Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a323335353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a323335353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          3zQx2eyCzsfacqLD8aDVja11EX4Q0UjCf5g2W1fn2xc=
Subject key identifier:   AA:9A:FB:55:F2:38:9B:65:F6:7B:B8:25:41:EF:F9:DB:CF:66:DB:70
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       07D5131AAEC1DBDEFD63679D1AE9302B93850D8C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a323335353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 23:55:01 +0000
ROA not before:           Wed 16 Feb 2022 23:50:01 +0000
ROA not after:            Wed 15 Feb 2023 23:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:2355::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d5:13:1a:ae:c1:db:de:fd:63:67:9d:1a:e9:30:2b:93:85:0d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 23:50:01 2022 GMT
            Not After : Feb 15 23:55:01 2023 GMT
        Subject: CN=3082010A0282010100DF7B18E84F1A9B3C6CCECD8992CDE60A905FC7940E419C73DF790552B5FDB484554932B8D52BC890C696968FF9D72EE1BBD4FCA499B897C82AB947B56FF83353686ADA51AF3AB21761B16DE65C28C4E3F4F348D78F4448E2144617669783173B8BE79222809C0AB11016DCCA413B3EF53606C87DBC4ACE7746F247F3DCB3694701FCC542B0116730205E2307F224399CD744BAB1D80EEEB6279698514465D1B5CB8469D0C4B93DFC254278BF6EB38636FE7EFD171FE12F56C93C7E65973AABDF1923B4D9D1473BD7E9F59CA04A0DF5516B8DA663C74680E8B7C09BD054684DD9B36E17538F0F11E9C557DD633B4BB5E888C653CCCED27A09FEC6C85CEF31DE8F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7b:18:e8:4f:1a:9b:3c:6c:ce:cd:89:92:cd:
                    e6:0a:90:5f:c7:94:0e:41:9c:73:df:79:05:52:b5:
                    fd:b4:84:55:49:32:b8:d5:2b:c8:90:c6:96:96:8f:
                    f9:d7:2e:e1:bb:d4:fc:a4:99:b8:97:c8:2a:b9:47:
                    b5:6f:f8:33:53:68:6a:da:51:af:3a:b2:17:61:b1:
                    6d:e6:5c:28:c4:e3:f4:f3:48:d7:8f:44:48:e2:14:
                    46:17:66:97:83:17:3b:8b:e7:92:22:80:9c:0a:b1:
                    10:16:dc:ca:41:3b:3e:f5:36:06:c8:7d:bc:4a:ce:
                    77:46:f2:47:f3:dc:b3:69:47:01:fc:c5:42:b0:11:
                    67:30:20:5e:23:07:f2:24:39:9c:d7:44:ba:b1:d8:
                    0e:ee:b6:27:96:98:51:44:65:d1:b5:cb:84:69:d0:
                    c4:b9:3d:fc:25:42:78:bf:6e:b3:86:36:fe:7e:fd:
                    17:1f:e1:2f:56:c9:3c:7e:65:97:3a:ab:df:19:23:
                    b4:d9:d1:47:3b:d7:e9:f5:9c:a0:4a:0d:f5:51:6b:
                    8d:a6:63:c7:46:80:e8:b7:c0:9b:d0:54:68:4d:d9:
                    b3:6e:17:53:8f:0f:11:e9:c5:57:dd:63:3b:4b:b5:
                    e8:88:c6:53:cc:ce:d2:7a:09:fe:c6:c8:5c:ef:31:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9A:FB:55:F2:38:9B:65:F6:7B:B8:25:41:EF:F9:DB:CF:66:DB:70
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a323335353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:2355::/80

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:f9:f8:ff:98:3e:63:c2:ec:62:67:dc:a0:dd:91:0c:9a:
         34:dc:2f:f2:a8:4f:18:a9:90:05:2c:f9:29:7d:02:a1:cc:36:
         4c:f1:99:83:f3:ba:80:19:18:b0:51:f7:17:4e:77:64:c5:75:
         57:fb:b1:ec:15:1c:91:fa:48:a9:69:de:63:f3:f9:8c:a0:36:
         2a:d8:a6:e5:5d:99:b9:37:9b:d3:c2:9f:a3:08:92:7d:39:d9:
         0a:21:d0:6d:83:13:bb:b2:c8:af:cc:59:f0:48:d0:41:e4:1f:
         db:d2:41:54:9d:07:bc:41:af:1c:50:44:9e:d2:d4:12:5f:55:
         25:2c:d7:11:04:bb:64:7a:0f:fc:bc:c2:17:7c:4e:1b:79:d3:
         b8:3c:01:2d:2f:60:f3:79:55:06:3d:97:12:c7:a1:6c:ab:c5:
         4c:62:12:29:1f:f4:92:6f:84:ce:51:b7:15:c2:32:97:94:d2:
         7c:66:ff:da:3f:84:8d:bd:67:18:0f:59:d7:82:1a:28:b1:9b:
         96:20:32:26:6e:ef:f0:99:0c:2e:a2:39:f2:49:08:38:1a:d5:
         7b:ba:97:f7:c7:ac:39:87:c6:7b:44:06:0c:f3:ac:3d:f8:b7:
         07:a5:fb:64:5a:5b:d4:d6:b4:47:d5:f0:9c:fb:e6:34:ac:9e:
         2f:0b:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----