Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313933353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230363a313933353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          hk+q/hdQFbhlHo7eQDFwd4FCaxdOs3ui2o4+x0HThyc=
Subject key identifier:   DC:C4:87:11:61:7F:64:FF:25:1F:E1:B6:1F:AC:EA:2D:1B:75:E9:A9
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       613E9C82BCD084080C0802F9CD03DA778769BAB2
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313933353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 06 Feb 2022 19:35:01 +0000
ROA not before:           Sun 06 Feb 2022 19:30:01 +0000
ROA not after:            Sun 05 Feb 2023 19:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:206:1935::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3e:9c:82:bc:d0:84:08:0c:08:02:f9:cd:03:da:77:87:69:ba:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  6 19:30:01 2022 GMT
            Not After : Feb  5 19:35:01 2023 GMT
        Subject: CN=3082010A0282010100E849D2A73D03DF98DE801B412C684306BA0B4B5ED936E3347C68AEC29EE71F404133B3C48BD3ED7AEB617B8E3D6BABF659962451FF046E37A444204C1D952C557674D3DDBE4C0E4F93A75DAE93067436AF5497AADCD2285EE5A804E5FF29FFF3C34E7E88437E255FAA82538889A21DDA8C6C6B3203F9E4633A5A00449239DBAED59B89F67357F171A5DF31B7FC7CE911B28F3CB458A140A8A1BDBA2C8C971247AC93311B538053E4A777384DE9D9D934CB100000B1A7C5619F11FB28787E39753286A23DA1844B0ABC559084A200D4FFC42CA84AE5DF17A0ABCEADB4BF6C8305A3BF3CA68CEBD2A8114E41068094F7429ACF2582EA5097286A2F530E23578B810203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:49:d2:a7:3d:03:df:98:de:80:1b:41:2c:68:
                    43:06:ba:0b:4b:5e:d9:36:e3:34:7c:68:ae:c2:9e:
                    e7:1f:40:41:33:b3:c4:8b:d3:ed:7a:eb:61:7b:8e:
                    3d:6b:ab:f6:59:96:24:51:ff:04:6e:37:a4:44:20:
                    4c:1d:95:2c:55:76:74:d3:dd:be:4c:0e:4f:93:a7:
                    5d:ae:93:06:74:36:af:54:97:aa:dc:d2:28:5e:e5:
                    a8:04:e5:ff:29:ff:f3:c3:4e:7e:88:43:7e:25:5f:
                    aa:82:53:88:89:a2:1d:da:8c:6c:6b:32:03:f9:e4:
                    63:3a:5a:00:44:92:39:db:ae:d5:9b:89:f6:73:57:
                    f1:71:a5:df:31:b7:fc:7c:e9:11:b2:8f:3c:b4:58:
                    a1:40:a8:a1:bd:ba:2c:8c:97:12:47:ac:93:31:1b:
                    53:80:53:e4:a7:77:38:4d:e9:d9:d9:34:cb:10:00:
                    00:b1:a7:c5:61:9f:11:fb:28:78:7e:39:75:32:86:
                    a2:3d:a1:84:4b:0a:bc:55:90:84:a2:00:d4:ff:c4:
                    2c:a8:4a:e5:df:17:a0:ab:ce:ad:b4:bf:6c:83:05:
                    a3:bf:3c:a6:8c:eb:d2:a8:11:4e:41:06:80:94:f7:
                    42:9a:cf:25:82:ea:50:97:28:6a:2f:53:0e:23:57:
                    8b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C4:87:11:61:7F:64:FF:25:1F:E1:B6:1F:AC:EA:2D:1B:75:E9:A9
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a313933353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:206:1935::/80

    Signature Algorithm: sha256WithRSAEncryption
         a3:ad:ea:93:e9:b2:e4:98:00:a6:ca:20:57:aa:e6:63:6f:b4:
         bc:97:32:31:b9:03:15:91:13:93:98:70:fe:b7:33:30:3a:2b:
         fe:cc:66:e9:1f:45:c1:fb:6a:ee:e5:b8:fd:e3:58:aa:2b:7a:
         81:b2:6e:0b:19:49:23:5d:a0:1d:43:a9:8f:6e:c5:02:10:dc:
         3f:04:74:85:55:3d:f1:f1:15:d2:69:09:5a:f7:49:1f:fe:21:
         04:bf:a5:76:b0:22:57:f7:bd:1b:55:09:2f:94:9a:98:d5:af:
         40:00:01:c1:95:3f:39:c7:24:1d:60:f3:c1:c7:85:b9:90:ae:
         e5:13:42:3f:fa:c5:5c:9d:28:d7:68:7d:d0:81:a5:aa:48:83:
         23:36:2c:13:39:3e:d8:7a:2c:8c:94:62:f2:8b:b3:98:ba:f0:
         05:d3:71:df:45:e9:f1:07:51:77:72:66:3b:57:44:67:4e:a7:
         63:41:ce:f7:34:8c:19:b2:b1:fb:bd:57:33:a2:f0:55:a9:23:
         25:fc:1c:1e:05:66:11:54:95:62:34:c7:19:32:5c:2e:26:a7:
         54:6c:93:ef:ca:c4:88:4b:b9:5c:cd:02:ae:dc:80:0b:67:67:
         22:d4:41:cf:e9:2d:78:11:a2:2b:4b:ef:43:f7:5b:34:4f:bd:
         ff:8f:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----