Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313431353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a313431353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          n1JKR5HKRHVlSDx08t7yhy2FUqdWarq4Axr2Z30nZ/g=
Subject key identifier:   52:92:54:18:A8:B6:09:F2:8D:2E:91:14:A5:3E:25:9B:8D:5A:F0:2F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       22AE0DBA128557166D5289ABEB54C91FA7387930
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313431353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 14:15:01 +0000
ROA not before:           Fri 11 Feb 2022 14:10:01 +0000
ROA not after:            Fri 10 Feb 2023 14:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:1415::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ae:0d:ba:12:85:57:16:6d:52:89:ab:eb:54:c9:1f:a7:38:79:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 14:10:01 2022 GMT
            Not After : Feb 10 14:15:01 2023 GMT
        Subject: CN=3082010A0282010100C155DAC444518F5BC1CCE8F8F35E7137A1206C8CEF3C798B2C7A05C81542CDC9ED31BEE06002B4B528F2612FF321404D7989D046006426D241C8FF0090B075A937D98FA7D89FBCAE6A2AF465428C923579CCD06D97F9D1104BB8DE05E55CDF5B87A49824D9642CE09ECE3224A143D27F529BCA2F12B6F742C3834E7B940676848A9A1246BBF07C197A30B9FDFA618E016A174446121FF6D5562F5AC776FD3CB079FA93D5F201ADE5AD62CB447D1BE23E8BD28CAEF33AFEEFF7F65A09E0613D6267DDD7F5802E39B31391AC04FF76BDBA57EF293C54FF641014961479450E530C94DE6458DFA0D8454B05469572D83BF48805EA26769675806A252B87109B7B2D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:da:c4:44:51:8f:5b:c1:cc:e8:f8:f3:5e:
                    71:37:a1:20:6c:8c:ef:3c:79:8b:2c:7a:05:c8:15:
                    42:cd:c9:ed:31:be:e0:60:02:b4:b5:28:f2:61:2f:
                    f3:21:40:4d:79:89:d0:46:00:64:26:d2:41:c8:ff:
                    00:90:b0:75:a9:37:d9:8f:a7:d8:9f:bc:ae:6a:2a:
                    f4:65:42:8c:92:35:79:cc:d0:6d:97:f9:d1:10:4b:
                    b8:de:05:e5:5c:df:5b:87:a4:98:24:d9:64:2c:e0:
                    9e:ce:32:24:a1:43:d2:7f:52:9b:ca:2f:12:b6:f7:
                    42:c3:83:4e:7b:94:06:76:84:8a:9a:12:46:bb:f0:
                    7c:19:7a:30:b9:fd:fa:61:8e:01:6a:17:44:46:12:
                    1f:f6:d5:56:2f:5a:c7:76:fd:3c:b0:79:fa:93:d5:
                    f2:01:ad:e5:ad:62:cb:44:7d:1b:e2:3e:8b:d2:8c:
                    ae:f3:3a:fe:ef:f7:f6:5a:09:e0:61:3d:62:67:dd:
                    d7:f5:80:2e:39:b3:13:91:ac:04:ff:76:bd:ba:57:
                    ef:29:3c:54:ff:64:10:14:96:14:79:45:0e:53:0c:
                    94:de:64:58:df:a0:d8:45:4b:05:46:95:72:d8:3b:
                    f4:88:05:ea:26:76:96:75:80:6a:25:2b:87:10:9b:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:92:54:18:A8:B6:09:F2:8D:2E:91:14:A5:3E:25:9B:8D:5A:F0:2F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313431353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:1415::/80

    Signature Algorithm: sha256WithRSAEncryption
         8b:39:07:fc:93:5b:13:c0:6b:97:e6:e5:b1:15:7f:11:26:06:
         6a:dd:c5:60:23:93:0b:da:b2:55:35:cd:91:5f:6a:33:a7:c1:
         1a:1e:e0:d1:3d:b8:43:30:0b:15:98:58:41:b3:03:75:b8:5c:
         70:90:d3:20:02:ab:94:95:aa:f0:7b:e0:ec:8f:2e:4c:df:0f:
         61:b6:e8:6c:4a:e2:9e:bc:24:46:d5:53:72:65:c9:ad:3b:8a:
         d9:32:42:4a:99:6d:cd:49:2b:99:0f:3e:d7:31:ef:12:10:7c:
         46:2a:1c:64:c8:5d:ce:a4:71:05:61:73:8f:b1:7c:53:f0:6c:
         12:6f:82:64:17:be:a2:33:84:99:a2:68:64:8e:94:a5:57:e3:
         81:1c:6a:9f:f5:3a:d6:39:10:42:ec:c2:1b:33:52:6f:89:c1:
         71:bb:e8:5d:70:cc:eb:77:8e:f7:73:64:67:ad:58:d3:93:c7:
         98:62:64:90:63:e4:a2:05:9a:a3:6c:ff:eb:e0:ab:00:13:71:
         2f:8d:2b:a3:72:a8:d9:a2:c1:ba:cd:90:5f:8c:af:ec:78:b6:
         0d:0c:66:fe:89:8e:1f:81:6b:f2:45:34:87:92:fd:2c:18:62:
         1e:fb:8d:64:3d:ee:e2:ae:b0:21:90:e2:cf:43:5f:c8:48:bd:
         af:c9:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----