Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e36342e302f31392d3234203d3e20383334.roa
File:                     34302e3138332e36342e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier:          2lG2z9CLRVjEGCyXDZYgorM6HABLQButJfvPYYnx518=
Subject key identifier:   21:64:28:E0:66:01:96:EB:0A:31:F1:50:F2:7D:4D:D8:6E:D8:15:2E
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       7B92CCA1D40B56005344BB6F46D2731BC8F8471B
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e36342e302f31392d3234203d3e20383334.roa
Signing time:             Fri 30 Jun 2023 14:30:07 +0000
ROA not before:           Fri 30 Jun 2023 14:25:07 +0000
ROA not after:            Fri 28 Jun 2024 14:30:07 +0000
asID:                     834
IP address blocks:        40.183.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:92:cc:a1:d4:0b:56:00:53:44:bb:6f:46:d2:73:1b:c8:f8:47:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Jun 30 14:25:07 2023 GMT
            Not After : Jun 28 14:30:07 2024 GMT
        Subject: CN=216428E0660196EB0A31F150F27D4DD86ED8152E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6e:33:d9:6f:0f:02:31:27:78:93:44:1e:40:
                    d9:6d:5c:be:f8:1a:96:23:b3:33:99:8b:3f:b9:67:
                    4c:c2:20:62:0d:3f:3f:da:60:5f:72:90:9d:9b:5c:
                    b8:c5:6c:37:17:24:6d:de:62:f6:99:97:e1:7b:0f:
                    b7:67:0e:25:ff:74:8b:20:89:6b:04:91:db:84:e7:
                    ad:90:16:27:4e:bc:f7:06:08:71:7d:09:fe:13:27:
                    7a:9d:9b:e0:00:53:95:93:9d:b9:fd:8d:65:8f:bd:
                    b0:16:78:51:1b:1c:60:d7:e9:19:20:f5:1c:30:08:
                    a9:46:23:94:5a:e7:6e:d6:20:5c:24:7b:6f:0d:d6:
                    a1:d3:8a:27:1e:0a:b6:cb:82:1e:22:da:55:c0:97:
                    8a:9e:83:9d:2e:07:5f:65:51:4f:9e:33:43:44:fd:
                    16:90:55:cc:1c:75:21:59:e7:89:93:f2:9d:cb:aa:
                    94:4a:0b:be:75:a2:ae:7e:99:1b:13:dc:b9:96:e1:
                    08:03:e7:fa:72:24:2f:1a:81:66:6b:94:ba:fc:8c:
                    2d:26:41:2c:e0:8c:bd:4d:86:64:d9:5e:75:71:9d:
                    a2:47:18:e0:b7:16:70:f7:f8:4d:b8:74:76:44:be:
                    1c:f2:1a:85:31:1e:3d:53:e7:08:ea:d6:d7:9b:00:
                    c6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:28:E0:66:01:96:EB:0A:31:F1:50:F2:7D:4D:D8:6E:D8:15:2E
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e36342e302f31392d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:a4:c1:0c:9a:ce:6c:03:4a:58:bd:a8:44:54:33:06:b6:
         94:bc:e4:98:2a:a7:ef:ab:ba:2b:d2:3b:d3:74:c6:9b:54:51:
         91:57:76:2b:0b:a2:8a:f8:29:b3:39:c4:3f:5e:61:65:c9:93:
         20:6e:23:75:81:c6:24:e6:a5:f3:94:be:79:6f:a1:e8:c8:e3:
         ef:79:6f:c6:db:00:d3:23:28:f0:c9:c9:3a:40:96:4c:f9:ea:
         ef:8c:e3:94:20:b5:87:51:a4:16:13:02:9a:ea:90:b3:64:89:
         7d:a5:f2:cf:c6:bd:45:ae:49:08:00:83:bd:8a:3d:09:54:a7:
         c6:69:e8:70:59:cc:aa:d6:86:b7:d4:48:6d:e3:ae:66:70:cf:
         ac:83:ae:c0:f5:1f:a6:af:d4:df:dd:0c:33:ba:d4:3e:39:3f:
         ad:58:12:37:e4:29:f5:d1:25:ce:d1:db:a7:2e:46:32:05:eb:
         9b:54:31:b3:67:8d:0b:c1:b0:62:9d:e8:36:8b:02:28:e3:01:
         86:5c:e5:b6:81:18:22:f5:66:41:f7:af:1b:c2:06:29:97:78:
         e7:47:60:31:e5:1d:c7:81:c3:d0:27:a1:b1:95:e4:e7:b4:b8:
         f1:1d:42:df:4f:d1:10:58:3c:f2:c4:94:59:ed:70:27:ae:de:
         ab:1d:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----