Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313232303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a313232303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          VM2NYbqlVhWwBEk9vd0m7sDFvhgyJar8LO8vR8+lKnY=
Subject key identifier:   85:CD:B1:C3:B0:05:03:FF:A9:0B:D0:11:C0:16:8E:7F:30:F3:4A:77
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       78D86A5A3529BD0440E05FEB677B9BCFA5374CE1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313232303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 12:20:01 +0000
ROA not before:           Fri 11 Feb 2022 12:15:01 +0000
ROA not after:            Fri 10 Feb 2023 12:20:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:1220::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d8:6a:5a:35:29:bd:04:40:e0:5f:eb:67:7b:9b:cf:a5:37:4c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 12:15:01 2022 GMT
            Not After : Feb 10 12:20:01 2023 GMT
        Subject: CN=3082010A0282010100D0663A4DB9F04CB1193DDCD6E0B9752DC96344F9010F2B77A59240C2B2C5D053FE8EDB368795D948E248AEDFE0585F44D3735D4EA3C0E829289C315F8B7B204F47B36807B13A4A0AE6E8B203CA8DB645F33A145F69D1BEDA6D3B612223F48193D31AE234F3D4B1F33AAD6C4207CE64DA8233A0E51974A5B403E8F0217A4BE9C260C3E7CE584DA8886BDAC4B99EDC5FA7E66B3F3B053D1C842B6C434CF1A83F2A7F6E6FB475E4B69632420CCBCC34FE48BC249641A9C466D713FAB991DD2C32763AB6188A539F4FC2B0434F9D466A5B294D3624E7BC6483764DEC062DE7EBC3F5DE610A7D521C62A325DC1FBDE5345A9A5A44DA74B7A0696F51CD2C77E05047070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:3a:4d:b9:f0:4c:b1:19:3d:dc:d6:e0:b9:
                    75:2d:c9:63:44:f9:01:0f:2b:77:a5:92:40:c2:b2:
                    c5:d0:53:fe:8e:db:36:87:95:d9:48:e2:48:ae:df:
                    e0:58:5f:44:d3:73:5d:4e:a3:c0:e8:29:28:9c:31:
                    5f:8b:7b:20:4f:47:b3:68:07:b1:3a:4a:0a:e6:e8:
                    b2:03:ca:8d:b6:45:f3:3a:14:5f:69:d1:be:da:6d:
                    3b:61:22:23:f4:81:93:d3:1a:e2:34:f3:d4:b1:f3:
                    3a:ad:6c:42:07:ce:64:da:82:33:a0:e5:19:74:a5:
                    b4:03:e8:f0:21:7a:4b:e9:c2:60:c3:e7:ce:58:4d:
                    a8:88:6b:da:c4:b9:9e:dc:5f:a7:e6:6b:3f:3b:05:
                    3d:1c:84:2b:6c:43:4c:f1:a8:3f:2a:7f:6e:6f:b4:
                    75:e4:b6:96:32:42:0c:cb:cc:34:fe:48:bc:24:96:
                    41:a9:c4:66:d7:13:fa:b9:91:dd:2c:32:76:3a:b6:
                    18:8a:53:9f:4f:c2:b0:43:4f:9d:46:6a:5b:29:4d:
                    36:24:e7:bc:64:83:76:4d:ec:06:2d:e7:eb:c3:f5:
                    de:61:0a:7d:52:1c:62:a3:25:dc:1f:bd:e5:34:5a:
                    9a:5a:44:da:74:b7:a0:69:6f:51:cd:2c:77:e0:50:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CD:B1:C3:B0:05:03:FF:A9:0B:D0:11:C0:16:8E:7F:30:F3:4A:77
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313232303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:1220::/80

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:55:f8:ad:a7:ee:22:d2:f7:3a:91:ff:1c:d5:28:be:af:
         ee:98:fe:ff:29:d7:d7:23:5f:a7:0e:79:35:3f:e1:8c:f8:e4:
         fa:b3:51:44:89:74:87:33:6c:c8:21:fb:db:b2:ce:d3:e1:ca:
         9b:13:a5:62:c8:42:88:08:bb:19:73:89:39:ff:40:b5:d7:15:
         6f:ef:ef:d1:53:3c:80:54:27:1f:29:cd:ec:b3:55:57:b7:c1:
         8d:7a:d3:09:23:fc:45:fc:44:75:d4:f2:2d:db:8e:24:01:23:
         83:c1:a0:83:3b:2a:1c:15:0b:6c:33:e6:b4:0a:2b:a3:74:0e:
         f0:15:30:89:bc:14:48:59:b9:14:ef:6a:8c:34:9e:b3:8d:5f:
         37:fa:25:e3:ad:3d:27:7a:f1:03:fa:6d:f0:e3:89:aa:51:09:
         4e:50:00:38:f3:c2:3f:6a:8a:28:a6:c7:bc:4c:03:15:f8:98:
         33:7c:46:24:e5:83:c7:9d:9a:29:62:7c:d2:ee:21:50:86:b1:
         4f:3a:a0:92:4a:bd:26:21:8f:91:b0:b4:c6:ef:d3:a8:33:99:
         6d:2f:22:be:e2:bb:ad:23:e7:11:65:7b:b1:19:e0:e5:61:0b:
         68:c1:f1:86:30:43:b2:48:8d:65:86:c7:11:ad:af:66:c5:98:
         89:04:59:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----