Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3533353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a3533353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Y1jgEEQ/fgvVP4fyh3pa1NtoAa6Pq9wrBVqBFphPrwo=
Subject key identifier:   FD:BE:59:F5:72:34:5A:B7:8E:1E:04:BF:AB:9B:00:6C:8F:46:21:53
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0ABB2AD8A1DBF331A6BD372FA378C9E54F5542CD
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3533353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 05:35:01 +0000
ROA not before:           Sun 30 Jan 2022 05:30:01 +0000
ROA not after:            Sun 29 Jan 2023 05:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:535::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bb:2a:d8:a1:db:f3:31:a6:bd:37:2f:a3:78:c9:e5:4f:55:42:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 05:30:01 2022 GMT
            Not After : Jan 29 05:35:01 2023 GMT
        Subject: CN=3082010A0282010100C27ED45182654791BEFBC3AAEC0341A362DF2C1003F9B045B43A9D41B82B1246031D8CDFF41E8BEC66BEF4CA936CCA0CAD4780202930E4338ED002D048DB7EF12092A82FF90751F2CEC12C515E533C973BEAEEC6C8FFA5DD98C1D2169BAD5755467F64E0598FAA4B7243FCF3A0EBE16C613E1CFF1CCD8D95B5DB4A59C0016155B4B7958A3B47FAFDC6927501A4D1B3F62CA0A1F2F79979B06C20663DCF5905BFA362C9F12503160064D4CB5D6846EE57EE52206E71D349556CAE6BE578645D49EF6309202C02035EE3F3774327A816C6D0A77CAC2C8EB33E58E278AB985C585EA63175D46D697C854E147FE674AE23B3B2C2B2C25865460753FCDDE0B2D8D7C50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:d4:51:82:65:47:91:be:fb:c3:aa:ec:03:
                    41:a3:62:df:2c:10:03:f9:b0:45:b4:3a:9d:41:b8:
                    2b:12:46:03:1d:8c:df:f4:1e:8b:ec:66:be:f4:ca:
                    93:6c:ca:0c:ad:47:80:20:29:30:e4:33:8e:d0:02:
                    d0:48:db:7e:f1:20:92:a8:2f:f9:07:51:f2:ce:c1:
                    2c:51:5e:53:3c:97:3b:ea:ee:c6:c8:ff:a5:dd:98:
                    c1:d2:16:9b:ad:57:55:46:7f:64:e0:59:8f:aa:4b:
                    72:43:fc:f3:a0:eb:e1:6c:61:3e:1c:ff:1c:cd:8d:
                    95:b5:db:4a:59:c0:01:61:55:b4:b7:95:8a:3b:47:
                    fa:fd:c6:92:75:01:a4:d1:b3:f6:2c:a0:a1:f2:f7:
                    99:79:b0:6c:20:66:3d:cf:59:05:bf:a3:62:c9:f1:
                    25:03:16:00:64:d4:cb:5d:68:46:ee:57:ee:52:20:
                    6e:71:d3:49:55:6c:ae:6b:e5:78:64:5d:49:ef:63:
                    09:20:2c:02:03:5e:e3:f3:77:43:27:a8:16:c6:d0:
                    a7:7c:ac:2c:8e:b3:3e:58:e2:78:ab:98:5c:58:5e:
                    a6:31:75:d4:6d:69:7c:85:4e:14:7f:e6:74:ae:23:
                    b3:b2:c2:b2:c2:58:65:46:07:53:fc:dd:e0:b2:d8:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BE:59:F5:72:34:5A:B7:8E:1E:04:BF:AB:9B:00:6C:8F:46:21:53
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3533353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:535::/80

    Signature Algorithm: sha256WithRSAEncryption
         9f:52:84:0e:c3:4f:03:75:61:ec:9a:4e:c3:a9:6e:92:a2:1f:
         12:6b:e6:11:ca:40:2f:8f:37:c5:2b:f8:08:22:d3:ca:bd:95:
         ca:e1:ef:2a:14:ee:4b:9f:7e:b3:2b:05:87:28:31:4d:6e:36:
         94:c0:12:11:6a:da:ec:74:5f:06:8a:ef:79:8b:65:8b:8b:03:
         ce:78:5c:ae:b3:06:b7:1c:31:e5:8b:a4:60:3c:08:57:84:ca:
         3b:d5:46:98:80:3c:d4:52:87:8c:a6:1e:ce:29:a3:93:25:fa:
         56:28:2c:fb:63:99:4b:19:2a:a4:f0:59:cf:d0:2c:4e:20:6e:
         74:c0:58:42:4d:e7:28:05:c4:a3:79:de:57:23:24:0b:50:69:
         5b:9b:3c:3a:64:04:15:e0:82:64:c2:b4:09:60:22:00:ab:5c:
         f4:23:7e:e2:cf:34:d5:8e:9b:43:c7:00:d5:0f:21:73:55:cd:
         ec:ea:b0:10:bc:05:59:62:3d:f8:49:d3:96:27:a0:d7:b2:1c:
         91:26:ec:fc:71:30:00:a2:09:e7:2f:d7:f2:06:26:d3:64:22:
         33:78:07:d0:22:73:92:45:32:77:68:e6:ac:6d:7b:18:a9:89:
         6b:7d:77:22:32:70:e7:2a:18:b0:f8:70:2d:e7:86:75:7c:c9:
         6c:36:ae:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----