Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313033353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a313033353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          BQulBkkcec24Yu2BrUWTjk4qRtwKz9d2jQCSL/VZez4=
Subject key identifier:   70:7E:99:EE:95:30:D3:B3:A2:C8:66:A8:64:4B:20:7F:9B:22:E2:91
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       55D7F29E5E28783A32466074B0C5E44672023C56
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313033353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 10:35:01 +0000
ROA not before:           Mon 07 Feb 2022 10:30:01 +0000
ROA not after:            Mon 06 Feb 2023 10:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:1035::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:f2:9e:5e:28:78:3a:32:46:60:74:b0:c5:e4:46:72:02:3c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 10:30:01 2022 GMT
            Not After : Feb  6 10:35:01 2023 GMT
        Subject: CN=3082010A0282010100C30CA84755BB8E6442F27AA3C118AE3BF420BFED2D9E21E55714FE5319A4EFA5DCB818D009C63575DFC89C1F1E358D081CED9D65ED13DC04F86A476704FB7FB7E146818FADA898D5795A8252C748F624B20894DEE16F48FF220AA9B81307B5653AC8E83EDF3DCCA97CCD3366C162BF83FA8B96CDB7FB5016DD9FF17E39BD1E4572BBAFE8540A9C94F0F70B8C662BE2DAB94B6B27E0BBE9AED83606B7A90F6EA34D9CFB92BAC25AC7BE2E65E358CFF0821954717DD609AFB90F115FB38E761C4A56A2E51402127A1732F608A5F9B30EF24E09445464E249F43E4C914D72711212AF0FEEAC37CD04A1BEC6B1A65CBBC4AE844DAE84FD52CCE0CDEE6030B8D7DE070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:a8:47:55:bb:8e:64:42:f2:7a:a3:c1:18:
                    ae:3b:f4:20:bf:ed:2d:9e:21:e5:57:14:fe:53:19:
                    a4:ef:a5:dc:b8:18:d0:09:c6:35:75:df:c8:9c:1f:
                    1e:35:8d:08:1c:ed:9d:65:ed:13:dc:04:f8:6a:47:
                    67:04:fb:7f:b7:e1:46:81:8f:ad:a8:98:d5:79:5a:
                    82:52:c7:48:f6:24:b2:08:94:de:e1:6f:48:ff:22:
                    0a:a9:b8:13:07:b5:65:3a:c8:e8:3e:df:3d:cc:a9:
                    7c:cd:33:66:c1:62:bf:83:fa:8b:96:cd:b7:fb:50:
                    16:dd:9f:f1:7e:39:bd:1e:45:72:bb:af:e8:54:0a:
                    9c:94:f0:f7:0b:8c:66:2b:e2:da:b9:4b:6b:27:e0:
                    bb:e9:ae:d8:36:06:b7:a9:0f:6e:a3:4d:9c:fb:92:
                    ba:c2:5a:c7:be:2e:65:e3:58:cf:f0:82:19:54:71:
                    7d:d6:09:af:b9:0f:11:5f:b3:8e:76:1c:4a:56:a2:
                    e5:14:02:12:7a:17:32:f6:08:a5:f9:b3:0e:f2:4e:
                    09:44:54:64:e2:49:f4:3e:4c:91:4d:72:71:12:12:
                    af:0f:ee:ac:37:cd:04:a1:be:c6:b1:a6:5c:bb:c4:
                    ae:84:4d:ae:84:fd:52:cc:e0:cd:ee:60:30:b8:d7:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7E:99:EE:95:30:D3:B3:A2:C8:66:A8:64:4B:20:7F:9B:22:E2:91
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313033353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:1035::/80

    Signature Algorithm: sha256WithRSAEncryption
         49:49:b3:7c:df:73:41:37:a4:d3:88:16:84:0c:eb:15:01:07:
         73:7e:a4:77:25:d7:39:63:17:b5:03:1f:5a:54:ae:70:63:5e:
         06:49:76:79:a6:35:83:65:1c:62:ec:09:d6:4e:28:12:ac:1d:
         95:f6:d8:0f:ed:ae:f4:6a:f5:f3:e7:73:c7:67:7a:8b:47:d7:
         70:06:dd:19:ba:ba:4d:2e:86:ae:7b:42:19:60:71:fd:52:2e:
         37:77:36:8b:b1:95:01:51:95:72:81:a5:ac:33:50:dc:ba:24:
         d9:69:7e:ed:1d:53:6b:97:30:4b:0f:cf:8f:b9:c5:ea:3d:a7:
         ee:59:6e:c0:be:c2:7e:e0:a2:8c:ea:6a:02:44:ea:56:da:1e:
         b9:2f:d2:ac:2b:64:cf:92:bc:3c:f8:26:07:43:f9:57:0d:c4:
         a3:ef:ec:d6:2f:1a:2c:60:e5:1f:94:78:cd:8e:00:55:90:91:
         e4:07:b8:86:fe:e2:7d:38:c2:fb:ef:70:32:30:88:d9:89:f2:
         a0:a8:12:94:e7:16:be:83:f5:4c:a0:ad:27:f9:90:48:d5:df:
         aa:08:82:11:f8:a8:04:10:47:08:97:e0:49:1d:81:e9:31:8d:
         36:76:ab:ab:9d:bc:d6:09:0d:94:e5:62:38:f7:ad:52:38:16:
         b1:cd:7f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----