Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313935353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231303a313935353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          OanjabBQ7m5gd06kRCI+Qs7xfsXVJccawH889ClZQH8=
Subject key identifier:   FB:1F:81:AD:83:02:BA:8E:07:4D:EF:C4:83:1D:31:22:D4:67:E3:0E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       28C753EBDB7B635D02CD710EDF94691E369E3107
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313935353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 10 Feb 2022 19:55:01 +0000
ROA not before:           Thu 10 Feb 2022 19:50:01 +0000
ROA not after:            Thu 09 Feb 2023 19:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:210:1955::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c7:53:eb:db:7b:63:5d:02:cd:71:0e:df:94:69:1e:36:9e:31:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 10 19:50:01 2022 GMT
            Not After : Feb  9 19:55:01 2023 GMT
        Subject: CN=3082010A0282010100A16BCA5B25ED31C6DA12098DC93FC537F9397E48F766EFB0C85FBB3C1CD1FA06780F3876DD08A8A239575236BEFEB30A8DCA8E2A84444DB958FC1206957F3B986C03157A57DEB286B93E955C1D77D011C9FC6EB319FE53940EAC70B10E6B03B15CB3E68FAD274623CEEAD17776E052D0500DBD8F15FF530B8E66B36B5B962C1F692E481EDD69211B18FB500695BD34B761827602BC5B0B5A69F25F8A36315AEFCDF796187B47BD5ADDA9793B64B4B643D915AA515108596E6B7869F4B6A69A3785789CB400C86E4F31D105B2413B51EA23D1F9102D6DEF903484FAB447F2EF02042A827AAC36F37CB8568A9B8D398B4CC480FC6B054EF178D08F80E1184CDEED0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6b:ca:5b:25:ed:31:c6:da:12:09:8d:c9:3f:
                    c5:37:f9:39:7e:48:f7:66:ef:b0:c8:5f:bb:3c:1c:
                    d1:fa:06:78:0f:38:76:dd:08:a8:a2:39:57:52:36:
                    be:fe:b3:0a:8d:ca:8e:2a:84:44:4d:b9:58:fc:12:
                    06:95:7f:3b:98:6c:03:15:7a:57:de:b2:86:b9:3e:
                    95:5c:1d:77:d0:11:c9:fc:6e:b3:19:fe:53:94:0e:
                    ac:70:b1:0e:6b:03:b1:5c:b3:e6:8f:ad:27:46:23:
                    ce:ea:d1:77:76:e0:52:d0:50:0d:bd:8f:15:ff:53:
                    0b:8e:66:b3:6b:5b:96:2c:1f:69:2e:48:1e:dd:69:
                    21:1b:18:fb:50:06:95:bd:34:b7:61:82:76:02:bc:
                    5b:0b:5a:69:f2:5f:8a:36:31:5a:ef:cd:f7:96:18:
                    7b:47:bd:5a:dd:a9:79:3b:64:b4:b6:43:d9:15:aa:
                    51:51:08:59:6e:6b:78:69:f4:b6:a6:9a:37:85:78:
                    9c:b4:00:c8:6e:4f:31:d1:05:b2:41:3b:51:ea:23:
                    d1:f9:10:2d:6d:ef:90:34:84:fa:b4:47:f2:ef:02:
                    04:2a:82:7a:ac:36:f3:7c:b8:56:8a:9b:8d:39:8b:
                    4c:c4:80:fc:6b:05:4e:f1:78:d0:8f:80:e1:18:4c:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1F:81:AD:83:02:BA:8E:07:4D:EF:C4:83:1D:31:22:D4:67:E3:0E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231303a313935353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:210:1955::/80

    Signature Algorithm: sha256WithRSAEncryption
         da:f0:31:5c:98:a0:55:4a:2a:4c:1e:a9:ce:a8:f1:23:91:aa:
         32:2d:ee:6f:34:b0:be:0d:a0:82:97:d2:7a:e8:08:50:b3:e4:
         fc:7c:ec:f9:d6:eb:1c:30:6e:34:dd:35:72:a0:ba:dc:f1:78:
         6a:b2:7b:93:6b:54:07:ed:b7:11:a5:e9:46:bf:dd:72:63:4e:
         e8:be:4b:3f:09:72:ad:e3:5a:39:4d:9a:9b:db:03:2a:18:e7:
         6e:86:66:9a:c5:0d:5a:df:d2:d3:2a:38:91:42:fe:ca:e5:22:
         97:af:2b:77:e8:18:87:93:15:71:bc:b6:8a:8e:7a:38:81:17:
         a5:62:ad:2e:dd:7a:c6:06:88:9c:7b:db:31:fa:87:c8:88:c2:
         c3:ce:c0:aa:dc:c3:97:38:ee:f6:fb:93:af:fb:83:99:ac:b2:
         40:5c:d6:6a:a6:eb:6a:36:89:f4:62:b0:db:f6:15:3c:31:e0:
         28:f1:b3:de:96:9c:66:89:49:89:b3:c5:92:42:05:97:ff:9c:
         8b:66:d5:31:34:33:1c:0e:ec:2a:81:7e:28:44:4d:43:a2:02:
         ff:fb:2c:0a:e5:e2:17:26:f9:12:01:08:28:3a:e7:e5:70:64:
         7a:81:9c:23:4a:9b:6c:95:60:5b:68:2e:45:e7:c0:f5:06:79:
         c8:f4:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----