Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a35353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a35353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          RpXu34eu5qsAi0fixbSBQnjyijUha/TiijuAiuobNLA=
Subject key identifier:   9D:C7:B9:F4:5A:5B:82:26:A8:B6:01:B8:BC:13:36:EA:7C:FE:6B:84
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       78ED0A3723989B29FED515BE55251B31B9909B3E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a35353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 00:55:01 +0000
ROA not before:           Sun 20 Feb 2022 00:50:01 +0000
ROA not after:            Sun 19 Feb 2023 00:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:55::/80 maxlen: 80
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ed:0a:37:23:98:9b:29:fe:d5:15:be:55:25:1b:31:b9:90:9b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 00:50:01 2022 GMT
            Not After : Feb 19 00:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:8f:bb:bb:6e:b5:8b:b7:1c:ed:6a:52:23:
                    6a:be:ef:dc:27:4c:2b:99:26:e9:57:2b:6d:5b:60:
                    de:a6:a3:3d:06:a2:af:8c:95:8a:e9:56:75:94:18:
                    b0:5f:83:56:2b:fe:fd:eb:09:cf:a4:2b:18:68:c1:
                    9f:43:82:8d:90:bb:4b:27:22:a6:98:5e:0e:c6:c2:
                    1b:85:91:b0:d5:0d:de:69:73:89:11:45:c2:e5:98:
                    13:ad:a0:e5:31:8d:10:d3:56:a5:d0:dc:72:65:38:
                    5f:67:fe:00:b9:1e:0a:ab:e5:ad:3e:fa:1f:43:95:
                    a7:f7:58:a5:c6:ae:08:f0:dc:4c:4f:03:1a:5a:86:
                    23:b5:56:65:86:11:17:2b:af:49:c7:53:33:de:b7:
                    ef:67:d7:6c:2f:22:9f:45:56:6e:b6:9b:c8:6c:cf:
                    36:18:55:cc:f5:b0:42:d8:30:a1:ac:d5:59:3f:35:
                    af:b6:b9:3c:24:ae:17:35:79:6d:ef:63:e1:e3:2f:
                    c6:4d:d9:3c:5a:0b:56:ec:60:33:bc:12:31:ba:43:
                    6f:e0:c1:4a:92:a8:34:b3:7a:38:33:8c:69:05:97:
                    d6:fa:3c:1d:c7:7d:89:72:5f:5a:8a:d0:a8:e6:39:
                    67:b1:4d:4a:5f:e8:c7:b9:f0:a3:56:0d:06:2a:74:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C7:B9:F4:5A:5B:82:26:A8:B6:01:B8:BC:13:36:EA:7C:FE:6B:84
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a35353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:55::/80

    Signature Algorithm: sha256WithRSAEncryption
         46:21:6a:5d:f5:bd:21:1a:80:dc:e8:35:62:59:d1:c3:20:88:
         ae:22:65:a7:fc:01:8e:e2:79:46:0e:ed:4a:c0:0b:34:4e:fd:
         03:9d:d3:a1:84:b8:af:48:86:b3:58:1c:3d:e6:c5:56:94:7e:
         40:90:6c:87:04:d1:27:c4:2b:2b:d8:e7:d3:79:0a:3a:fd:f7:
         ed:76:3f:7e:f9:31:88:ab:b4:94:45:e3:70:3c:43:45:7b:de:
         fe:89:c2:2b:25:7b:d4:85:ca:17:2e:c6:b1:c7:d9:b6:2a:30:
         30:8c:82:39:30:8d:c6:b7:93:f0:c7:23:4a:de:40:da:dd:b4:
         6b:2f:bd:a0:e8:fe:ad:fc:ad:bd:59:42:bd:6c:1e:6b:3c:45:
         34:b4:04:ce:00:56:7c:ee:64:e5:b1:de:59:7d:0a:ec:c3:c9:
         ff:94:c4:85:24:4c:26:10:6d:a3:63:8a:58:6c:5d:29:32:66:
         fa:5d:6c:ef:26:a0:ea:21:7e:be:fd:8d:a6:5e:0e:2a:a3:22:
         5f:0e:26:e3:ed:fc:08:f3:da:36:b2:79:8e:2e:bb:ad:37:c8:
         cd:3c:c7:0f:c7:2d:48:f4:4e:9b:a7:d6:a2:14:7e:6d:bd:e8:
         89:32:12:61:52:3d:ae:2e:bd:7d:0f:23:66:a1:18:7b:e3:20:
         78:bc:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----