Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313332353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a313332353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Zj2p/1P5l8PCdELB8+uIgTzl1FAiWNzlVjgePED61YM=
Subject key identifier:   40:FA:D9:27:1B:7D:56:4B:88:AE:96:F3:31:D3:8C:67:0A:F6:41:62
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       66C99F6FF13AE10ADDC6659E9CF862C8D255B18D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313332353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 13:25:02 +0000
ROA not before:           Sat 12 Feb 2022 13:20:02 +0000
ROA not after:            Sat 11 Feb 2023 13:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:1325::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c9:9f:6f:f1:3a:e1:0a:dd:c6:65:9e:9c:f8:62:c8:d2:55:b1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 13:20:02 2022 GMT
            Not After : Feb 11 13:25:02 2023 GMT
        Subject: CN=3082010A0282010100D12D6A5770F4173DCC1BC85AE5085A181559FA0959C20516477122CF879EFB3A605FE71A692F214429599C4204553344BDDFBD8B35899AEAD63054B06B65489B20B7F7D1486948F7432E4C267F1D179E9C746E584799C9736D053C1F1F1F5B2F052CA727851A2BCE93EE60F651474B6E644395D12F88A026411ADB09D1C17E8BD8C5BACDF183C40E64313374024DC9059C44701D0FFDD76D10B645924FD04222256CD0978F23A0B05B32D1435BD6707663EC48B2C323487203DA030918CBCD9BB1F91D092C2B535445CAF317E386B5DD21DAD44334CA26C6EEACEA1AF57A0B3EE9BFEB7068E89902C8FB8C6958350564BF51CE0B9990745C61C1CB3CCADCF34F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:6a:57:70:f4:17:3d:cc:1b:c8:5a:e5:08:
                    5a:18:15:59:fa:09:59:c2:05:16:47:71:22:cf:87:
                    9e:fb:3a:60:5f:e7:1a:69:2f:21:44:29:59:9c:42:
                    04:55:33:44:bd:df:bd:8b:35:89:9a:ea:d6:30:54:
                    b0:6b:65:48:9b:20:b7:f7:d1:48:69:48:f7:43:2e:
                    4c:26:7f:1d:17:9e:9c:74:6e:58:47:99:c9:73:6d:
                    05:3c:1f:1f:1f:5b:2f:05:2c:a7:27:85:1a:2b:ce:
                    93:ee:60:f6:51:47:4b:6e:64:43:95:d1:2f:88:a0:
                    26:41:1a:db:09:d1:c1:7e:8b:d8:c5:ba:cd:f1:83:
                    c4:0e:64:31:33:74:02:4d:c9:05:9c:44:70:1d:0f:
                    fd:d7:6d:10:b6:45:92:4f:d0:42:22:25:6c:d0:97:
                    8f:23:a0:b0:5b:32:d1:43:5b:d6:70:76:63:ec:48:
                    b2:c3:23:48:72:03:da:03:09:18:cb:cd:9b:b1:f9:
                    1d:09:2c:2b:53:54:45:ca:f3:17:e3:86:b5:dd:21:
                    da:d4:43:34:ca:26:c6:ee:ac:ea:1a:f5:7a:0b:3e:
                    e9:bf:eb:70:68:e8:99:02:c8:fb:8c:69:58:35:05:
                    64:bf:51:ce:0b:99:90:74:5c:61:c1:cb:3c:ca:dc:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FA:D9:27:1B:7D:56:4B:88:AE:96:F3:31:D3:8C:67:0A:F6:41:62
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313332353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:1325::/80

    Signature Algorithm: sha256WithRSAEncryption
         89:91:4e:9a:e7:b8:f2:5a:ea:b9:af:a9:22:e7:df:1f:c2:2d:
         78:fc:d3:cf:ec:df:62:99:ea:11:ef:b5:25:89:07:d7:de:0a:
         7c:bf:5d:72:7f:b5:81:df:c9:5b:9a:04:69:0f:8d:57:f3:0a:
         71:48:66:e4:f0:49:3b:6a:9d:31:6c:44:3e:9a:b3:ca:09:72:
         d4:47:20:b9:ce:d8:20:ba:b0:5c:d0:bc:05:95:73:d8:46:2c:
         f9:d8:f6:f1:46:d0:dc:c6:44:d1:8c:6f:00:2b:73:44:01:90:
         e5:24:27:01:b2:e3:b3:84:aa:6e:d5:6f:04:0b:11:aa:d6:85:
         6b:41:b5:32:af:cc:68:2c:11:7f:68:a2:c1:ee:06:66:08:91:
         f7:e2:32:8d:12:f0:bf:4e:81:a0:5e:60:19:d7:89:ab:ae:6d:
         82:a4:b8:e3:c9:c9:06:27:26:55:d3:2e:47:2e:bd:4a:d3:fe:
         fd:ab:bd:db:de:8d:01:e5:41:0f:98:17:b4:b4:0b:6b:00:3b:
         1a:f2:f2:3a:5f:70:a9:78:da:da:9e:bf:e7:7b:77:0f:37:71:
         5e:0d:68:2d:60:7b:8a:c9:94:ce:b1:09:33:7c:57:8b:76:39:
         74:9a:4a:2a:ea:e9:05:67:d2:c0:e1:eb:39:53:53:dd:d0:43:
         ea:18:9c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----