Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/097b66f75e13414693e202b15a5ad865/0/3137332e3231342e3231382e302f32332d3233203d3e203231373433.roa
File:                     3137332e3231342e3231382e302f32332d3233203d3e203231373433.roa (raw, json)
Hash identifier:          g16T6QllaebUMBH0YJWNewzVFqiA0aLleCLBcpZ89iw=
Subject key identifier:   0D:24:49:3D:02:67:E7:E1:BB:45:F7:84:89:25:E5:D7:BB:F1:B2:EB
Certificate issuer:       /CN=12fd2c549742521da66b6716832087fbfe161f15a3c7169f77
Certificate serial:       2140F358EEB4A8EAC6D99EE7073E0206AD26F74B
Authority key identifier: 96:74:74:21:88:93:CA:3A:EC:5B:AE:58:8F:B3:24:63:2A:EF:DA:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1320d79e-617c-4af5-9aeb-3946327a4c10/12fd2c549742521da66b6716832087fbfe161f15a3c7169f77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/097b66f75e13414693e202b15a5ad865/0/3137332e3231342e3231382e302f32332d3233203d3e203231373433.roa
Signing time:             Tue 29 Apr 2025 16:33:16 +0000
ROA not before:           Tue 29 Apr 2025 16:28:16 +0000
ROA not after:            Tue 28 Apr 2026 16:33:16 +0000
asID:                     21743
IP address blocks:        173.214.218.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:40:f3:58:ee:b4:a8:ea:c6:d9:9e:e7:07:3e:02:06:ad:26:f7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd2c549742521da66b6716832087fbfe161f15a3c7169f77
        Validity
            Not Before: Apr 29 16:28:16 2025 GMT
            Not After : Apr 28 16:33:16 2026 GMT
        Subject: CN=0D24493D0267E7E1BB45F7848925E5D7BBF1B2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:f4:70:20:a8:5e:b5:5b:d4:91:3c:10:09:
                    1c:bf:f4:e2:61:72:c1:1e:94:18:bc:bf:90:d8:e4:
                    86:e9:84:b9:6f:33:f5:22:29:72:f2:95:86:69:bb:
                    77:d1:80:7d:ee:74:92:42:cf:fa:a9:f7:76:90:a5:
                    a7:6d:18:86:91:d1:cb:a2:5b:dc:b9:ee:16:bc:46:
                    cb:d0:7b:bf:75:5f:be:93:ee:ba:3f:61:d3:1a:44:
                    98:7c:7a:77:27:dc:ac:17:ae:00:45:13:d1:c8:85:
                    e4:a0:91:56:76:b5:55:bc:46:b5:90:9a:02:a4:bd:
                    4e:b4:6e:66:a9:86:66:cb:0c:2f:ab:a3:75:f3:f9:
                    ab:4f:13:af:80:44:0c:78:4a:d0:9f:39:36:98:de:
                    17:df:11:86:80:2a:ec:ad:f8:1f:0a:d2:5c:6c:ba:
                    51:03:dc:56:dc:4e:93:b1:4c:14:55:b8:6c:cc:df:
                    b6:e6:48:dc:f1:8a:76:99:d9:21:81:92:5c:00:ad:
                    d7:0d:73:56:5f:a2:19:51:b8:e5:a8:32:b4:fd:4d:
                    53:53:95:23:64:48:7d:9f:04:09:4f:e5:62:9b:98:
                    42:1d:6b:41:a2:aa:af:7d:28:9f:c3:f3:56:af:b6:
                    90:9b:18:a7:e4:79:5d:90:81:b7:29:e3:57:ed:83:
                    96:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:24:49:3D:02:67:E7:E1:BB:45:F7:84:89:25:E5:D7:BB:F1:B2:EB
            X509v3 Authority Key Identifier:
                keyid:96:74:74:21:88:93:CA:3A:EC:5B:AE:58:8F:B3:24:63:2A:EF:DA:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/097b66f75e13414693e202b15a5ad865/0/967474218893CA3AEC5BAE588FB324632AEFDA80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1320d79e-617c-4af5-9aeb-3946327a4c10/12fd2c549742521da66b6716832087fbfe161f15a3c7169f77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/097b66f75e13414693e202b15a5ad865/0/3137332e3231342e3231382e302f32332d3233203d3e203231373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:b9:fd:51:ef:60:fe:ed:a7:64:23:d8:d4:c2:09:8b:f7:08:
         60:50:bc:20:24:dc:ee:99:34:aa:e8:14:4b:68:db:f1:15:b5:
         24:34:95:74:ac:ba:4f:f2:3e:36:9b:e1:82:17:d6:55:73:5c:
         0e:27:1b:a6:05:f9:4d:2d:77:a8:95:aa:97:58:f6:12:25:a5:
         7a:ae:26:1b:3a:a0:33:e6:79:a2:3d:0e:e0:02:a7:9a:94:09:
         dc:6e:a3:fd:52:8b:c5:c1:35:c0:c6:c8:10:b5:ef:26:06:b8:
         3f:f5:19:4b:b3:61:ed:97:9c:93:e3:d6:e4:11:20:c8:60:62:
         13:fc:d7:98:40:17:97:94:af:6d:ed:65:c5:b6:cc:6e:3a:ce:
         28:18:02:cc:79:47:30:12:67:f3:ff:8c:e8:47:29:23:8b:7a:
         61:8d:bd:79:85:10:48:fe:1b:55:86:24:cc:02:04:18:ea:6f:
         e7:92:83:9d:ad:fe:e9:96:38:9a:41:c5:3d:2a:e3:0a:f0:f4:
         e8:30:5f:89:3a:3d:7d:3e:23:35:86:6f:26:4c:24:e9:51:c7:
         69:5a:db:7c:15:97:e9:ee:98:25:47:e8:c7:14:e1:10:3b:3e:
         ac:5a:03:0d:81:76:75:59:81:cc:26:3a:d5:9f:1c:50:e2:57:
         33:8f:e6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----