Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e39362e302f31392d3234203d3e2031323339.roa
File:                     34302e3138332e39362e302f31392d3234203d3e2031323339.roa (raw, json)
Hash identifier:          BsK+5Khc/wlMBO9LQORUCqFJ9tukVfrZd+Gfynbou+A=
Subject key identifier:   60:20:44:03:01:EC:CC:8C:C2:64:63:CC:CC:D5:F1:51:2E:02:5A:FB
Certificate issuer:       /CN=8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41
Certificate serial:       6EFF9BE00D52A1B651FA9105B8601D0DF8EF4364
Authority key identifier: 48:04:F8:14:D0:78:11:7A:38:1B:CE:FD:E5:1B:28:F0:53:59:52:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e39362e302f31392d3234203d3e2031323339.roa
Signing time:             Wed 16 Aug 2023 07:20:52 +0000
ROA not before:           Wed 16 Aug 2023 07:15:52 +0000
ROA not after:            Wed 14 Aug 2024 07:20:52 +0000
asID:                     1239
IP address blocks:        40.183.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ff:9b:e0:0d:52:a1:b6:51:fa:91:05:b8:60:1d:0d:f8:ef:43:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41
        Validity
            Not Before: Aug 16 07:15:52 2023 GMT
            Not After : Aug 14 07:20:52 2024 GMT
        Subject: CN=6020440301ECCC8CC26463CCCCD5F1512E025AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:34:8a:7f:70:7f:1f:51:15:dd:b0:88:55:
                    17:85:36:cb:d7:12:1c:e1:dd:d6:88:6d:93:7f:aa:
                    6d:f1:b3:90:3d:47:b1:0f:c7:1d:37:75:39:33:f3:
                    16:ef:05:bd:bd:62:21:2e:da:59:f7:3a:dc:1c:8b:
                    c2:de:bb:be:72:93:b2:e2:42:32:a0:e9:1c:ee:4d:
                    b5:93:7b:6e:22:d2:08:8e:3d:d3:24:38:d0:1b:83:
                    98:23:93:6b:59:9c:4e:7e:4f:a8:e8:d8:20:d5:08:
                    4e:7a:c9:15:be:9e:51:7e:7a:7b:02:96:43:5f:d0:
                    35:96:47:0a:84:65:8f:33:8e:29:ad:7a:b7:25:0e:
                    c5:6b:37:59:fd:61:a6:b8:76:b7:90:d3:38:2f:8c:
                    2e:83:7f:a5:cc:0d:b5:b5:3a:72:cd:f3:a0:e9:fb:
                    6d:fd:a1:67:83:83:d8:89:7a:a3:65:7d:e7:9c:a9:
                    4a:10:5a:56:ee:73:7b:2e:0b:97:a4:98:64:db:de:
                    b5:56:fe:f8:86:38:68:d9:7d:51:d4:a7:d9:27:dc:
                    76:fa:f8:8d:c4:3e:26:bc:bc:e8:2e:67:ad:44:29:
                    fb:c0:1d:2b:8f:d6:2c:7d:1a:ee:f7:13:94:6c:8e:
                    91:48:9b:7e:8e:18:fd:d7:f9:33:3b:45:c7:27:d5:
                    7e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:20:44:03:01:EC:CC:8C:C2:64:63:CC:CC:D5:F1:51:2E:02:5A:FB
            X509v3 Authority Key Identifier:
                keyid:48:04:F8:14:D0:78:11:7A:38:1B:CE:FD:E5:1B:28:F0:53:59:52:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/4804F814D078117A381BCEFDE51B28F053595252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e39362e302f31392d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:40:b4:5a:b2:40:15:b6:bd:88:44:40:e0:de:46:20:4d:df:
         45:73:e1:c8:28:19:db:53:8c:76:12:e8:56:b8:bf:d2:d8:84:
         b9:9e:19:ca:10:f2:f5:6e:0e:49:d8:3c:69:59:86:38:50:a7:
         12:1f:b6:b6:68:90:4d:d5:e6:1c:99:24:8c:61:f8:2d:c2:ad:
         1e:d4:a0:7d:28:a4:ba:d3:67:18:c7:aa:87:fe:2c:99:e1:11:
         72:a9:5f:7f:b1:de:2a:33:7a:cb:76:e1:ca:0c:93:04:47:52:
         52:c4:41:c6:f9:2b:3f:03:71:92:e6:18:17:d6:c4:70:47:2c:
         0f:b4:2f:28:2e:18:a8:31:8c:9c:78:3f:2a:68:f5:b8:e7:ac:
         26:18:52:ce:79:fa:b5:1a:b1:b0:f1:0a:ea:fa:48:9d:64:e0:
         79:7b:75:bb:11:8d:13:eb:77:73:1c:d5:43:2e:6a:57:d5:a1:
         bd:d6:9a:c8:12:63:35:2a:86:41:37:a8:5c:dc:7b:54:28:63:
         5c:44:ff:9c:0e:5e:ae:a9:ad:ce:de:d7:25:93:11:9d:1d:02:
         51:0f:de:1d:4d:1e:ff:4b:8a:53:29:e1:08:5d:1c:54:b3:5a:
         c3:6c:5d:cf:ae:fe:6e:a1:49:48:76:af:0f:85:25:f7:a8:7c:
         84:ce:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----