Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e39362e302f31392d3234203d3e2031323339.roa
File:                     34302e3138332e39362e302f31392d3234203d3e2031323339.roa (raw, json)
Hash identifier:          tquNrptbVThB/I4B3ME8qjNrK9vUEuc9iwUMGR0AU3E=
Subject key identifier:   66:92:04:7E:BD:EB:C0:AF:52:5E:19:08:22:2E:93:34:4F:A1:AE:04
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       3ED4A02F8A67153AA28AFEBA733D2B801C868DE8
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e39362e302f31392d3234203d3e2031323339.roa
Signing time:             Fri 24 Feb 2023 17:32:31 +0000
ROA not before:           Fri 24 Feb 2023 17:27:31 +0000
ROA not after:            Fri 23 Feb 2024 17:32:31 +0000
asID:                     1239
IP address blocks:        40.183.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d4:a0:2f:8a:67:15:3a:a2:8a:fe:ba:73:3d:2b:80:1c:86:8d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Feb 24 17:27:31 2023 GMT
            Not After : Feb 23 17:32:31 2024 GMT
        Subject: CN=6692047EBDEBC0AF525E1908222E93344FA1AE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:46:63:e7:76:1e:b5:9d:11:2d:66:94:aa:
                    74:f0:18:b4:7c:79:ae:83:17:81:e7:1b:7a:c1:3a:
                    aa:64:0d:d6:e9:64:8e:23:af:e9:bd:10:14:35:cc:
                    67:7c:f8:5c:03:91:85:96:66:12:a3:0d:92:71:2c:
                    10:4b:d9:b6:3a:22:db:ac:19:a9:85:44:f9:eb:0c:
                    cd:b4:5b:ae:b1:8f:dd:ee:77:96:8d:9b:73:3f:bf:
                    25:68:e2:5b:af:e0:3c:4d:64:1f:29:19:26:d7:db:
                    89:7e:05:85:b0:1b:d5:44:b9:92:6b:61:ca:ca:20:
                    24:9d:05:6f:ca:41:93:08:9e:5f:7d:13:15:36:00:
                    d8:9d:91:08:64:bc:f9:1e:fc:fa:32:ee:f0:c9:bc:
                    34:5d:1d:99:93:98:25:49:4a:df:06:36:a3:dd:3c:
                    f7:26:39:30:00:36:29:bf:66:ad:85:91:ae:37:81:
                    de:c6:cf:54:e4:26:f7:31:4b:10:3c:cc:fe:74:cf:
                    76:b9:f6:41:94:a0:f6:26:8c:90:ac:3f:0a:c9:6a:
                    ae:0a:c0:70:20:c8:45:1d:ab:5a:a1:44:39:ba:70:
                    8f:27:74:9c:29:70:7b:e8:b0:c6:00:9e:23:08:61:
                    f2:84:26:95:77:d7:9a:0c:c2:8f:19:f7:71:5b:94:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:92:04:7E:BD:EB:C0:AF:52:5E:19:08:22:2E:93:34:4F:A1:AE:04
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e39362e302f31392d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:ee:bb:cd:21:a3:df:fe:64:af:63:c9:31:3a:ba:54:ce:21:
         02:d2:b2:28:47:79:5c:18:95:a3:eb:98:d9:28:92:10:0f:b9:
         32:cb:a5:2c:6b:ea:18:11:80:64:a0:e2:8b:02:63:3d:8b:28:
         2d:68:c3:bf:de:f0:1a:f9:ea:ff:a5:11:4d:54:b3:30:3e:7f:
         4c:25:87:f6:9f:ad:9d:7f:66:31:47:ba:a4:a4:0b:5a:42:08:
         45:f0:a3:ac:94:17:77:e2:10:af:c9:0d:fa:dd:d1:45:40:b2:
         cc:93:00:99:8e:20:37:5d:4c:d8:ab:99:20:1d:67:6e:e1:18:
         75:ea:57:d2:fa:f4:34:4c:0b:96:9b:b3:f8:59:85:9c:ae:01:
         0c:bd:3d:e8:3d:6e:df:c6:1c:47:27:3b:22:d8:de:82:d2:55:
         b0:67:37:1a:87:84:e4:31:c5:f9:76:28:a1:20:2c:4f:fe:7b:
         b2:93:05:16:8b:a1:83:98:34:8e:16:ab:7d:1f:1b:4d:93:01:
         6c:1d:48:23:a7:ed:18:98:e7:4d:5e:ee:25:6b:aa:6b:d1:f0:
         d0:22:d8:f8:c1:80:44:e6:71:a1:d0:3b:a7:ef:27:42:b1:07:
         74:24:58:52:bb:f5:35:6b:28:54:d0:b7:7b:08:e4:57:89:50:
         99:bc:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----