Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313835353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a313835353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          27gYYqPnL17bGyQucxy7RcVlkB0tTa4evGbyfULAZAw=
Subject key identifier:   63:28:12:BF:57:30:16:E4:7C:8D:D0:2F:CD:9C:FB:5A:C7:0F:A5:73
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       522D54DFF838B48FBBB1D3E01AF14BE47A5974C4
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313835353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 18:55:02 +0000
ROA not before:           Wed 16 Feb 2022 18:50:02 +0000
ROA not after:            Wed 15 Feb 2023 18:55:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:1855::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2d:54:df:f8:38:b4:8f:bb:b1:d3:e0:1a:f1:4b:e4:7a:59:74:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 18:50:02 2022 GMT
            Not After : Feb 15 18:55:02 2023 GMT
        Subject: CN=3082010A0282010100EB2FA532800684CD59C74330B00FC9E12E97BBBBE73C1C20E525A1B69B41C8B5D15613AA500A5D556C3276723D416EF90EF82E5EFEF1D422B76A0839BC40C779EA5CD7A09FE2D0F52983F3081F577C0A7D8F48F73233C2A2161C8838351DC46F73C75438AEF62ECD2A1CF7C5CC048B238572F665DBF4E49B9E65BDA29CFDC5461BF29820ABD9DB1933F031122406AC07DFB9F95287303FBA83A4DB07C5CD46428C54B48AF898734ED02404091F517B4BC87E6EC111DBE87485AE61246071BEDB0942DF1AB9698B9F1A05388AFB321C8CB2CDF11603AD3C62677B7465311B3E510F382165B3F46C2A32928D96840FF17707D231927796108AE2A5B2DB5267D0FB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2f:a5:32:80:06:84:cd:59:c7:43:30:b0:0f:
                    c9:e1:2e:97:bb:bb:e7:3c:1c:20:e5:25:a1:b6:9b:
                    41:c8:b5:d1:56:13:aa:50:0a:5d:55:6c:32:76:72:
                    3d:41:6e:f9:0e:f8:2e:5e:fe:f1:d4:22:b7:6a:08:
                    39:bc:40:c7:79:ea:5c:d7:a0:9f:e2:d0:f5:29:83:
                    f3:08:1f:57:7c:0a:7d:8f:48:f7:32:33:c2:a2:16:
                    1c:88:38:35:1d:c4:6f:73:c7:54:38:ae:f6:2e:cd:
                    2a:1c:f7:c5:cc:04:8b:23:85:72:f6:65:db:f4:e4:
                    9b:9e:65:bd:a2:9c:fd:c5:46:1b:f2:98:20:ab:d9:
                    db:19:33:f0:31:12:24:06:ac:07:df:b9:f9:52:87:
                    30:3f:ba:83:a4:db:07:c5:cd:46:42:8c:54:b4:8a:
                    f8:98:73:4e:d0:24:04:09:1f:51:7b:4b:c8:7e:6e:
                    c1:11:db:e8:74:85:ae:61:24:60:71:be:db:09:42:
                    df:1a:b9:69:8b:9f:1a:05:38:8a:fb:32:1c:8c:b2:
                    cd:f1:16:03:ad:3c:62:67:7b:74:65:31:1b:3e:51:
                    0f:38:21:65:b3:f4:6c:2a:32:92:8d:96:84:0f:f1:
                    77:07:d2:31:92:77:96:10:8a:e2:a5:b2:db:52:67:
                    d0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:28:12:BF:57:30:16:E4:7C:8D:D0:2F:CD:9C:FB:5A:C7:0F:A5:73
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a313835353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:1855::/80

    Signature Algorithm: sha256WithRSAEncryption
         b4:6b:f7:99:45:b6:23:4c:75:45:e7:75:90:3d:92:c4:b5:ae:
         22:a4:37:23:79:f7:42:2d:f4:ac:34:56:c0:de:a6:98:38:7d:
         3b:e9:a2:cb:a9:57:18:89:37:09:a3:8a:93:5d:4d:9a:26:58:
         4d:0f:ff:bf:3e:56:47:86:bf:4c:ab:2b:74:36:23:f4:cb:57:
         33:0c:cb:52:e2:9e:1b:cf:94:59:86:06:ec:23:d7:fc:d2:56:
         cf:dd:4f:9e:19:aa:8f:03:8d:31:eb:01:b8:d4:9a:69:e7:7e:
         ff:38:d6:73:75:9c:90:07:a4:ef:eb:69:46:53:51:de:92:44:
         47:2a:32:70:be:fc:c2:f9:5e:01:ae:9b:4d:5e:b5:16:67:79:
         7d:da:7d:90:57:df:6f:0f:57:af:44:81:f7:65:80:76:cb:12:
         8b:92:26:16:c6:2d:ce:bc:c3:5b:5c:4b:e1:f9:b8:d5:00:2d:
         6f:ad:5b:6b:6e:9f:cf:f7:eb:fa:c8:55:a1:90:1f:03:37:9f:
         de:1e:c3:ee:15:3c:5b:66:20:f3:2a:e7:f4:89:11:1a:85:a2:
         cb:cb:a4:8e:ff:65:fd:96:bd:e4:95:2a:15:dc:61:9d:8a:5d:
         6f:f1:01:03:c4:46:e0:7b:ac:83:67:93:fd:5e:ac:68:6e:31:
         84:4c:d4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----