Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e36342e302f31392d3234203d3e2031323339.roa
File:                     34302e3138332e36342e302f31392d3234203d3e2031323339.roa (raw, json)
Hash identifier:          RnFaGt9Eg4Mulb0/Om+5Aody/+4Uy5mGU0tm1XuVQNk=
Subject key identifier:   9F:2E:3D:2E:BB:5A:6D:34:9A:A6:0B:F3:7F:8E:52:9A:2D:B7:1B:5F
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       763D00ED2FD7F87E4619F8EF8FC78A352AFB00D2
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e36342e302f31392d3234203d3e2031323339.roa
Signing time:             Fri 24 Feb 2023 17:32:13 +0000
ROA not before:           Fri 24 Feb 2023 17:27:13 +0000
ROA not after:            Fri 23 Feb 2024 17:32:13 +0000
asID:                     1239
IP address blocks:        40.183.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3d:00:ed:2f:d7:f8:7e:46:19:f8:ef:8f:c7:8a:35:2a:fb:00:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Feb 24 17:27:13 2023 GMT
            Not After : Feb 23 17:32:13 2024 GMT
        Subject: CN=9F2E3D2EBB5A6D349AA60BF37F8E529A2DB71B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4d:b4:61:94:2c:c8:a6:08:55:ed:7e:a4:0b:
                    2f:1a:6b:12:50:13:18:fd:66:79:c7:00:a7:b7:e2:
                    a4:b9:52:61:34:6d:d2:b3:f5:90:6a:2f:76:4d:00:
                    a0:8b:9f:5d:82:f8:64:cb:6b:e8:1b:f8:97:75:34:
                    ae:9d:14:ab:e3:e6:cf:fb:e2:86:30:8a:7a:f4:89:
                    2f:32:dd:8c:14:b9:19:82:08:4e:96:37:34:71:8e:
                    e3:98:06:bf:6a:b9:51:62:c2:0f:48:5d:a5:01:7c:
                    0b:ac:bd:c7:49:05:26:4d:9a:66:5d:8c:bb:ba:e5:
                    65:81:6b:72:e5:6c:d3:25:0b:af:1a:cd:45:62:59:
                    0f:79:4f:cb:c3:29:15:72:d1:9e:8f:d9:94:95:a6:
                    18:31:37:b7:02:61:13:73:fe:cf:b9:fd:b7:11:6d:
                    21:45:ca:5a:e6:e5:a1:8c:c6:0c:d7:53:15:85:a9:
                    5e:cd:61:8d:46:3e:a1:06:46:8b:19:b8:14:23:8b:
                    7a:ee:a9:76:34:f0:b1:82:6c:0e:a4:3e:06:4f:1f:
                    ed:09:22:71:7c:22:fd:23:f2:64:f6:83:21:61:72:
                    7c:2b:b0:e0:e5:df:bd:7a:43:bb:89:b6:af:71:60:
                    db:82:4a:eb:95:a3:d7:fb:f5:b3:2e:d9:2c:bd:7a:
                    40:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2E:3D:2E:BB:5A:6D:34:9A:A6:0B:F3:7F:8E:52:9A:2D:B7:1B:5F
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e36342e302f31392d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:63:08:d8:d9:5c:3e:f9:57:db:cf:1d:a7:4a:c4:5c:42:1d:
         e7:6c:ed:80:fd:ff:de:c9:38:d4:e5:bb:c0:61:7f:18:3b:a6:
         f5:03:a3:0a:f1:1c:6e:8a:94:2d:55:8a:32:cc:be:d2:34:23:
         57:ff:f3:af:5f:2c:14:c4:5b:8a:2b:8b:36:c9:bd:77:dc:7b:
         47:2f:a0:62:c3:b4:3a:6d:12:b6:7f:00:13:43:05:ce:82:d1:
         2a:b1:d7:02:4f:1e:d3:c8:4f:05:7b:d8:40:88:c0:8b:e8:13:
         47:db:1d:28:c1:ab:1e:84:4e:4e:4c:50:93:ce:a5:44:c2:f2:
         19:12:1f:4c:94:12:f1:56:87:c5:17:a6:03:2e:46:1a:67:70:
         5b:3a:26:63:7a:23:c2:79:96:6b:1f:67:18:4b:08:08:61:9c:
         62:2d:2f:51:6c:80:52:04:ac:ec:82:af:98:31:cc:e6:a7:a0:
         bf:8e:84:96:83:c4:c5:bd:d2:ba:b4:d6:3a:aa:7a:40:ee:c8:
         3d:5b:77:a0:a0:de:78:ad:bd:78:d3:49:b3:22:cb:93:1d:c6:
         73:17:65:9b:c8:c4:08:d2:3e:0e:12:20:2d:c6:61:27:d5:da:
         f2:c3:69:c2:eb:02:57:4e:77:91:06:a2:08:b4:5e:3c:2e:41:
         ca:3f:dd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----