Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3331303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232313a3331303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          TdyUo9wPSozQnzeP1ybbKX3dJ1dpn03w74Li2qIzfRU=
Subject key identifier:   1C:22:60:D7:C4:85:AA:4F:E3:D8:F6:DF:0F:62:E3:3B:39:03:C7:0C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       09855704BF5FA552C08CA87247F9D2A2834C4584
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3331303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 21 Feb 2022 03:10:02 +0000
ROA not before:           Mon 21 Feb 2022 03:05:02 +0000
ROA not after:            Mon 20 Feb 2023 03:10:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:221:310::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:85:57:04:bf:5f:a5:52:c0:8c:a8:72:47:f9:d2:a2:83:4c:45:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 21 03:05:02 2022 GMT
            Not After : Feb 20 03:10:02 2023 GMT
        Subject: CN=3082010A0282010100BDB788CF68C1BB81AE44556552C743501E5C1F5F6F13024C4437D645029C9DB5D673600AD64A28EA0FCFA05A37A2EE9397FD77A4F1BA17692DFF102E2412B7FE95256950E6A8F4A44D11DD6D98C87E24F62D49AA0429F7ED6579217A7782329FB9309CD1D6F0F772E402CA174E679E9F53796C80AC50A6B6BEC438672D0EE15EDED35C7B3C207171CD4D54BA3CE405053B532A2E30DB59613EA4342E3B8C12827919E5C7D2C92CC5B7A6811192BDCD7FE8AF9B22F0315BE35FEF34213942DE431EF82A41159EAC8146566106B8B3CE9D832BF98E6BCA51B06E4C84199CDB10B78B12BEC52BA862C130EEA9016ED4708A82D28527B6355D947B196EDC0C3F7D6B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:88:cf:68:c1:bb:81:ae:44:55:65:52:c7:
                    43:50:1e:5c:1f:5f:6f:13:02:4c:44:37:d6:45:02:
                    9c:9d:b5:d6:73:60:0a:d6:4a:28:ea:0f:cf:a0:5a:
                    37:a2:ee:93:97:fd:77:a4:f1:ba:17:69:2d:ff:10:
                    2e:24:12:b7:fe:95:25:69:50:e6:a8:f4:a4:4d:11:
                    dd:6d:98:c8:7e:24:f6:2d:49:aa:04:29:f7:ed:65:
                    79:21:7a:77:82:32:9f:b9:30:9c:d1:d6:f0:f7:72:
                    e4:02:ca:17:4e:67:9e:9f:53:79:6c:80:ac:50:a6:
                    b6:be:c4:38:67:2d:0e:e1:5e:de:d3:5c:7b:3c:20:
                    71:71:cd:4d:54:ba:3c:e4:05:05:3b:53:2a:2e:30:
                    db:59:61:3e:a4:34:2e:3b:8c:12:82:79:19:e5:c7:
                    d2:c9:2c:c5:b7:a6:81:11:92:bd:cd:7f:e8:af:9b:
                    22:f0:31:5b:e3:5f:ef:34:21:39:42:de:43:1e:f8:
                    2a:41:15:9e:ac:81:46:56:61:06:b8:b3:ce:9d:83:
                    2b:f9:8e:6b:ca:51:b0:6e:4c:84:19:9c:db:10:b7:
                    8b:12:be:c5:2b:a8:62:c1:30:ee:a9:01:6e:d4:70:
                    8a:82:d2:85:27:b6:35:5d:94:7b:19:6e:dc:0c:3f:
                    7d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:22:60:D7:C4:85:AA:4F:E3:D8:F6:DF:0F:62:E3:3B:39:03:C7:0C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3331303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:221:310::/80

    Signature Algorithm: sha256WithRSAEncryption
         6e:16:eb:47:05:7f:62:1f:8c:d0:ba:15:5f:53:5f:17:83:40:
         d9:f4:a8:f0:36:e1:b3:16:09:33:6f:76:af:7e:c1:fd:f8:e4:
         d6:98:3a:43:89:ce:3e:1a:43:2e:b5:cb:fb:cc:6c:4c:de:6a:
         c3:fe:10:62:a6:e4:88:c4:6c:94:95:91:7a:f6:e3:00:80:38:
         82:43:d0:74:85:c1:22:66:03:e6:cd:44:3a:f7:83:68:07:8e:
         41:3a:c9:d2:2e:b3:e4:45:b1:82:85:18:8f:f6:c8:e8:65:42:
         5d:c6:20:ed:dc:99:9a:68:15:29:32:15:1a:2b:2c:5a:ca:33:
         a0:a3:01:a0:6e:de:d9:4c:69:9c:85:37:f0:e0:fa:90:7d:72:
         31:e0:76:da:ca:14:e3:2e:93:bf:54:fb:0e:ad:48:7a:e0:97:
         a7:c9:14:a1:c2:f5:46:25:89:a1:bf:5c:f2:e2:27:cb:d5:6a:
         f9:c6:3f:06:73:28:42:25:f3:9d:8f:13:2f:cd:86:67:32:18:
         f3:48:19:67:ac:7e:4e:a4:0a:77:3f:30:0f:27:be:54:47:2e:
         7f:17:f0:76:2c:27:36:4c:2b:92:c6:39:4b:97:1c:2c:3f:ce:
         da:35:29:8c:cc:e9:22:22:ec:a6:04:a8:40:fb:2f:26:f2:72:
         ee:54:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----