Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313934303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230353a313934303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          VNBHFnRTyLB5YaYSaVNZ7GyeQtKQdPX3Lsqoyx+5iBA=
Subject key identifier:   BB:DC:50:2E:6F:BE:81:57:9F:8F:B2:3C:3C:0D:67:0A:B0:FC:E8:6C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5EC1816B3C831C6A655EAA9B0DDD15FAEE7C9EDE
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313934303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 05 Feb 2022 19:40:02 +0000
ROA not before:           Sat 05 Feb 2022 19:35:02 +0000
ROA not after:            Sat 04 Feb 2023 19:40:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:205:1940::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c1:81:6b:3c:83:1c:6a:65:5e:aa:9b:0d:dd:15:fa:ee:7c:9e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  5 19:35:02 2022 GMT
            Not After : Feb  4 19:40:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3d:45:04:32:d4:33:e9:8e:ff:ab:d2:35:ae:
                    3f:de:fc:9e:9f:73:b5:de:cf:c1:c1:e9:e8:73:43:
                    21:2c:7f:bd:91:32:b6:c3:43:61:d4:02:5c:68:fb:
                    7f:c5:c9:d7:25:a5:a2:e9:eb:9b:c3:fe:0b:8e:48:
                    2e:5d:ff:2e:95:3b:e4:91:4e:ff:78:94:7d:ea:02:
                    6b:bf:d6:88:08:25:a1:2a:1c:63:97:b0:ca:bb:c0:
                    37:21:5b:ed:43:19:df:b6:c6:2d:ae:5e:05:89:cc:
                    4f:e2:dd:79:27:00:c8:2f:27:40:a8:22:9e:31:6e:
                    b6:f2:9f:64:a2:03:df:c5:f1:0a:b1:9d:0c:a5:c9:
                    96:0a:68:df:f1:81:c5:30:27:44:50:99:24:81:a1:
                    46:39:36:b8:48:26:e3:93:5d:b9:7a:7e:0d:14:c6:
                    4e:2f:0d:fd:76:06:7d:f5:ca:7c:4e:fc:cb:95:22:
                    f7:d6:c1:99:be:43:c5:97:dd:e5:b9:ee:89:ec:5b:
                    55:3f:90:f2:4a:72:9f:4b:77:fc:dd:c9:b0:96:bd:
                    9f:14:fe:88:d5:bf:a7:1a:4d:a9:a9:f0:e9:80:48:
                    92:d9:46:e3:bc:2a:2f:f4:06:39:3b:f8:c7:aa:0a:
                    26:f5:e8:e0:3a:33:0c:5b:89:10:ae:4f:b3:6c:b4:
                    64:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DC:50:2E:6F:BE:81:57:9F:8F:B2:3C:3C:0D:67:0A:B0:FC:E8:6C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313934303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:205:1940::/80

    Signature Algorithm: sha256WithRSAEncryption
         a8:22:9a:5d:17:f5:b1:8c:8f:72:35:c4:86:18:4b:95:6a:99:
         a6:73:52:f2:65:21:c3:d6:13:4a:f2:f8:f4:45:49:fd:e0:e3:
         e5:22:72:82:9b:86:cc:85:64:3b:70:99:8e:a3:c8:12:4f:ce:
         12:12:11:57:ac:57:2a:3a:21:ae:3b:2c:f8:dc:1c:22:60:b8:
         d6:29:5c:f0:76:82:8e:40:df:27:40:c2:ee:58:b9:c7:52:c9:
         1d:b1:fd:e3:74:8e:13:c5:4c:e1:04:a4:1c:0b:55:41:48:66:
         63:e1:3c:45:54:02:e6:67:23:b1:f3:3e:59:6c:46:4d:c0:cd:
         5c:bb:55:9a:e6:c6:da:0b:b1:61:49:f7:eb:41:3a:c9:6a:86:
         74:46:22:b2:a0:45:0d:87:f6:e2:5d:de:69:8f:38:9f:6e:54:
         e5:69:7e:8d:64:fe:99:ec:fb:57:7a:29:5b:ca:de:4e:8b:68:
         85:67:0b:de:6d:9e:f5:b2:7e:a4:9c:42:e3:0e:6b:f3:70:3c:
         03:3a:a1:70:21:d5:e0:5b:dc:9b:22:85:3b:65:c4:b8:36:e6:
         46:d0:d2:00:c3:f5:da:8f:bd:1a:de:3c:1c:c3:5a:09:fc:3e:
         6d:b2:a9:fd:78:23:35:5a:b0:84:60:8c:0b:87:8b:80:bc:75:
         8e:e9:c6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----