Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a323231303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a323231303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          8k6FkK9xYDbuGpez5DVV7/MQb34f2C7pp8i/+0rzRWQ=
Subject key identifier:   FE:8D:51:D5:B9:41:68:F6:B7:B4:E5:58:B4:2D:5E:16:3F:A9:52:DC
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       36AB164D03896ED040C78AC7A8321283BBD2A286
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a323231303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 22:10:02 +0000
ROA not before:           Thu 17 Feb 2022 22:05:02 +0000
ROA not after:            Thu 16 Feb 2023 22:10:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:2210::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ab:16:4d:03:89:6e:d0:40:c7:8a:c7:a8:32:12:83:bb:d2:a2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 22:05:02 2022 GMT
            Not After : Feb 16 22:10:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:64:a0:d3:8e:fc:19:cc:6e:25:fd:63:b0:
                    3e:cf:31:ac:fa:7b:45:98:86:df:20:5b:ab:52:4d:
                    09:70:fa:ed:16:10:5e:5d:fa:4e:2c:37:9e:fa:51:
                    0b:d9:0e:48:46:6d:8f:c0:6a:f6:74:73:df:0b:94:
                    80:da:fd:94:c4:61:1a:35:c6:03:fa:49:55:c9:e5:
                    4d:fb:b0:30:3d:4b:af:1a:73:3a:57:15:98:7f:a1:
                    61:13:10:69:db:43:8a:5c:de:77:dd:dc:a8:88:64:
                    2c:75:5e:29:23:5c:6f:51:93:21:fb:5e:79:cd:b5:
                    b9:5e:08:eb:25:51:e7:f8:d2:16:9b:3b:3f:b4:69:
                    33:8e:a9:70:9a:54:79:e2:9d:25:ae:e9:66:75:a8:
                    f5:36:33:33:b7:13:25:58:a4:1c:22:31:ab:83:8f:
                    c1:e8:72:06:c1:2b:ef:1d:d1:e1:e7:19:13:d5:7a:
                    2e:db:d5:b6:de:d1:51:03:fe:64:a5:da:5d:02:6f:
                    2c:2f:68:00:b4:c3:0e:f3:08:b3:77:31:1b:d4:1d:
                    d8:d6:96:f6:a5:7a:2a:cc:aa:88:87:aa:7f:ab:a4:
                    f3:7e:f7:8b:ee:b3:83:40:8c:1e:8f:b5:8e:f4:c8:
                    63:04:bb:c5:92:d7:0c:2c:c9:bf:3e:77:e4:77:e7:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:51:D5:B9:41:68:F6:B7:B4:E5:58:B4:2D:5E:16:3F:A9:52:DC
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a323231303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:2210::/80

    Signature Algorithm: sha256WithRSAEncryption
         b3:69:9b:66:40:57:45:dd:4f:c4:49:70:5d:a2:f7:a2:ca:c0:
         37:b6:a9:e4:42:ea:4b:c2:ce:61:6f:36:fb:11:8b:80:4c:bc:
         5b:30:cc:71:e9:8e:50:e6:21:a4:b8:37:38:92:22:8f:c9:72:
         72:45:81:2a:ca:38:45:b1:3d:07:15:91:8a:8a:15:c6:3e:f3:
         52:df:ef:99:3c:e7:aa:44:ad:86:7b:8d:58:59:f1:45:66:53:
         46:15:df:1b:f6:f6:0d:3c:24:b4:d5:f7:83:f4:a1:16:87:11:
         ad:c5:0a:57:5b:79:ad:49:4f:23:ba:74:7d:be:13:6e:a5:f1:
         3d:0c:6a:62:74:85:cd:c7:c4:f0:95:c8:76:9d:8d:5b:88:67:
         7f:67:fe:67:01:af:86:28:70:64:47:57:ee:29:db:49:1d:de:
         c9:17:09:6d:d1:9a:d9:ad:b0:dc:cb:9e:6a:e0:e1:20:da:2f:
         13:24:25:57:a0:31:80:72:90:fb:6d:a6:f2:75:c5:d3:3b:d1:
         93:40:8e:75:84:a8:70:b7:48:54:0c:27:f7:ef:fd:e2:a8:c3:
         68:95:73:a1:54:7d:1a:1b:59:e2:4f:aa:44:fe:d0:03:c4:be:
         f0:6e:44:ec:9f:fb:bc:e2:38:52:59:b5:cb:1d:a2:4b:32:7d:
         33:5f:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----