Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e2031323339.roa
File:                     34302e3138332e302e302f31382d3234203d3e2031323339.roa (raw, json)
Hash identifier:          tbjVrgERihIVa7EYHgDn/fhhEOwfUvFvlJ4ri2W2egc=
Subject key identifier:   64:BF:6C:DC:CB:60:76:76:54:B4:DC:99:30:5F:3A:B9:D3:27:8E:E9
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       235E2F281E56F95425902CAEF85BB950BF409A37
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e2031323339.roa
Signing time:             Wed 22 Feb 2023 15:07:26 +0000
ROA not before:           Wed 22 Feb 2023 15:02:26 +0000
ROA not after:            Wed 21 Feb 2024 15:07:26 +0000
asID:                     1239
IP address blocks:        40.183.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5e:2f:28:1e:56:f9:54:25:90:2c:ae:f8:5b:b9:50:bf:40:9a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Feb 22 15:02:26 2023 GMT
            Not After : Feb 21 15:07:26 2024 GMT
        Subject: CN=64BF6CDCCB60767654B4DC99305F3AB9D3278EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f3:fd:6e:34:8b:e6:fc:66:a5:2c:fc:c3:11:
                    f6:29:76:cd:02:40:13:bd:aa:a8:c2:f6:12:0e:b7:
                    3f:1a:f7:35:b8:b8:6e:2e:ba:de:34:eb:15:ff:36:
                    8d:98:f8:72:09:ac:de:f6:8a:f4:29:af:90:9a:16:
                    32:55:c9:1d:40:5b:70:68:76:3e:d9:09:ba:db:a0:
                    80:78:3b:ad:91:1c:a1:5d:12:d8:07:50:63:2b:17:
                    dd:04:c3:78:61:3d:5d:52:73:15:16:59:a6:ff:ab:
                    72:4d:7d:30:46:f4:c8:2e:52:4c:8d:77:fc:f8:34:
                    01:d4:21:6c:cf:de:d1:da:a1:4c:97:71:ad:bf:63:
                    f2:7f:23:3d:52:f3:fc:0f:1c:19:6f:60:52:5c:ef:
                    f4:0d:9b:4a:aa:4b:ea:ff:c3:8d:ff:d5:70:ff:40:
                    df:5c:8a:a2:06:5c:2e:9f:b6:d8:09:86:08:4c:5d:
                    a2:1a:f8:e8:06:6e:82:49:6f:b6:95:b5:6b:5a:d7:
                    c0:a8:1a:9e:55:1f:32:96:7e:dc:ea:6d:11:57:3a:
                    2a:5f:40:d9:a3:b8:8f:1c:6e:1a:af:94:7f:66:81:
                    8f:d1:ca:31:af:f0:eb:29:65:e1:ba:d9:25:54:0d:
                    f0:52:e3:ba:71:8a:cf:f1:fc:a1:18:44:e6:de:37:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BF:6C:DC:CB:60:76:76:54:B4:DC:99:30:5F:3A:B9:D3:27:8E:E9
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         43:3d:b2:d8:2a:05:92:0f:cc:d3:40:b8:ed:2d:a0:bb:76:71:
         01:75:ba:f6:21:74:cb:92:91:f3:59:93:33:67:a5:e6:6b:ea:
         6e:ff:ef:19:81:38:cd:44:53:1a:91:d4:22:cb:52:53:cf:75:
         d6:70:5a:3e:fa:16:d2:f3:f0:dc:42:3f:45:46:00:bd:10:1a:
         6d:a1:de:b7:52:4e:9a:0e:1a:75:13:bb:1f:9c:18:05:a3:a4:
         1b:d7:31:a6:e8:b3:9e:2c:59:6a:7c:f2:6c:c4:d6:45:2e:af:
         56:6c:95:2b:36:a2:02:0d:7a:d9:d2:f5:f5:12:bc:c2:b4:8f:
         70:ce:f4:dc:36:ec:54:ee:bb:a8:8d:41:69:2d:5e:56:0b:e8:
         29:a5:b6:95:67:b0:84:f0:a1:57:4e:4f:ef:a9:cc:7f:b8:8b:
         06:b1:39:1e:52:bc:0d:b1:8b:9b:3e:5d:ac:0f:30:e7:b5:2e:
         85:cc:7d:c3:1d:5e:5f:8d:63:b5:eb:cb:10:e2:a0:cb:d4:a3:
         73:eb:ad:73:da:ca:ca:56:83:6c:75:fc:89:b0:1a:a2:c3:7d:
         6f:9a:15:c1:de:2e:c0:0c:2f:53:90:e3:31:c0:7f:f8:0e:64:
         c7:b3:f5:fd:8a:bf:da:26:d6:01:7d:c6:54:b0:fe:12:88:b7:
         0d:c0:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----