Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a3932353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230343a3932353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /xVIt9OIzI8WXSGWEln/0gjefjoq3ENcWGZV80tk6cU=
Subject key identifier:   B9:13:C7:97:40:91:44:26:7D:DB:EC:97:15:97:55:03:96:9E:0C:FD
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       51E3F81E86C4B9EDF43101ABBC55C8C956E5D639
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a3932353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 04 Feb 2022 09:25:01 +0000
ROA not before:           Fri 04 Feb 2022 09:20:01 +0000
ROA not after:            Fri 03 Feb 2023 09:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:204:925::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e3:f8:1e:86:c4:b9:ed:f4:31:01:ab:bc:55:c8:c9:56:e5:d6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  4 09:20:01 2022 GMT
            Not After : Feb  3 09:25:01 2023 GMT
        Subject: CN=3082010A0282010100F0CAF3F0BFADC1AF8CC3F48E41B0922DBBE9CDCC73787B02B400FA8E26475C7A8145D9D4DC2744D79DEE09CE110997D0C5310ACFE27E64486B1275FEBE6F72E22475D0C2A02F2DEC694F91D97CE3FCC98F256CE47D9CBF90009A5FE1B6CD9DBAD6C27493924B50B31AD912B3BA771C312FC6B9B45B3769136746F3569BCDA06E0E4D6F7C9F11A97A4D70A8872C0C6FCA26013C424A0C0F5417EFB5DB31B2DC134071CCB21FE199500B83EE0ED69F38E22095C3115DDCA09D688A08C88DCECDF3517B3FBE0E8CBEA04DFC244721466743AFAE52B7C41CD9F34AC2674BB171E60D550451070C0F04A05581971C69E6B159D51F206EB4A0D8BF238861E5E9E38B1F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ca:f3:f0:bf:ad:c1:af:8c:c3:f4:8e:41:b0:
                    92:2d:bb:e9:cd:cc:73:78:7b:02:b4:00:fa:8e:26:
                    47:5c:7a:81:45:d9:d4:dc:27:44:d7:9d:ee:09:ce:
                    11:09:97:d0:c5:31:0a:cf:e2:7e:64:48:6b:12:75:
                    fe:be:6f:72:e2:24:75:d0:c2:a0:2f:2d:ec:69:4f:
                    91:d9:7c:e3:fc:c9:8f:25:6c:e4:7d:9c:bf:90:00:
                    9a:5f:e1:b6:cd:9d:ba:d6:c2:74:93:92:4b:50:b3:
                    1a:d9:12:b3:ba:77:1c:31:2f:c6:b9:b4:5b:37:69:
                    13:67:46:f3:56:9b:cd:a0:6e:0e:4d:6f:7c:9f:11:
                    a9:7a:4d:70:a8:87:2c:0c:6f:ca:26:01:3c:42:4a:
                    0c:0f:54:17:ef:b5:db:31:b2:dc:13:40:71:cc:b2:
                    1f:e1:99:50:0b:83:ee:0e:d6:9f:38:e2:20:95:c3:
                    11:5d:dc:a0:9d:68:8a:08:c8:8d:ce:cd:f3:51:7b:
                    3f:be:0e:8c:be:a0:4d:fc:24:47:21:46:67:43:af:
                    ae:52:b7:c4:1c:d9:f3:4a:c2:67:4b:b1:71:e6:0d:
                    55:04:51:07:0c:0f:04:a0:55:81:97:1c:69:e6:b1:
                    59:d5:1f:20:6e:b4:a0:d8:bf:23:88:61:e5:e9:e3:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:13:C7:97:40:91:44:26:7D:DB:EC:97:15:97:55:03:96:9E:0C:FD
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a3932353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:204:925::/80

    Signature Algorithm: sha256WithRSAEncryption
         4e:5c:f9:3e:12:18:3c:bc:22:53:3d:2f:c6:83:ad:81:0d:3f:
         90:b1:97:14:93:27:78:e0:db:7a:f8:aa:23:15:73:4e:fb:50:
         8f:08:db:05:c4:2f:1a:9e:df:4e:85:8f:6d:1a:8a:11:10:01:
         a9:3f:5e:4c:c9:1e:b2:70:f2:7d:15:76:8c:d5:d4:5b:51:48:
         0e:75:38:4f:06:d9:81:29:c5:ba:d7:d5:5b:61:76:15:28:0d:
         3a:5a:ab:85:9c:38:80:26:c3:56:60:92:c9:27:71:0e:02:83:
         6d:5e:cf:ad:25:da:c3:37:64:17:26:30:55:a8:93:c0:ed:62:
         a5:9c:00:47:0a:1d:a1:f5:84:fa:92:46:ce:25:d1:0a:61:1b:
         ab:1e:a1:ae:7e:9c:02:39:a2:02:48:bb:50:91:07:7e:2c:22:
         4a:44:18:8d:8a:74:d6:9b:e1:6b:0f:1a:ac:f0:7b:e9:d2:51:
         b2:f4:2d:05:34:e5:30:33:23:6c:c8:0b:e0:11:cb:9c:4f:ff:
         81:dd:f6:3a:9b:5c:c8:09:c0:2e:01:38:57:e1:bb:df:2e:a8:
         31:e3:d3:6a:20:46:ca:e6:32:45:7a:b1:4a:f8:88:23:02:12:
         87:b7:9c:1f:0b:4d:4b:82:a1:7a:ec:1d:12:9c:09:8b:4f:30:
         8d:e6:ba:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----