Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3631353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a3631353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          ypwD+YdpbE/Xm1Ats1hiRXh6Mc3+CB8D06q8ov1Nr8A=
Subject key identifier:   E9:B4:70:59:93:8C:99:E9:BD:FF:23:F2:D4:17:D2:68:0E:5E:26:14
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       201387F7A8E9EEA9F475234FF59F9BC6887C9901
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3631353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 06:15:02 +0000
ROA not before:           Tue 01 Feb 2022 06:10:02 +0000
ROA not after:            Tue 31 Jan 2023 06:15:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:615::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:13:87:f7:a8:e9:ee:a9:f4:75:23:4f:f5:9f:9b:c6:88:7c:99:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 06:10:02 2022 GMT
            Not After : Jan 31 06:15:02 2023 GMT
        Subject: CN=3082010A0282010100BEC024340A11ED733EA4C92693E163F9468681452F9A6F7B9858CD060E08B8890AC0F04AACF828DD571EC687C391DB75B40360DA94C895342C771B6967E27248CD2367BA1A6DE5B28B29D877B2FF71EDE7FC028D42268410183F59706372947890E8F986D823A4C8CB2C1E30C613B08B8F0A14D0AE01EB59BED513B8D4B0D50CC460E77A9C4E276DB6127EC4D0229CBA7ED0DC3013A3A38B5E6B85DCA0A1D4115544EC4B7868B553B7C08DC4DE7BFB2C0657FD618D5084C33FBD4F16EB37CE294195088EAA64A76E4DD406B3008100DBAE244AEFBA8E7C9255583139984329E299CED1835E13EC7840BDB183E5F2D5456A908DAD122C3428B22CB6D31AB4D4A90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:24:34:0a:11:ed:73:3e:a4:c9:26:93:e1:
                    63:f9:46:86:81:45:2f:9a:6f:7b:98:58:cd:06:0e:
                    08:b8:89:0a:c0:f0:4a:ac:f8:28:dd:57:1e:c6:87:
                    c3:91:db:75:b4:03:60:da:94:c8:95:34:2c:77:1b:
                    69:67:e2:72:48:cd:23:67:ba:1a:6d:e5:b2:8b:29:
                    d8:77:b2:ff:71:ed:e7:fc:02:8d:42:26:84:10:18:
                    3f:59:70:63:72:94:78:90:e8:f9:86:d8:23:a4:c8:
                    cb:2c:1e:30:c6:13:b0:8b:8f:0a:14:d0:ae:01:eb:
                    59:be:d5:13:b8:d4:b0:d5:0c:c4:60:e7:7a:9c:4e:
                    27:6d:b6:12:7e:c4:d0:22:9c:ba:7e:d0:dc:30:13:
                    a3:a3:8b:5e:6b:85:dc:a0:a1:d4:11:55:44:ec:4b:
                    78:68:b5:53:b7:c0:8d:c4:de:7b:fb:2c:06:57:fd:
                    61:8d:50:84:c3:3f:bd:4f:16:eb:37:ce:29:41:95:
                    08:8e:aa:64:a7:6e:4d:d4:06:b3:00:81:00:db:ae:
                    24:4a:ef:ba:8e:7c:92:55:58:31:39:98:43:29:e2:
                    99:ce:d1:83:5e:13:ec:78:40:bd:b1:83:e5:f2:d5:
                    45:6a:90:8d:ad:12:2c:34:28:b2:2c:b6:d3:1a:b4:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B4:70:59:93:8C:99:E9:BD:FF:23:F2:D4:17:D2:68:0E:5E:26:14
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3631353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:615::/80

    Signature Algorithm: sha256WithRSAEncryption
         10:93:e0:24:17:0e:66:9b:d2:06:a7:3e:6a:69:93:e2:67:96:
         82:f4:b0:96:36:6b:f5:82:f1:08:72:b3:a1:f7:27:46:18:27:
         23:e0:99:d4:b6:03:1b:3f:f3:ea:e6:be:3f:26:74:cc:24:2e:
         28:82:13:22:79:bd:a3:48:35:d2:e8:24:7b:fd:05:d3:50:f1:
         c2:10:07:7d:b9:c3:ca:86:68:ee:9a:58:90:fe:65:e6:2f:75:
         e8:7b:28:cd:bf:3c:b4:9f:b2:aa:fe:14:4c:ee:03:25:f2:33:
         48:7b:dc:63:90:d7:ef:79:8e:55:79:70:40:44:bb:7e:53:b3:
         26:e7:7f:22:83:d8:26:5e:f3:48:ab:6b:33:3b:c3:98:b1:ea:
         3b:ec:cb:22:79:9e:94:28:0f:48:45:36:b8:22:5d:b8:ff:68:
         da:59:74:46:9f:ec:17:a4:ff:e4:7d:d3:bd:69:a2:05:a4:d3:
         48:ae:74:95:21:4c:8a:b1:55:c6:47:03:b4:c8:43:9d:9e:42:
         61:e4:d1:e9:1c:2f:95:0b:a6:1a:87:21:93:35:ed:f1:20:91:
         30:41:7a:a0:1a:e6:fe:eb:b7:32:b4:40:dc:b3:42:be:88:4b:
         77:ae:3f:93:d5:45:c4:c8:7a:d3:c4:ef:0c:f4:30:f2:d5:eb:
         5f:67:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----