Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a3731353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230343a3731353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          OohU5Gbws1F65fuInbfkpyXIRpuxm1XfKisJL2g6kcE=
Subject key identifier:   56:89:E7:A6:AF:2E:CA:75:79:2B:B1:CC:07:9D:AA:1D:2D:5E:0B:76
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6FC2841A26D07260682BF8C54C2FDBB5862D2DDC
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a3731353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 04 Feb 2022 07:15:02 +0000
ROA not before:           Fri 04 Feb 2022 07:10:02 +0000
ROA not after:            Fri 03 Feb 2023 07:15:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:204:715::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c2:84:1a:26:d0:72:60:68:2b:f8:c5:4c:2f:db:b5:86:2d:2d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  4 07:10:02 2022 GMT
            Not After : Feb  3 07:15:02 2023 GMT
        Subject: CN=3082010A0282010100B9DFFD6C3A4A8D31B8921E1F327DF93835C115A29890DCE804A167A5BAE0F944D2A0DAAF475E6FD47E827824B17E7A9530518038513A0D8667E10A4D7EB19A2B95742A5DCE84D4DBF9123E02063AE44AC99F3DE0554B1F3E46B6CED546A622DBF846DB2A4151C7A14F07643693A8D31D954B2E614ECF0ADB169C7C9AE565E3D94546A32546601CFE5CB0AE442EAFD3A3D575530B35B83A57D8E638D5B803A5D143EB6A58B385DFEA3CDD408127AFDA65D5C9849B2251580EE420FBB9ED94297ACA7DAA8628BF763D4AE8536E5F77447FEC7F8C9E70DA95A53D736179CDA9211F2F159F341BA035D82C6F281B322A0224AA32B412E1A44F06152A557304FE534B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:fd:6c:3a:4a:8d:31:b8:92:1e:1f:32:7d:
                    f9:38:35:c1:15:a2:98:90:dc:e8:04:a1:67:a5:ba:
                    e0:f9:44:d2:a0:da:af:47:5e:6f:d4:7e:82:78:24:
                    b1:7e:7a:95:30:51:80:38:51:3a:0d:86:67:e1:0a:
                    4d:7e:b1:9a:2b:95:74:2a:5d:ce:84:d4:db:f9:12:
                    3e:02:06:3a:e4:4a:c9:9f:3d:e0:55:4b:1f:3e:46:
                    b6:ce:d5:46:a6:22:db:f8:46:db:2a:41:51:c7:a1:
                    4f:07:64:36:93:a8:d3:1d:95:4b:2e:61:4e:cf:0a:
                    db:16:9c:7c:9a:e5:65:e3:d9:45:46:a3:25:46:60:
                    1c:fe:5c:b0:ae:44:2e:af:d3:a3:d5:75:53:0b:35:
                    b8:3a:57:d8:e6:38:d5:b8:03:a5:d1:43:eb:6a:58:
                    b3:85:df:ea:3c:dd:40:81:27:af:da:65:d5:c9:84:
                    9b:22:51:58:0e:e4:20:fb:b9:ed:94:29:7a:ca:7d:
                    aa:86:28:bf:76:3d:4a:e8:53:6e:5f:77:44:7f:ec:
                    7f:8c:9e:70:da:95:a5:3d:73:61:79:cd:a9:21:1f:
                    2f:15:9f:34:1b:a0:35:d8:2c:6f:28:1b:32:2a:02:
                    24:aa:32:b4:12:e1:a4:4f:06:15:2a:55:73:04:fe:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:89:E7:A6:AF:2E:CA:75:79:2B:B1:CC:07:9D:AA:1D:2D:5E:0B:76
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a3731353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:204:715::/80

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:07:62:40:46:5d:56:06:97:d7:cf:c5:84:c0:d6:2a:99:
         1f:d1:b1:9c:9d:6e:f7:bf:05:56:da:b2:7e:97:8f:69:25:68:
         c6:9e:62:b5:d7:87:9a:5f:8e:7a:e5:b1:13:6b:70:d1:75:5e:
         56:35:e2:5e:6a:44:81:99:c6:99:58:06:c7:74:40:e7:96:28:
         0c:77:47:75:9c:bb:4f:23:b6:c8:e8:27:91:55:38:70:4a:d1:
         93:40:89:df:a5:01:88:23:f0:a2:0f:21:40:82:15:a8:a7:f8:
         85:42:12:de:a2:a3:e0:50:72:b2:0f:34:52:bc:7c:a8:6c:ab:
         0b:1c:c9:58:2e:b7:ab:fb:2b:bf:a1:84:d0:46:34:d9:41:c8:
         06:fe:b5:fb:2a:ee:ce:de:d4:63:80:1c:8e:2e:07:fa:26:63:
         51:f7:56:a1:9b:27:7d:2b:20:01:b2:3a:45:95:f1:26:bd:c8:
         98:ff:2b:0e:f9:61:5d:2a:8f:8c:84:16:1b:48:7b:aa:33:07:
         95:4a:d7:41:5e:e7:d3:db:0a:21:cd:30:29:d4:1e:34:c8:e2:
         c2:09:71:f9:3b:51:2a:67:75:01:5a:39:53:ea:db:b4:3e:6c:
         f7:03:d2:16:99:fc:52:51:b7:16:3a:8c:4a:89:37:5d:50:1a:
         69:15:f8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----