Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3136302e302f31392d3234203d3e203239383032.roa
File:                     34302e3138332e3136302e302f31392d3234203d3e203239383032.roa (raw, json)
Hash identifier:          vuJIe31I07DE/a/ag6GaRPYNc/55fvoIH5JyXU9wGbc=
Subject key identifier:   B6:FB:1B:6E:06:E1:87:02:5A:E7:EE:F8:25:F7:AF:A0:F0:F8:91:7C
Certificate issuer:       /CN=8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41
Certificate serial:       1729263CFF0B53B4199309CB446E776E10659C8D
Authority key identifier: 48:04:F8:14:D0:78:11:7A:38:1B:CE:FD:E5:1B:28:F0:53:59:52:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3136302e302f31392d3234203d3e203239383032.roa
Signing time:             Wed 16 Aug 2023 07:20:51 +0000
ROA not before:           Wed 16 Aug 2023 07:15:51 +0000
ROA not after:            Wed 14 Aug 2024 07:20:51 +0000
asID:                     29802
IP address blocks:        40.183.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:29:26:3c:ff:0b:53:b4:19:93:09:cb:44:6e:77:6e:10:65:9c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41
        Validity
            Not Before: Aug 16 07:15:51 2023 GMT
            Not After : Aug 14 07:20:51 2024 GMT
        Subject: CN=B6FB1B6E06E187025AE7EEF825F7AFA0F0F8917C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e1:84:60:7e:b3:01:16:d7:32:b4:37:5b:08:
                    6f:2d:80:b0:27:5d:3a:e8:4a:f1:04:d8:2e:e5:97:
                    9b:56:5f:ac:51:ad:e5:fb:61:84:79:87:08:2e:16:
                    13:2f:41:62:aa:00:3c:bf:75:35:63:d6:fa:6e:bd:
                    8a:da:a0:91:78:c8:a0:05:c2:b8:36:d8:eb:1b:b9:
                    9c:c6:52:60:0e:46:ca:d2:0c:a1:a4:2c:49:39:94:
                    aa:1c:79:93:2a:81:3b:10:59:2d:9f:1c:5d:0c:dd:
                    e8:92:9a:5b:d1:c8:9d:22:b2:78:40:92:55:23:1c:
                    4c:9e:b6:f5:0f:3f:17:67:70:80:76:bf:a5:fb:e8:
                    51:1d:d1:a9:aa:73:a9:62:06:25:da:2a:04:e4:28:
                    24:bf:e2:c2:da:92:c8:52:0f:7a:5e:13:ed:fa:f3:
                    01:e5:f0:b8:a9:26:0f:3f:5e:24:2e:5d:c7:de:bb:
                    71:35:d2:31:c8:96:fa:28:c4:09:b6:a8:e6:7f:e0:
                    0e:05:4d:2c:c0:94:26:44:db:c9:3d:67:13:64:9c:
                    8d:c1:e0:ac:de:a7:6c:c4:4e:40:2d:0a:31:72:68:
                    db:3e:5d:df:16:9b:a7:56:d2:37:bb:88:ef:ec:90:
                    71:68:1c:b1:ae:cf:be:df:c1:cb:bb:e7:0b:ff:43:
                    3f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FB:1B:6E:06:E1:87:02:5A:E7:EE:F8:25:F7:AF:A0:F0:F8:91:7C
            X509v3 Authority Key Identifier:
                keyid:48:04:F8:14:D0:78:11:7A:38:1B:CE:FD:E5:1B:28:F0:53:59:52:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/4804F814D078117A381BCEFDE51B28F053595252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3136302e302f31392d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:cb:c6:38:c3:6c:e7:a9:46:2c:bb:9d:a7:2c:93:82:03:1e:
         7e:45:aa:ab:84:3f:41:1f:cd:cd:9d:4c:29:ee:eb:ab:4a:28:
         48:4d:f9:0b:79:d2:97:25:21:a9:79:4e:3b:19:4f:43:05:2b:
         30:01:fe:4e:69:e6:db:b2:dc:f0:58:5c:60:43:06:8c:5d:b6:
         39:24:d0:fc:05:65:69:5b:eb:9c:f9:b1:7e:3f:01:d5:ce:72:
         b3:ed:de:d2:49:1f:2e:ac:4c:79:ba:2e:a0:02:77:1c:d4:60:
         17:89:99:e6:2e:6f:20:c7:56:c0:d1:b3:d8:12:99:c9:fd:bb:
         de:6a:fe:60:0d:45:b2:f4:83:34:fb:98:50:92:aa:31:5d:5d:
         cc:f6:2c:58:6b:18:d3:e6:50:f7:93:fc:a6:77:98:6d:d5:a2:
         57:a1:0d:bc:50:33:03:92:4b:46:c6:cf:80:e3:fc:61:9e:c1:
         f2:d1:79:d6:db:f1:11:29:d6:59:04:34:be:f8:7d:7a:90:db:
         f1:c7:35:95:52:a9:61:28:e7:82:84:62:92:4d:2c:d2:d1:09:
         01:54:99:2e:33:f4:07:f5:36:3a:c0:50:a7:0e:58:6d:8b:f8:
         e7:e0:72:51:bc:34:17:4c:f5:e7:1a:6a:68:5a:39:2c:70:cc:
         af:f4:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----