Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313934353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a313934353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          z3c4tpWetGGa71c1aM63Fx2MJUVpPMXfLTZ1WVwdY4g=
Subject key identifier:   E0:A2:25:DC:71:C7:14:0B:0D:38:10:C8:27:7E:EB:BF:EB:54:04:A0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       105E508E028181EEF870BCE42C8420D1DCCA1CBF
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313934353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 19:45:01 +0000
ROA not before:           Sun 20 Feb 2022 19:40:01 +0000
ROA not after:            Sun 19 Feb 2023 19:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:1945::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5e:50:8e:02:81:81:ee:f8:70:bc:e4:2c:84:20:d1:dc:ca:1c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 19:40:01 2022 GMT
            Not After : Feb 19 19:45:01 2023 GMT
        Subject: CN=3082010A0282010100DD9F026FE3C3C253221945D9C3C9B526884CABA71CD77025261337857E2C8631D222E3434EF7C2491DA6ADE631E26D353389199EDC00BCC360829D024005CBBE99D1F028146195D119D0AC3F8B347E7913CD19C77628F92A1510E194FDB87FC392D5B2662C3C2A54A4C2C7484BCC685C1B534F669359B14DD8CACF95287854368B73A17EE3E9D0D52056AB9429DCBB630AFADD6BB4D3FB6D81C829544A82F15C80456E34B2275CF297AEEAAB0285FE0CCF4B5345D5C03639BA647D798A0A59BF66F053483F81FBFFEA58AC800B542E7D91EE5B27F1710A453ADD7E79A0FAC8A5BBE6BB284BF92485D1C40B14A40C22DB76C82EE05F5A1B8761D9AB88DD54AE9F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:02:6f:e3:c3:c2:53:22:19:45:d9:c3:c9:
                    b5:26:88:4c:ab:a7:1c:d7:70:25:26:13:37:85:7e:
                    2c:86:31:d2:22:e3:43:4e:f7:c2:49:1d:a6:ad:e6:
                    31:e2:6d:35:33:89:19:9e:dc:00:bc:c3:60:82:9d:
                    02:40:05:cb:be:99:d1:f0:28:14:61:95:d1:19:d0:
                    ac:3f:8b:34:7e:79:13:cd:19:c7:76:28:f9:2a:15:
                    10:e1:94:fd:b8:7f:c3:92:d5:b2:66:2c:3c:2a:54:
                    a4:c2:c7:48:4b:cc:68:5c:1b:53:4f:66:93:59:b1:
                    4d:d8:ca:cf:95:28:78:54:36:8b:73:a1:7e:e3:e9:
                    d0:d5:20:56:ab:94:29:dc:bb:63:0a:fa:dd:6b:b4:
                    d3:fb:6d:81:c8:29:54:4a:82:f1:5c:80:45:6e:34:
                    b2:27:5c:f2:97:ae:ea:ab:02:85:fe:0c:cf:4b:53:
                    45:d5:c0:36:39:ba:64:7d:79:8a:0a:59:bf:66:f0:
                    53:48:3f:81:fb:ff:ea:58:ac:80:0b:54:2e:7d:91:
                    ee:5b:27:f1:71:0a:45:3a:dd:7e:79:a0:fa:c8:a5:
                    bb:e6:bb:28:4b:f9:24:85:d1:c4:0b:14:a4:0c:22:
                    db:76:c8:2e:e0:5f:5a:1b:87:61:d9:ab:88:dd:54:
                    ae:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A2:25:DC:71:C7:14:0B:0D:38:10:C8:27:7E:EB:BF:EB:54:04:A0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313934353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:1945::/80

    Signature Algorithm: sha256WithRSAEncryption
         02:b3:d4:80:bb:c2:85:5f:07:0e:50:9f:13:cd:35:56:6f:75:
         e7:f8:65:cf:26:10:1e:93:47:c5:a3:85:b8:00:30:6c:b6:fd:
         cc:da:b7:3f:40:8d:2e:63:c5:61:d4:a8:93:6d:a8:c5:ed:ad:
         d3:45:63:eb:2b:e3:0e:c6:c1:e3:52:27:03:2a:f4:a5:7c:47:
         63:b5:ee:6e:14:14:52:4a:fb:c6:11:8d:8f:ab:f8:97:f9:5e:
         ef:c2:e8:37:47:8f:f5:b4:4b:43:8b:4f:ab:fa:b7:56:df:1f:
         13:33:5e:05:92:36:65:5c:5a:1a:d7:a7:e4:bd:46:b0:93:b6:
         7d:37:c1:5b:b0:d1:ba:18:d6:a0:86:47:38:34:c4:cd:5b:ed:
         8f:5a:46:65:b4:c8:89:96:b3:93:16:f7:35:01:9b:6e:9a:f5:
         68:bc:50:5b:de:2f:31:02:e1:e9:80:36:18:31:0e:ce:b8:93:
         cd:bf:23:d0:dd:f4:31:bc:18:27:55:ba:af:e4:50:36:ac:1f:
         18:9f:99:59:14:61:17:64:71:8c:e2:70:7f:8d:31:a3:24:86:
         c9:44:93:47:a8:df:79:1b:91:70:e7:17:06:96:5c:86:99:e3:
         52:8c:ec:25:f1:66:e0:b3:41:7f:b9:58:8c:c1:0e:91:be:32:
         e9:72:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----