Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313930353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230383a313930353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          5+eZHpRPuPYeexBwYe9KLEK4hYou27MOQCSO8+8Hey0=
Subject key identifier:   6F:5A:1E:64:9A:34:EC:D4:CD:43:4F:D1:89:9A:6D:17:91:A3:88:CC
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       29CF8EE0EE8F7695C5F096D8B7088076A535F6EF
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313930353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 08 Feb 2022 19:05:01 +0000
ROA not before:           Tue 08 Feb 2022 19:00:01 +0000
ROA not after:            Tue 07 Feb 2023 19:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:208:1905::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cf:8e:e0:ee:8f:76:95:c5:f0:96:d8:b7:08:80:76:a5:35:f6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  8 19:00:01 2022 GMT
            Not After : Feb  7 19:05:01 2023 GMT
        Subject: CN=3082010A0282010100B07E93F6BBBD7D4189741D5A10D4078F1D467316859C6A66B46821B5901EF3D726AABDAC027BFF86A7DBE83B6BC9DDBCF9E602CB612A4D77C7DCFC91DCF6BED558FFF3B3C520E353CA2BC9C079C549D518A1B1639AC30C442856F5B96858437DB05B0A5DFE9E4569DAAFA8A0203AE464877FBB218293DF412469665E77DEF223E2B6455F27E86F51822ED3AF3FACB78A620B9B177F78D52C10EE1224630CAD4F8AD3CC9E392A53271D529F56944360D5BA20F0D16199314386547A42674AF02E4E0AA5C628349F0B58E7D211BA8EE74B74E0162B7A6AF78391BB276B5E85A359E99C7D313BAC9023B1C45162FAE8BAF9FF7170FC00DC0953249DD234412284330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:93:f6:bb:bd:7d:41:89:74:1d:5a:10:d4:
                    07:8f:1d:46:73:16:85:9c:6a:66:b4:68:21:b5:90:
                    1e:f3:d7:26:aa:bd:ac:02:7b:ff:86:a7:db:e8:3b:
                    6b:c9:dd:bc:f9:e6:02:cb:61:2a:4d:77:c7:dc:fc:
                    91:dc:f6:be:d5:58:ff:f3:b3:c5:20:e3:53:ca:2b:
                    c9:c0:79:c5:49:d5:18:a1:b1:63:9a:c3:0c:44:28:
                    56:f5:b9:68:58:43:7d:b0:5b:0a:5d:fe:9e:45:69:
                    da:af:a8:a0:20:3a:e4:64:87:7f:bb:21:82:93:df:
                    41:24:69:66:5e:77:de:f2:23:e2:b6:45:5f:27:e8:
                    6f:51:82:2e:d3:af:3f:ac:b7:8a:62:0b:9b:17:7f:
                    78:d5:2c:10:ee:12:24:63:0c:ad:4f:8a:d3:cc:9e:
                    39:2a:53:27:1d:52:9f:56:94:43:60:d5:ba:20:f0:
                    d1:61:99:31:43:86:54:7a:42:67:4a:f0:2e:4e:0a:
                    a5:c6:28:34:9f:0b:58:e7:d2:11:ba:8e:e7:4b:74:
                    e0:16:2b:7a:6a:f7:83:91:bb:27:6b:5e:85:a3:59:
                    e9:9c:7d:31:3b:ac:90:23:b1:c4:51:62:fa:e8:ba:
                    f9:ff:71:70:fc:00:dc:09:53:24:9d:d2:34:41:22:
                    84:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5A:1E:64:9A:34:EC:D4:CD:43:4F:D1:89:9A:6D:17:91:A3:88:CC
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313930353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:208:1905::/80

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:ca:25:cf:88:cf:18:39:d3:25:78:1b:99:06:7b:5e:eb:
         6a:83:c3:12:83:ea:13:2a:e1:04:44:df:d0:45:1b:e6:c4:bb:
         ea:2a:fb:9f:ca:2d:1c:38:81:3d:b6:62:a9:bd:d7:09:c4:e9:
         ec:8e:17:91:91:c6:4f:9f:03:09:53:a7:1f:74:08:1f:0d:86:
         3b:b9:07:c9:81:b8:8e:83:ec:ef:8c:75:1f:34:e9:76:1a:93:
         dc:f3:62:96:40:d2:f2:4b:2e:81:5b:c0:b4:76:66:dd:8f:d4:
         64:92:41:39:f5:23:99:0d:ac:6a:16:41:fb:cd:cf:1f:31:a1:
         71:eb:21:46:d8:6e:4b:7a:9d:86:73:33:5e:34:a2:46:f4:23:
         39:c4:71:1a:aa:f7:e5:b1:f3:3d:df:5c:6d:67:65:c5:c5:a2:
         22:0e:29:22:87:3f:00:e5:91:5d:97:ae:9c:c6:b3:e2:d7:ff:
         41:0d:f4:dd:fe:51:76:66:b4:a2:a8:ad:7e:79:b9:61:55:bd:
         1f:d7:c6:60:3c:98:d9:58:43:e0:54:1c:d8:81:f1:7d:72:5a:
         fe:52:05:8c:69:db:a7:4f:d6:28:fe:32:80:23:3b:e8:47:da:
         1e:7d:72:38:ab:83:1b:77:a4:31:14:65:62:39:34:2e:71:b7:
         59:6f:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----