Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3132382e302f31392d3234203d3e20383334.roa
File:                     34302e3138332e3132382e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier:          pHIspmUm/m/0NCc0i5I2phy21TBjXXijk35Dg6ghNH8=
Subject key identifier:   FE:A2:B6:80:29:E9:C9:18:E7:54:DB:FD:F7:47:4C:0A:8D:82:38:CA
Certificate issuer:       /CN=8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41
Certificate serial:       7F7A7CA72A4DCE6B5D8C68CB864D9803E20AE48B
Authority key identifier: 48:04:F8:14:D0:78:11:7A:38:1B:CE:FD:E5:1B:28:F0:53:59:52:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3132382e302f31392d3234203d3e20383334.roa
Signing time:             Wed 16 Aug 2023 07:20:52 +0000
ROA not before:           Wed 16 Aug 2023 07:15:52 +0000
ROA not after:            Wed 14 Aug 2024 07:20:52 +0000
asID:                     834
IP address blocks:        40.183.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7a:7c:a7:2a:4d:ce:6b:5d:8c:68:cb:86:4d:98:03:e2:0a:e4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41
        Validity
            Not Before: Aug 16 07:15:52 2023 GMT
            Not After : Aug 14 07:20:52 2024 GMT
        Subject: CN=FEA2B68029E9C918E754DBFDF7474C0A8D8238CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:b2:4a:9b:d1:fd:02:75:1a:7f:6e:0c:cf:
                    bd:13:3c:64:ae:c5:e5:53:77:6a:6e:40:c6:4b:ec:
                    65:ac:e4:4e:2b:b8:b0:ba:09:6b:e4:7b:9f:99:08:
                    9d:84:34:bf:77:f0:ba:ea:b2:7b:a8:94:42:ce:1b:
                    c7:07:0d:5f:7b:50:73:62:35:e6:5c:7c:49:39:56:
                    d1:23:4c:f9:37:5e:e0:ce:61:03:d3:5b:6b:ce:d6:
                    08:ae:55:93:67:24:e9:aa:f1:d9:4e:5e:66:09:c5:
                    36:8c:c0:3e:f1:5b:f8:63:bf:bb:78:48:73:0e:00:
                    1c:21:25:6e:9c:74:db:b6:bf:be:3c:1d:ea:70:ec:
                    30:ae:95:f7:56:e1:43:a4:7c:48:e4:20:a1:44:88:
                    b9:0e:af:a0:18:f2:7f:6f:bc:75:25:31:a2:c1:e3:
                    5a:c7:be:81:bc:92:64:60:e6:15:fa:a1:7a:da:4c:
                    91:2e:a5:36:0a:46:35:97:34:95:db:41:d0:8c:48:
                    ac:a5:37:34:07:98:4c:68:e0:07:4f:78:35:b4:18:
                    14:61:76:37:7b:63:42:97:dd:0a:99:bf:e5:79:b8:
                    64:d9:0f:5a:9b:86:93:df:56:4b:a2:63:bb:01:54:
                    e9:12:a1:b0:25:bc:6c:3f:d1:f4:42:c6:8f:f1:dc:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A2:B6:80:29:E9:C9:18:E7:54:DB:FD:F7:47:4C:0A:8D:82:38:CA
            X509v3 Authority Key Identifier:
                keyid:48:04:F8:14:D0:78:11:7A:38:1B:CE:FD:E5:1B:28:F0:53:59:52:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/4804F814D078117A381BCEFDE51B28F053595252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3132382e302f31392d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:ed:0d:e6:d1:84:b8:27:9a:09:1b:4d:11:7b:37:8a:30:53:
         5d:7a:ec:ea:f9:24:64:d5:ca:a3:aa:ed:35:5c:ee:e5:c1:10:
         e8:4a:fe:77:06:fb:24:65:a3:10:50:ae:cc:c4:e4:48:fc:ab:
         35:35:21:d5:c9:f8:6c:c8:6e:fe:8f:cc:0e:c0:a7:1b:7e:7e:
         55:11:99:22:63:ca:88:4b:2e:01:90:40:09:0a:86:4b:5e:3f:
         22:db:9c:b3:a8:87:89:4f:d4:73:ba:39:58:30:17:fd:22:32:
         04:51:c4:67:c0:1b:2f:35:af:83:a2:28:e5:33:7f:47:31:d5:
         50:64:a8:ab:98:d4:55:87:e7:da:41:c9:5e:f9:b0:52:c7:78:
         a2:0c:51:70:34:96:3f:35:a1:5c:0a:2c:74:4f:7c:15:f4:25:
         d0:78:6a:24:ea:89:f5:ee:0a:53:ae:fa:8f:ad:d2:c0:8a:66:
         9c:2b:d3:32:c9:9b:ef:d6:e4:da:1f:c9:2c:81:a1:52:a2:b5:
         7d:06:85:8c:e8:8e:15:a2:da:72:6c:64:d9:d0:a0:b5:de:4e:
         d4:1e:6c:a8:7b:b3:a0:d2:fa:1e:98:68:6d:30:d9:8b:97:e3:
         1f:c0:69:ec:3d:41:8e:1b:ad:db:77:f8:68:80:30:61:f9:70:
         3d:71:e4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----