Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3134353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a3134353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /9qH1TjVHc9xoOrsSKw2eoiMx14EVLgv/wmevzx47ow=
Subject key identifier:   57:0F:BD:EB:A3:D5:1D:92:34:91:2C:D8:2F:28:93:B4:1B:B3:58:A3
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       71DCF4270861C4722B34E346431FB01C1F9E748D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3134353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 01:45:02 +0000
ROA not before:           Wed 16 Feb 2022 01:40:02 +0000
ROA not after:            Wed 15 Feb 2023 01:45:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:145::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:dc:f4:27:08:61:c4:72:2b:34:e3:46:43:1f:b0:1c:1f:9e:74:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 01:40:02 2022 GMT
            Not After : Feb 15 01:45:02 2023 GMT
        Subject: CN=3082010A0282010100EFE9AF4E84C57343D0D00720E33FB6EDD160F6034B829105E1DB3BA22675E12C02F6F2A1364A44FFC70E012B25B631BEE25FE588211E57AE429A3318663AEC0D063A81746A1433656EDB7B993517181576EE04F2107F219620FCB0F4BF929700DD703257205C01B139F9ACBCEB0E0398AD93AFFED0436931737F4ED1AF63D72F57601FDE5B01D63C1DB8DA632F3A36F31A5F52CF699D998048D729F0CB01F383EF60D432138E84381D58456DA865638B76221489498FB55493C441C0805D0B808292A3D6C345D5E115AB2D4B02A51CCA0920518E41CBAD59098AA6D839D7453A689B969CC2A7932BBA38828C072D640A588B8C46C1D0A1BD326BA1C2F5CC71FF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e9:af:4e:84:c5:73:43:d0:d0:07:20:e3:3f:
                    b6:ed:d1:60:f6:03:4b:82:91:05:e1:db:3b:a2:26:
                    75:e1:2c:02:f6:f2:a1:36:4a:44:ff:c7:0e:01:2b:
                    25:b6:31:be:e2:5f:e5:88:21:1e:57:ae:42:9a:33:
                    18:66:3a:ec:0d:06:3a:81:74:6a:14:33:65:6e:db:
                    7b:99:35:17:18:15:76:ee:04:f2:10:7f:21:96:20:
                    fc:b0:f4:bf:92:97:00:dd:70:32:57:20:5c:01:b1:
                    39:f9:ac:bc:eb:0e:03:98:ad:93:af:fe:d0:43:69:
                    31:73:7f:4e:d1:af:63:d7:2f:57:60:1f:de:5b:01:
                    d6:3c:1d:b8:da:63:2f:3a:36:f3:1a:5f:52:cf:69:
                    9d:99:80:48:d7:29:f0:cb:01:f3:83:ef:60:d4:32:
                    13:8e:84:38:1d:58:45:6d:a8:65:63:8b:76:22:14:
                    89:49:8f:b5:54:93:c4:41:c0:80:5d:0b:80:82:92:
                    a3:d6:c3:45:d5:e1:15:ab:2d:4b:02:a5:1c:ca:09:
                    20:51:8e:41:cb:ad:59:09:8a:a6:d8:39:d7:45:3a:
                    68:9b:96:9c:c2:a7:93:2b:ba:38:82:8c:07:2d:64:
                    0a:58:8b:8c:46:c1:d0:a1:bd:32:6b:a1:c2:f5:cc:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0F:BD:EB:A3:D5:1D:92:34:91:2C:D8:2F:28:93:B4:1B:B3:58:A3
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3134353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:145::/80

    Signature Algorithm: sha256WithRSAEncryption
         1b:a7:cb:a7:7e:49:e6:55:0d:9f:81:82:45:38:db:cd:be:fc:
         12:0b:d0:34:cb:4c:29:96:b9:ea:ae:3d:1a:2b:8a:6f:1d:cf:
         e5:f6:4f:ac:48:93:6f:9c:82:9b:5d:36:68:f7:00:cd:6a:32:
         b2:1c:88:46:f1:26:3e:0d:06:0e:3a:e9:66:a2:cb:21:8d:3b:
         19:16:08:86:9b:de:ec:2b:3d:09:dd:80:88:9c:ff:bb:fc:fc:
         6f:82:ad:1d:78:3d:a9:5c:97:0b:9c:26:91:c8:0a:44:21:eb:
         31:3c:1a:fe:8d:76:f3:30:f4:d8:72:a9:e4:d6:a4:1f:1b:29:
         13:5e:07:fc:c4:a3:e2:8a:0b:bf:f6:15:b8:ef:a9:07:60:f3:
         ef:62:8f:af:7d:07:7c:ca:56:33:51:33:4c:5f:bd:dc:2b:f4:
         54:86:e9:3b:01:09:a2:22:30:1b:24:d7:7a:04:c9:be:78:39:
         2d:4a:d9:be:2a:de:80:53:a0:46:fb:a2:02:cc:74:58:b4:56:
         07:a0:5e:78:70:1e:a9:f4:ba:98:7d:a6:f8:07:d6:85:d0:7e:
         c6:8b:7e:87:e6:84:03:88:bd:07:e3:5f:fc:67:b2:10:ab:d4:
         5b:90:ad:8b:80:22:1e:9c:a5:53:11:de:11:dd:84:b0:4f:76:
         ce:94:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----