Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a323031303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a323031303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          26C24Qe/fo6br8MryCzWCWYxeFATbCWwzRoDox9w3kE=
Subject key identifier:   4C:0D:CF:30:CA:DC:CB:88:B7:1B:7C:B2:93:52:6A:FB:1E:DF:52:DB
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       28E85208309039C3250024C5F3F7A443D618746B
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a323031303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 20:10:02 +0000
ROA not before:           Tue 01 Feb 2022 20:05:02 +0000
ROA not after:            Tue 31 Jan 2023 20:10:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:2010::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e8:52:08:30:90:39:c3:25:00:24:c5:f3:f7:a4:43:d6:18:74:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 20:05:02 2022 GMT
            Not After : Jan 31 20:10:02 2023 GMT
        Subject: CN=3082010A0282010100CC60D645322775F0C91B75AF8CE43C506B1A76590C1F8BF97B8CB88052DC8793DCE36E42617F3EBA96C68C629569D0A8ED11ECD8A21DA6AC3185868CC10ECB84D49F47D1FA9D115C312A8BD15B1AFF5CCC1E619021E155AF337568E192BA9F8ABA5B1BB7A7A30D7C96311FFE0CB04C45120160A47B0047A599585472BCBDC23A6421527E359C9BE6F576C155232DB9A9A5EE039F39EC72D0F7707C73CDA19D0D9A5A567B527735F6D53E413FAAF41245F96506A0FD92D85A1D121DE9AC4DE589D778EAE10D79E5697562F8D3B4F28EB36AEAB21953483E2DA30AA81A61FA7512E1D148D6727E2C38609B728FEBF63DAB3E3909AB5FA958961006F086532383850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:d6:45:32:27:75:f0:c9:1b:75:af:8c:e4:
                    3c:50:6b:1a:76:59:0c:1f:8b:f9:7b:8c:b8:80:52:
                    dc:87:93:dc:e3:6e:42:61:7f:3e:ba:96:c6:8c:62:
                    95:69:d0:a8:ed:11:ec:d8:a2:1d:a6:ac:31:85:86:
                    8c:c1:0e:cb:84:d4:9f:47:d1:fa:9d:11:5c:31:2a:
                    8b:d1:5b:1a:ff:5c:cc:1e:61:90:21:e1:55:af:33:
                    75:68:e1:92:ba:9f:8a:ba:5b:1b:b7:a7:a3:0d:7c:
                    96:31:1f:fe:0c:b0:4c:45:12:01:60:a4:7b:00:47:
                    a5:99:58:54:72:bc:bd:c2:3a:64:21:52:7e:35:9c:
                    9b:e6:f5:76:c1:55:23:2d:b9:a9:a5:ee:03:9f:39:
                    ec:72:d0:f7:70:7c:73:cd:a1:9d:0d:9a:5a:56:7b:
                    52:77:35:f6:d5:3e:41:3f:aa:f4:12:45:f9:65:06:
                    a0:fd:92:d8:5a:1d:12:1d:e9:ac:4d:e5:89:d7:78:
                    ea:e1:0d:79:e5:69:75:62:f8:d3:b4:f2:8e:b3:6a:
                    ea:b2:19:53:48:3e:2d:a3:0a:a8:1a:61:fa:75:12:
                    e1:d1:48:d6:72:7e:2c:38:60:9b:72:8f:eb:f6:3d:
                    ab:3e:39:09:ab:5f:a9:58:96:10:06:f0:86:53:23:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0D:CF:30:CA:DC:CB:88:B7:1B:7C:B2:93:52:6A:FB:1E:DF:52:DB
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a323031303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:2010::/80

    Signature Algorithm: sha256WithRSAEncryption
         7e:ec:8a:55:56:c6:e2:cb:f0:34:ce:94:1a:f5:3c:a8:63:8f:
         39:72:63:78:e3:b7:42:0a:f2:31:db:44:3d:16:e1:8d:a1:01:
         15:2c:bb:ab:02:9e:cd:df:5f:ac:e2:ed:ce:72:ca:98:17:28:
         9e:43:98:cf:ee:0a:b0:38:1d:6b:e5:42:c4:d1:67:47:b7:a6:
         d2:4a:f2:53:5c:f4:65:05:76:89:00:10:56:76:13:ec:13:31:
         d9:11:13:a2:29:b6:e1:00:39:da:86:0f:4f:a0:90:5a:33:ab:
         ff:19:60:d8:0d:3d:50:c5:1b:bd:14:ec:e8:8d:00:ae:97:43:
         0f:dc:98:ee:c2:49:51:ca:ca:15:62:5d:60:5c:df:7a:1c:9c:
         b1:2e:fd:b0:6f:d5:13:ee:11:f6:7c:de:b4:51:eb:98:09:e3:
         8c:be:aa:40:16:89:8e:2f:9d:2e:86:86:8e:fe:7b:d8:5f:3a:
         af:21:40:47:c5:99:f7:95:f8:97:8f:16:89:20:14:6a:02:9f:
         3f:10:cc:25:84:e4:84:ae:8a:88:13:5e:07:81:e5:00:8e:85:
         3b:79:bc:01:e0:64:df:10:e3:36:0c:4b:46:95:23:27:05:ac:
         3e:e4:db:5f:4e:65:a9:57:22:38:96:3f:36:f0:75:12:40:e9:
         b2:62:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----