8a:57:f9:6e:ba:3f:20:fb:cd:d5:af:f1:5d:95:
         97:60:25:e8:1a:b2:2d:b7:51:ba:81:6f:fd:e8:fd:01:6f:e3:
         c2:06:73:6b:04:50:9d:98:83:fe:b9:fa:fd:c8:17:c9:b0:04:
         cc:3b:bd:e4:f5:f4:52:85:83:3e:f2:fc:5b:1a:ad:01:2c:71:
         35:0e:01:3e:e9:5c:39:a4:27:c3:38:a6:bb:4b:1b:8a:ff:66:
         53:17:7d:a1:00:69:0c:d1:0c:95:de:4d:51:3e:d1:81:c5:a3:
         7b:00:2d:58:46:2c:72:08:10:1c:ac:ca:84:e0:4a:32:76:31:
         02:45:be:ed:61:7d:f9:cc:93:7b:a6:5e:c4:90:ce:2f:b9:3d:
         f6:6b:27:f6:d0:d8:82:12:fc:c1:cd:3f:f3:8b:0a:0c:4d:bb:
         0b:9e:9c:0b:3c:77:f6:1c:f9:d4:57:77:fe:60:2f:c3:88:51:
         d3:3c:3b:17:33:c3:5a:57:54:b0:15:55:08:a5:8c:62:68:93:
         05:cf:91:58:8f:b3:1f:f0:3a:de:0e:0f:7a:fd:75:db:8b:7a:
         27:5c:d3:38:57:f2:19:f2:45:df:bd:9f:ff:f4:06:8e:e5:21:
         77:73:e2:0e:6c:9d:6a:79:ab:a4:ce:29:cd:65:ab:0a:93:61:
         74:fd:47:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----