Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313134303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a313134303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          3eYAWr+glJR/CUq4j9I5EJ8KjZ5idtd4yG+fX11iAgs=
Subject key identifier:   C3:CD:A4:7B:2B:14:E4:00:F2:E5:68:2F:C3:EE:80:75:7C:CF:45:25
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3A67A3600A544511B589E36CA1DE6F6849BA1EBC
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313134303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 11:40:02 +0000
ROA not before:           Sat 19 Feb 2022 11:35:02 +0000
ROA not after:            Sat 18 Feb 2023 11:40:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:1140::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:67:a3:60:0a:54:45:11:b5:89:e3:6c:a1:de:6f:68:49:ba:1e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 11:35:02 2022 GMT
            Not After : Feb 18 11:40:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:46:a7:49:cf:b1:4e:f3:0f:8f:0b:bb:8a:
                    e6:84:b2:54:e1:23:8d:0b:1d:02:2f:dd:a8:d0:a9:
                    17:a1:f1:14:45:88:df:bc:30:80:91:c4:d5:a2:79:
                    ee:3b:41:91:ac:69:66:67:61:c3:09:d7:c9:44:4d:
                    83:64:aa:be:5d:94:4f:84:91:41:3d:26:c6:4a:e6:
                    b8:b1:4a:41:2a:69:f3:d0:66:77:b1:22:53:00:78:
                    a1:6c:99:4d:32:43:45:03:20:7f:e8:d7:5d:4e:20:
                    ad:ea:a9:ca:2e:2c:17:bc:76:cd:a8:14:b4:60:b5:
                    da:0b:40:b6:10:fd:e2:e1:78:6c:3a:5c:19:b7:9d:
                    fd:c2:0e:3f:f7:05:19:72:bc:4b:c8:bf:30:74:61:
                    42:45:12:ba:6c:b3:c1:29:ac:7e:6c:e0:bc:c3:e6:
                    0d:17:4a:08:3d:f9:4c:ca:4a:e0:e4:b5:9b:ed:2d:
                    cb:7f:b6:9a:6e:99:7f:87:f8:ce:ea:53:b1:3f:4f:
                    e9:20:52:67:58:67:84:c0:d0:6c:47:0e:98:9b:50:
                    73:31:73:05:c3:65:dc:ac:18:b9:11:35:19:23:db:
                    62:63:bc:59:d6:6c:b6:ef:e8:f9:c5:d4:46:54:c2:
                    ea:20:87:34:3a:1d:dc:69:21:be:9f:58:07:26:54:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CD:A4:7B:2B:14:E4:00:F2:E5:68:2F:C3:EE:80:75:7C:CF:45:25
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a313134303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:1140::/80

    Signature Algorithm: sha256WithRSAEncryption
         44:64:2c:9e:17:56:95:b5:4a:58:bc:a9:de:a4:61:7c:e9:ee:
         2e:5d:9f:ef:b0:0a:ba:34:43:16:f4:4c:7f:77:8c:b8:ca:78:
         e0:9c:cf:48:14:36:11:ce:c8:3b:c9:c1:e4:94:d8:01:4e:ff:
         97:ef:f9:84:c1:13:2e:64:59:5f:ae:5e:a9:ba:3f:fc:4e:80:
         33:71:c3:94:6e:11:8c:cf:d3:00:cd:a7:ca:5b:f8:8b:63:f7:
         20:50:a4:8a:49:9f:1f:d7:24:55:ec:da:17:fd:18:13:ef:95:
         98:c3:3d:a2:ba:16:43:e7:76:09:67:2b:ea:6d:54:78:06:0c:
         d0:c7:a6:3c:a1:73:fe:c6:20:c0:30:d3:13:7d:b7:a1:cb:af:
         69:83:d7:b8:9c:97:4b:73:a6:71:8c:ee:32:07:ab:ab:6e:aa:
         1b:42:ba:74:49:c2:9b:c4:7f:f7:5d:27:d3:9f:75:4f:3e:8e:
         a5:7c:08:1a:3f:16:25:ac:28:a2:bc:ea:4d:a0:ec:61:bc:ef:
         cf:97:8a:2b:5b:47:5b:c9:14:b9:6b:7c:7c:d2:9b:c7:6e:5e:
         77:9d:c0:82:19:bf:e0:b6:50:8e:38:1e:a7:e1:d0:f5:e5:0b:
         7a:54:57:14:76:7f:8a:c0:d2:1e:cf:17:8e:da:c3:c0:05:5a:
         d5:52:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----