Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3930303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a3930303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /W8O2XK7k5EcDssVF986EWRAzvVR5gfZFdpr3rpP8ao=
Subject key identifier:   5E:E7:44:16:C8:32:B7:4F:D2:58:B8:C1:6A:42:E9:79:23:BD:52:97
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       56478E5BD4D5D7508E3D3E1B1F93CB77E291B1D6
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3930303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 09:00:01 +0000
ROA not before:           Tue 01 Feb 2022 08:55:01 +0000
ROA not after:            Tue 31 Jan 2023 09:00:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:900::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:47:8e:5b:d4:d5:d7:50:8e:3d:3e:1b:1f:93:cb:77:e2:91:b1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 08:55:01 2022 GMT
            Not After : Jan 31 09:00:01 2023 GMT
        Subject: CN=3082010A0282010100DA830EB89257BDAC06E1DC7582D0B0585ADBF21DF566F4125A55EA9FC34F9B42B99D5DE083D289EDA48FCE2AA6F854ECFE924D7B71008203966E2FC84ECC9C1BA0445C7CF430DF143362EFE33E50F13DE5F29AD6E58267DF47E3234C547F11D4E62B44FD30486A54B4DF2A8D77F7E252BC7CFEE9F2BFA3DEE072BD8E1B23633D8773A24EFABB890A04754D445D532B5A6C9B4872A63741356A23174BC57AEFE0BC0DDBF62A8D7DAB92229CDAFE5E4ED3844763A8BB2F66326842AD24ECE6A90714340A6D88196024F7F4E9597E8B250E34A0423926C0F2C9B996FD46DDD7966A206CC1C462AED6F4489835A5A02757FDC688AE15DCB3A8AC4F6BDCBB224713F30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:0e:b8:92:57:bd:ac:06:e1:dc:75:82:d0:
                    b0:58:5a:db:f2:1d:f5:66:f4:12:5a:55:ea:9f:c3:
                    4f:9b:42:b9:9d:5d:e0:83:d2:89:ed:a4:8f:ce:2a:
                    a6:f8:54:ec:fe:92:4d:7b:71:00:82:03:96:6e:2f:
                    c8:4e:cc:9c:1b:a0:44:5c:7c:f4:30:df:14:33:62:
                    ef:e3:3e:50:f1:3d:e5:f2:9a:d6:e5:82:67:df:47:
                    e3:23:4c:54:7f:11:d4:e6:2b:44:fd:30:48:6a:54:
                    b4:df:2a:8d:77:f7:e2:52:bc:7c:fe:e9:f2:bf:a3:
                    de:e0:72:bd:8e:1b:23:63:3d:87:73:a2:4e:fa:bb:
                    89:0a:04:75:4d:44:5d:53:2b:5a:6c:9b:48:72:a6:
                    37:41:35:6a:23:17:4b:c5:7a:ef:e0:bc:0d:db:f6:
                    2a:8d:7d:ab:92:22:9c:da:fe:5e:4e:d3:84:47:63:
                    a8:bb:2f:66:32:68:42:ad:24:ec:e6:a9:07:14:34:
                    0a:6d:88:19:60:24:f7:f4:e9:59:7e:8b:25:0e:34:
                    a0:42:39:26:c0:f2:c9:b9:96:fd:46:dd:d7:96:6a:
                    20:6c:c1:c4:62:ae:d6:f4:48:98:35:a5:a0:27:57:
                    fd:c6:88:ae:15:dc:b3:a8:ac:4f:6b:dc:bb:22:47:
                    13:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E7:44:16:C8:32:B7:4F:D2:58:B8:C1:6A:42:E9:79:23:BD:52:97
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3930303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:900::/80

    Signature Algorithm: sha256WithRSAEncryption
         ad:98:02:32:06:92:b9:ad:99:ab:9e:54:1e:ed:7f:0b:a3:b4:
         8e:44:a6:92:4e:22:44:a7:6d:73:32:03:62:ff:05:53:eb:e4:
         bf:d9:95:15:82:fd:1d:d2:a3:36:66:1e:04:29:63:a9:b4:75:
         8f:e2:b6:68:d4:cb:f8:77:77:c5:f1:74:18:85:f3:bb:7a:25:
         75:3f:23:5a:d3:df:68:16:37:db:cd:0d:cd:2b:af:9e:2f:28:
         0b:c4:aa:e0:7a:d3:8a:89:b3:95:20:6f:84:68:25:6b:8a:94:
         44:83:f4:a0:e4:94:9e:7c:38:f7:82:95:23:62:99:64:96:4d:
         9a:72:bb:71:63:2d:97:39:0f:44:7c:fd:b2:42:94:aa:68:1f:
         8a:f1:e9:14:bd:1a:d3:40:fb:0b:09:b6:f3:be:9a:18:5a:e7:
         5d:e2:cf:2e:af:e4:67:f4:89:7b:a7:45:ea:29:c4:db:c5:12:
         c2:bf:41:98:d7:23:40:a1:e5:49:e3:f0:9a:ee:b4:7e:d5:14:
         5e:70:34:99:d6:16:64:62:0d:db:4f:56:48:d2:6d:7c:37:de:
         fc:89:41:7d:e1:98:22:e4:2c:1c:a9:e4:1b:69:28:80:d3:b2:
         a1:f5:8a:6b:8c:0e:19:da:13:8f:6d:30:e4:4d:7d:74:79:d7:
         6b:58:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----