Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3731303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a3731303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          cA4KO5IcELwIIQ4ie6pNNqxpyn/txY3me8i16R4vcx8=
Subject key identifier:   E2:CF:3F:55:93:30:CA:2C:E0:7C:79:DF:D1:B3:E7:BA:B2:B8:E4:6D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       66B461FFBC08E8F225C1F5F94B07E0F082362340
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3731303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 07:10:01 +0000
ROA not before:           Sat 19 Feb 2022 07:05:01 +0000
ROA not after:            Sat 18 Feb 2023 07:10:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:710::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b4:61:ff:bc:08:e8:f2:25:c1:f5:f9:4b:07:e0:f0:82:36:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 07:05:01 2022 GMT
            Not After : Feb 18 07:10:01 2023 GMT
        Subject: CN=3082010A0282010100DB0B1933A94F8171E5E931FBB0C6116B948B1A6F1E2699BD221A612DE67939E2CD71855073AEEAD364E01702B99F826251FDD4648D6B45B196C200831DF362F021649AA9BA988586C2A007E1585B9C0F8D8F64388E8919D71AF9E7667E751D59DD25425E90665A3351285F8E0281D62B99BAD0419473A2972B980ED2C3254809FD5DC5594F051FC234C17E3D81F1ACA2AA33D1952054108DD83C2F2F8313C6AAEB16B82AD1F13205707C96DE97783E53DEAAF0E6EF5B70C719EA7B4C2F161C500E6875DFA08E43FF33C66A8613A9317371196ACDC0593EE7011F085F984B16258996B31A6897EA81E8867528C23F281623A79DF3E786579AF0BEA4FBAFE166C10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0b:19:33:a9:4f:81:71:e5:e9:31:fb:b0:c6:
                    11:6b:94:8b:1a:6f:1e:26:99:bd:22:1a:61:2d:e6:
                    79:39:e2:cd:71:85:50:73:ae:ea:d3:64:e0:17:02:
                    b9:9f:82:62:51:fd:d4:64:8d:6b:45:b1:96:c2:00:
                    83:1d:f3:62:f0:21:64:9a:a9:ba:98:85:86:c2:a0:
                    07:e1:58:5b:9c:0f:8d:8f:64:38:8e:89:19:d7:1a:
                    f9:e7:66:7e:75:1d:59:dd:25:42:5e:90:66:5a:33:
                    51:28:5f:8e:02:81:d6:2b:99:ba:d0:41:94:73:a2:
                    97:2b:98:0e:d2:c3:25:48:09:fd:5d:c5:59:4f:05:
                    1f:c2:34:c1:7e:3d:81:f1:ac:a2:aa:33:d1:95:20:
                    54:10:8d:d8:3c:2f:2f:83:13:c6:aa:eb:16:b8:2a:
                    d1:f1:32:05:70:7c:96:de:97:78:3e:53:de:aa:f0:
                    e6:ef:5b:70:c7:19:ea:7b:4c:2f:16:1c:50:0e:68:
                    75:df:a0:8e:43:ff:33:c6:6a:86:13:a9:31:73:71:
                    19:6a:cd:c0:59:3e:e7:01:1f:08:5f:98:4b:16:25:
                    89:96:b3:1a:68:97:ea:81:e8:86:75:28:c2:3f:28:
                    16:23:a7:9d:f3:e7:86:57:9a:f0:be:a4:fb:af:e1:
                    66:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CF:3F:55:93:30:CA:2C:E0:7C:79:DF:D1:B3:E7:BA:B2:B8:E4:6D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3731303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:710::/80

    Signature Algorithm: sha256WithRSAEncryption
         40:57:8f:f4:ae:fb:00:80:96:c9:d7:0a:11:54:55:31:ca:a8:
         f7:d8:b5:86:89:29:bd:6d:2c:07:b2:61:70:f2:39:ed:5e:f3:
         44:4c:54:d0:bc:99:92:04:ee:5b:03:11:ec:15:03:8c:4b:10:
         f8:79:aa:e8:4e:6f:7e:ea:1f:0d:77:b1:0e:9c:44:3a:97:9a:
         2c:f0:29:b4:65:5f:c2:81:00:90:04:f4:c3:f0:24:bd:f6:e2:
         fc:30:51:ec:53:8b:95:81:03:bb:29:06:3c:c6:fd:96:0e:a4:
         2f:83:c2:14:7f:3e:a6:8f:e1:4d:5b:d9:ea:de:41:49:0b:d9:
         92:0e:ec:30:74:7d:e3:d9:2f:77:ac:bb:26:f9:fa:9e:c4:db:
         16:1b:c4:c6:14:8f:24:95:57:34:81:2f:78:ef:d2:12:8b:d3:
         5b:34:72:39:86:c9:e1:01:ae:33:3d:5d:02:4b:e5:15:fc:1f:
         3a:ce:e8:86:6a:e2:19:e6:a6:3e:3d:6a:80:f7:54:f5:46:b2:
         11:be:70:d1:42:e6:3c:fe:64:ab:f1:99:38:ef:97:e9:55:a9:
         f3:4b:ec:ac:a9:13:15:99:ca:75:67:c8:bb:23:42:f1:f8:d3:
         e6:ea:6a:e9:5a:48:58:c4:e7:b8:2d:e1:4d:83:ad:b3:f8:46:
         9c:aa:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----