Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3136302e302f31392d3234203d3e203239383032.roa
File:                     34302e3138332e3136302e302f31392d3234203d3e203239383032.roa (raw, json)
Hash identifier:          oA7i4IqEiHKuCXfOjljzQ2gOMA+K+vzoaIkhiyC1Sjo=
Subject key identifier:   45:D4:66:D9:4D:7C:33:96:B0:CA:91:F1:24:C5:86:87:1D:74:D6:35
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       24E2320EBA2B79CDF29C28831238EAE72B4F2CA1
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3136302e302f31392d3234203d3e203239383032.roa
Signing time:             Mon 06 Mar 2023 12:09:19 +0000
ROA not before:           Mon 06 Mar 2023 12:04:19 +0000
ROA not after:            Mon 04 Mar 2024 12:09:19 +0000
asID:                     29802
IP address blocks:        40.183.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e2:32:0e:ba:2b:79:cd:f2:9c:28:83:12:38:ea:e7:2b:4f:2c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Mar  6 12:04:19 2023 GMT
            Not After : Mar  4 12:09:19 2024 GMT
        Subject: CN=45D466D94D7C3396B0CA91F124C586871D74D635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:03:82:27:27:44:d7:26:e4:67:ef:1c:84:
                    32:78:bc:7b:eb:8b:48:e4:36:c4:fc:7b:e3:31:c9:
                    d4:70:58:23:cb:bb:d3:03:58:5f:9e:7e:31:20:8d:
                    82:d1:94:45:e6:32:94:14:9b:8a:f2:5c:94:5c:c4:
                    70:61:97:aa:9e:ed:5d:1d:9c:42:e3:f3:36:58:89:
                    0c:8a:3f:f5:12:fc:1a:9d:99:73:d4:e5:db:5c:81:
                    d1:b5:0e:33:e5:ad:b3:27:83:84:85:d7:9a:f5:5e:
                    c8:66:db:24:51:a5:91:1b:8d:7d:41:2b:56:73:7c:
                    f9:83:ed:d7:ba:19:d2:17:d3:d6:5a:80:95:9e:aa:
                    72:a1:36:e8:a6:13:4d:22:a4:45:75:0b:1e:62:f1:
                    9f:15:9d:04:b0:bd:04:15:26:f3:e5:81:c4:67:d3:
                    98:3b:98:b1:be:86:e4:40:ba:f2:63:6e:f3:3d:0f:
                    ed:54:a9:c0:dd:90:47:05:fd:a2:5e:20:7a:e5:2b:
                    ee:91:fe:59:78:d6:c7:a2:8e:d5:9a:2e:ff:ba:ca:
                    35:4d:d3:71:9a:0c:df:2d:a2:bc:61:37:74:c1:bd:
                    47:c1:6a:eb:6d:51:b1:04:e3:f4:19:52:51:e6:91:
                    11:86:f8:7b:d4:dd:0f:2a:83:9d:f5:01:fb:03:d1:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D4:66:D9:4D:7C:33:96:B0:CA:91:F1:24:C5:86:87:1D:74:D6:35
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3136302e302f31392d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:22:91:b5:fc:74:ad:7a:4a:f1:15:2f:5d:02:fd:76:44:52:
         52:82:b5:2d:85:83:4c:d7:7b:9f:c9:9e:e9:bc:a6:9e:42:01:
         ab:42:9d:c1:b1:9e:ff:8d:55:da:96:e9:c0:69:d2:a3:10:2f:
         64:13:c4:5f:76:03:c7:42:dd:6f:90:bf:21:7e:62:f1:1d:e5:
         83:38:5b:e9:9f:1b:a1:b1:ac:61:33:05:19:cb:6b:74:ca:e5:
         1a:e6:2e:23:62:67:1b:6c:e5:b6:fa:ff:69:a3:83:7d:4e:55:
         1a:ca:77:92:1f:fb:17:7e:74:af:27:95:29:3b:1e:df:22:86:
         f4:51:bb:10:8e:7f:83:e2:b1:41:a2:87:5a:0c:71:b5:a6:e6:
         37:71:e6:42:41:14:f4:19:ca:bc:ec:32:cb:c9:e4:52:e2:86:
         6c:a9:b9:3e:bb:ca:0f:e0:6f:9f:8a:51:21:3c:50:b4:3d:20:
         f4:4f:8b:82:ef:0b:de:fe:4c:df:d3:54:64:b3:ae:09:45:4e:
         86:44:63:6c:d8:85:bf:85:f5:21:54:0a:78:0b:95:92:a9:20:
         b3:45:63:0a:40:0e:3a:0c:5a:8e:95:f2:c7:74:0e:bd:75:5a:
         48:41:f7:6f:a7:a9:f9:52:88:e7:b6:c8:c2:d0:41:35:63:94:
         23:04:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----