Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313635303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231343a313635303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          KLDuYWaCBjGnJEdXoVZOB06oRTNuVQTKUlVk+wgKoxk=
Subject key identifier:   53:91:50:6F:6A:A0:87:25:12:82:E1:0F:E3:0A:4E:45:25:7D:DD:B5
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       75398CA7D38A589B2999C1854FAEEC96C08E965D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313635303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 14 Feb 2022 16:50:02 +0000
ROA not before:           Mon 14 Feb 2022 16:45:02 +0000
ROA not after:            Mon 13 Feb 2023 16:50:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:214:1650::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:39:8c:a7:d3:8a:58:9b:29:99:c1:85:4f:ae:ec:96:c0:8e:96:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 14 16:45:02 2022 GMT
            Not After : Feb 13 16:50:02 2023 GMT
        Subject: CN=3082010A0282010100AF3E54E510DB1AF997E1689E297685E8494BFD4546FF1559F0EC06326D3C9BBDE3E3DE99E5B99F02131E90B9CBEBDC81B03713533778DA7AE27722BCA4E42B0536F133B7BCB22C322318454D03F30D7B7E170B4FFE5115FAB5283CC34FBA8FF2B32BDA5996B43E9DB7F219141B560D27D609150DC640EE56BC44FD15039E4DB285E215B43493727D013F3216E19F12D0D8621D2C179F11EC6C798FE0B8C2B49FA700851D0A11C80912726A0DE8BD82A068F8276E946A3660A96EB25865D5EC48744349507371E11BDF59FD5AF8BE2AA327E44B40B526EC29D6C16954729056AC5167FF63CB7D227BC62F96D208836B55DB0000E51C2F3FB5682BB0B1037378DB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:54:e5:10:db:1a:f9:97:e1:68:9e:29:76:
                    85:e8:49:4b:fd:45:46:ff:15:59:f0:ec:06:32:6d:
                    3c:9b:bd:e3:e3:de:99:e5:b9:9f:02:13:1e:90:b9:
                    cb:eb:dc:81:b0:37:13:53:37:78:da:7a:e2:77:22:
                    bc:a4:e4:2b:05:36:f1:33:b7:bc:b2:2c:32:23:18:
                    45:4d:03:f3:0d:7b:7e:17:0b:4f:fe:51:15:fa:b5:
                    28:3c:c3:4f:ba:8f:f2:b3:2b:da:59:96:b4:3e:9d:
                    b7:f2:19:14:1b:56:0d:27:d6:09:15:0d:c6:40:ee:
                    56:bc:44:fd:15:03:9e:4d:b2:85:e2:15:b4:34:93:
                    72:7d:01:3f:32:16:e1:9f:12:d0:d8:62:1d:2c:17:
                    9f:11:ec:6c:79:8f:e0:b8:c2:b4:9f:a7:00:85:1d:
                    0a:11:c8:09:12:72:6a:0d:e8:bd:82:a0:68:f8:27:
                    6e:94:6a:36:60:a9:6e:b2:58:65:d5:ec:48:74:43:
                    49:50:73:71:e1:1b:df:59:fd:5a:f8:be:2a:a3:27:
                    e4:4b:40:b5:26:ec:29:d6:c1:69:54:72:90:56:ac:
                    51:67:ff:63:cb:7d:22:7b:c6:2f:96:d2:08:83:6b:
                    55:db:00:00:e5:1c:2f:3f:b5:68:2b:b0:b1:03:73:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:91:50:6F:6A:A0:87:25:12:82:E1:0F:E3:0A:4E:45:25:7D:DD:B5
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231343a313635303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:214:1650::/80

    Signature Algorithm: sha256WithRSAEncryption
         12:49:39:38:4d:71:79:06:b2:b9:3c:d8:29:08:bb:ed:5e:f2:
         67:c0:f3:f9:7a:dd:5d:bd:fd:85:83:c4:6e:41:97:b3:03:06:
         dd:5c:f0:7b:68:0c:a7:86:d7:af:6a:8f:b2:01:40:a6:d3:4f:
         32:c0:2f:c4:be:ba:7c:4e:83:70:40:0c:9d:75:40:0c:36:12:
         c2:79:8b:41:e3:ad:5d:33:50:ed:8b:a7:f3:a0:3a:36:1f:d9:
         0f:5d:ee:48:06:a4:e6:b1:24:fd:0f:ea:aa:ed:54:bb:55:b4:
         e6:02:6b:37:f5:24:59:4b:cb:57:bf:12:eb:39:e2:b6:25:02:
         73:d8:a5:ba:68:09:52:ae:b8:19:0e:cd:3a:7d:fb:9e:21:7d:
         cc:87:06:f4:95:43:55:e7:14:43:c8:34:44:c9:1a:0a:ac:45:
         70:e3:18:e6:07:a6:e8:a9:6b:96:e1:57:46:40:16:bb:d1:2e:
         e0:ff:fa:a9:57:c6:77:72:a9:b6:4d:db:08:6b:c9:a7:44:81:
         85:b0:e5:af:70:e7:9f:4f:a5:5e:04:6f:fe:09:4d:c6:ed:39:
         f4:1b:b5:53:d5:73:6a:a5:b4:e4:e1:19:f1:7b:ee:1c:fa:2b:
         a7:27:d2:0f:9a:ca:57:20:d0:b2:31:ea:5b:c9:5c:eb:37:70:
         66:f3:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----