Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3332353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231353a3332353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          2gfhoPOr/SDW2UHP9FAgAU1YLXr5CV+JbM4+9QWhg3A=
Subject key identifier:   B7:47:21:5D:7B:A0:08:93:0B:4C:C8:CE:07:1C:A4:38:99:6B:78:8A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       053166672BB7A185EE07D0BF0D608E28A431E1F5
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3332353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 15 Feb 2022 03:25:02 +0000
ROA not before:           Tue 15 Feb 2022 03:20:02 +0000
ROA not after:            Tue 14 Feb 2023 03:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:215:325::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:31:66:67:2b:b7:a1:85:ee:07:d0:bf:0d:60:8e:28:a4:31:e1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 15 03:20:02 2022 GMT
            Not After : Feb 14 03:25:02 2023 GMT
        Subject: CN=3082010A0282010100C391B0C6B87F508D0709EE4EAA51D16125BEE7D3D6C04AF0B725211D90A360200400AC5F90C6BC39610ED8B5C379417167EEA2BBAC6AFB188497D41FA4ABA80761F62B18D0C415E44CC4685ADA3801A3E3372AB31D51CF787917B44E4EAD182D7FEBD3FE808D270BD126F3F146E57F708DA04D981EBC7E427228057C13AFEBF14A35B065FF00C349FE18BEE550E7149629047BC08BC976AA6996CD18D566FB87F012A5ECFBF9E53BD897AA11F48B5AB7F2E8D35A67A673083619AD9D4759FC4E6668221C3B9ECE7DCA2F76716A070B608BEE1A8DEBF0309433B26F8B002A489CE3F56B904E030AE77DC96E208D6BA4116B8360FD15484EE2E821B45BB947436D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:b0:c6:b8:7f:50:8d:07:09:ee:4e:aa:51:
                    d1:61:25:be:e7:d3:d6:c0:4a:f0:b7:25:21:1d:90:
                    a3:60:20:04:00:ac:5f:90:c6:bc:39:61:0e:d8:b5:
                    c3:79:41:71:67:ee:a2:bb:ac:6a:fb:18:84:97:d4:
                    1f:a4:ab:a8:07:61:f6:2b:18:d0:c4:15:e4:4c:c4:
                    68:5a:da:38:01:a3:e3:37:2a:b3:1d:51:cf:78:79:
                    17:b4:4e:4e:ad:18:2d:7f:eb:d3:fe:80:8d:27:0b:
                    d1:26:f3:f1:46:e5:7f:70:8d:a0:4d:98:1e:bc:7e:
                    42:72:28:05:7c:13:af:eb:f1:4a:35:b0:65:ff:00:
                    c3:49:fe:18:be:e5:50:e7:14:96:29:04:7b:c0:8b:
                    c9:76:aa:69:96:cd:18:d5:66:fb:87:f0:12:a5:ec:
                    fb:f9:e5:3b:d8:97:aa:11:f4:8b:5a:b7:f2:e8:d3:
                    5a:67:a6:73:08:36:19:ad:9d:47:59:fc:4e:66:68:
                    22:1c:3b:9e:ce:7d:ca:2f:76:71:6a:07:0b:60:8b:
                    ee:1a:8d:eb:f0:30:94:33:b2:6f:8b:00:2a:48:9c:
                    e3:f5:6b:90:4e:03:0a:e7:7d:c9:6e:20:8d:6b:a4:
                    11:6b:83:60:fd:15:48:4e:e2:e8:21:b4:5b:b9:47:
                    43:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:47:21:5D:7B:A0:08:93:0B:4C:C8:CE:07:1C:A4:38:99:6B:78:8A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3332353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:215:325::/80

    Signature Algorithm: sha256WithRSAEncryption
         31:17:1a:96:e4:b3:42:38:1b:5c:f8:0a:21:a9:27:9a:73:08:
         48:93:e0:d7:6d:fd:93:e0:8d:c7:53:5a:53:56:b4:87:b7:da:
         63:05:2f:4d:c7:9f:ee:8e:6d:33:24:e7:b0:3e:81:63:8b:56:
         23:5a:6e:c4:bc:0d:51:e2:45:1d:30:de:d9:34:ee:cf:8f:8d:
         65:c6:5a:50:ce:e6:b2:f6:f9:eb:13:f3:86:06:db:7b:2c:2f:
         7b:25:ed:fa:ee:b9:f4:c6:91:1b:22:9f:85:1e:e3:40:69:38:
         6d:83:cc:f9:03:8c:db:2a:84:30:50:dc:37:ef:69:5c:b1:ae:
         84:50:bb:54:4f:a9:94:a9:ff:e7:96:ea:6e:0e:b1:6a:fb:b1:
         05:9a:02:cd:4f:95:f7:68:23:bd:03:9a:8a:73:9c:0c:e7:96:
         e0:04:e6:61:d2:d2:c8:d6:2e:c1:64:e2:29:2b:b1:8e:2b:1c:
         54:6b:1e:e2:f2:93:0c:44:cc:10:1c:9d:cf:a7:be:58:bd:2e:
         fb:9b:77:0d:27:ea:0a:a0:83:d7:16:c5:90:cf:e2:b1:f2:9e:
         c3:01:27:30:50:16:f6:37:2e:8f:f0:05:46:c7:c0:1b:95:58:
         f0:90:e3:fd:de:ca:bd:3c:63:ca:63:bc:e7:a5:b6:ac:09:68:
         bf:2c:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----