Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313134353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a313134353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Xakh7fCDv7u9T7zGJjDNPq+DIbKfkOx5x+JzcR+KJU0=
Subject key identifier:   94:F5:E5:41:B1:9B:19:C0:63:DF:A4:3F:E0:83:4E:7E:05:4D:A1:53
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0E09AA054526E7A7F6132739A8C2B1101753A46D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313134353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 11:45:01 +0000
ROA not before:           Fri 18 Feb 2022 11:40:01 +0000
ROA not after:            Fri 17 Feb 2023 11:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:1145::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:09:aa:05:45:26:e7:a7:f6:13:27:39:a8:c2:b1:10:17:53:a4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 11:40:01 2022 GMT
            Not After : Feb 17 11:45:01 2023 GMT
        Subject: CN=3082010A0282010100D7D7A3985A6DACC6E7A5EFA03BF74C4451AF80FBF925D2E4AA3E50330FBB67AC7775996FDEAE7AA3A71B10E2781152A8274655B11B5E9DBCCD13A0AB5AC8B94E4E6191BC0DA87C232AE9249E7407E8CDD4346F5D86361F49B9968671848C830B75F02BF608E8007E3EE0BD6E3B4CCA406200EA491B75704788E07492F5FFFB16D78E0C7E00E53EC5CBB0CB5649F0E254C0FF7E6BE835983E65D9142F91201733B370E60C9C31BF923A3A840CF87B6A91B0286916FACC0DE00DB78AEC3EB99AC4F6128C57EEB43C9F8A0CCC4DB815731AC8363886C9C49241991A2C37BCE10D5B0AFA216F79B08682C972B13BF7C11D870571E1569E5534FD0AB0577B266DEA690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:a3:98:5a:6d:ac:c6:e7:a5:ef:a0:3b:f7:
                    4c:44:51:af:80:fb:f9:25:d2:e4:aa:3e:50:33:0f:
                    bb:67:ac:77:75:99:6f:de:ae:7a:a3:a7:1b:10:e2:
                    78:11:52:a8:27:46:55:b1:1b:5e:9d:bc:cd:13:a0:
                    ab:5a:c8:b9:4e:4e:61:91:bc:0d:a8:7c:23:2a:e9:
                    24:9e:74:07:e8:cd:d4:34:6f:5d:86:36:1f:49:b9:
                    96:86:71:84:8c:83:0b:75:f0:2b:f6:08:e8:00:7e:
                    3e:e0:bd:6e:3b:4c:ca:40:62:00:ea:49:1b:75:70:
                    47:88:e0:74:92:f5:ff:fb:16:d7:8e:0c:7e:00:e5:
                    3e:c5:cb:b0:cb:56:49:f0:e2:54:c0:ff:7e:6b:e8:
                    35:98:3e:65:d9:14:2f:91:20:17:33:b3:70:e6:0c:
                    9c:31:bf:92:3a:3a:84:0c:f8:7b:6a:91:b0:28:69:
                    16:fa:cc:0d:e0:0d:b7:8a:ec:3e:b9:9a:c4:f6:12:
                    8c:57:ee:b4:3c:9f:8a:0c:cc:4d:b8:15:73:1a:c8:
                    36:38:86:c9:c4:92:41:99:1a:2c:37:bc:e1:0d:5b:
                    0a:fa:21:6f:79:b0:86:82:c9:72:b1:3b:f7:c1:1d:
                    87:05:71:e1:56:9e:55:34:fd:0a:b0:57:7b:26:6d:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F5:E5:41:B1:9B:19:C0:63:DF:A4:3F:E0:83:4E:7E:05:4D:A1:53
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313134353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:1145::/80

    Signature Algorithm: sha256WithRSAEncryption
         01:e0:48:19:0c:b5:ff:48:3d:e8:44:e4:b6:08:a3:7c:be:0e:
         99:43:d4:fb:5f:46:75:a6:60:06:f9:fd:da:3a:ea:4f:f7:db:
         8a:b8:32:ce:90:e9:13:9d:db:f1:6a:ff:80:88:92:12:58:2d:
         33:0b:6f:f4:be:01:b3:f2:8c:12:bc:ab:0a:fd:05:cc:82:c8:
         50:48:80:90:50:71:e4:f8:1e:87:a8:d3:f7:b6:09:64:de:8d:
         a7:8b:f2:c5:60:c7:5a:01:8a:7e:b7:c5:b8:2d:ea:30:48:c0:
         24:3c:c4:9c:94:a2:15:5d:7f:2d:15:d9:ce:78:e9:da:94:a3:
         f6:77:16:07:63:cc:ee:14:38:91:e6:5a:a8:22:b1:f6:fd:87:
         6f:e4:b2:ed:33:7d:6b:8a:3a:cc:70:f9:03:ac:82:0c:5e:dd:
         ac:4b:0c:e8:aa:ac:30:c0:03:18:81:1c:fb:dc:5f:f0:5b:10:
         63:54:80:b9:d5:cd:9d:eb:d5:9b:ca:bd:46:86:3d:2c:61:a5:
         c5:5c:0a:4f:c5:7e:2f:2b:f2:aa:47:88:40:9e:15:52:5b:ee:
         3b:7a:e9:b3:68:97:f3:bf:70:44:5c:63:0c:11:ff:12:93:a3:
         67:1b:ff:2d:d4:c8:15:96:90:e2:ed:1f:3e:b0:a2:ea:74:aa:
         15:2b:e7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----