Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313632383a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313632383a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          MWh0YVG379UGfXHQvd2wJswVf0BKVByX8Q/f28/Jng0=
Subject key identifier:   0A:7B:B2:6D:69:DF:F5:A7:50:FA:7E:52:65:1B:A5:BD:64:BD:92:A6
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       10089385AD56BE84E8B3C7824D3D9915ACCCA43A
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313632383a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 08 Feb 2025 18:24:52 +0000
ROA not before:           Sat 08 Feb 2025 18:19:52 +0000
ROA not after:            Sat 07 Feb 2026 18:24:52 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1628::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:08:93:85:ad:56:be:84:e8:b3:c7:82:4d:3d:99:15:ac:cc:a4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Feb  8 18:19:52 2025 GMT
            Not After : Feb  7 18:24:52 2026 GMT
        Subject: CN=0A7BB26D69DFF5A750FA7E52651BA5BD64BD92A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:c5:35:39:1e:b6:ab:b5:09:81:22:02:8e:
                    71:41:e9:a6:c8:69:58:c5:af:10:f9:7c:a0:a5:8a:
                    2c:d4:45:8b:93:ac:c8:21:27:4b:fe:8d:9a:4a:70:
                    9d:2f:57:a0:50:28:b3:e2:07:55:71:8b:95:25:83:
                    99:0f:bc:bd:99:f6:9c:6d:76:c1:d0:39:3d:13:e9:
                    4b:54:60:2c:7d:a2:cf:6a:57:89:97:c1:41:d3:f0:
                    f2:85:b2:48:87:67:78:15:d9:00:6a:77:11:3f:d6:
                    a4:cd:76:bd:66:77:3b:8f:75:6c:a1:28:6c:34:fc:
                    56:01:ae:0b:3f:cf:31:26:35:42:eb:c2:e6:f9:c2:
                    08:e8:ae:c2:a5:e7:07:76:7f:f0:d4:0e:d5:43:ec:
                    43:6c:aa:a2:52:a1:34:61:1f:b7:15:9d:b3:98:bc:
                    a2:3c:73:81:1b:0b:26:06:85:60:e4:38:65:80:df:
                    ef:c5:ec:df:c4:ca:80:57:c1:3c:01:05:ca:25:5c:
                    40:87:6c:c3:3f:0f:91:ec:6e:30:25:db:d0:8b:42:
                    7e:02:55:80:cc:be:0d:41:85:f5:6a:be:11:35:38:
                    1b:8e:db:52:1b:76:6d:ab:b0:78:0f:75:93:d3:cc:
                    d7:a3:7e:10:76:27:29:60:c6:bf:cc:23:30:00:2e:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7B:B2:6D:69:DF:F5:A7:50:FA:7E:52:65:1B:A5:BD:64:BD:92:A6
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313632383a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1628::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:cd:c0:7f:27:0a:02:12:11:88:82:8b:4e:80:d0:5e:8b:4d:
         b3:01:71:24:e5:1d:b8:1a:f9:ce:18:75:26:84:74:04:3a:c8:
         7f:10:b8:14:7e:c2:8f:8a:c4:67:39:35:b0:18:61:1b:4e:1b:
         bb:c2:e9:76:2a:3c:8f:8e:28:d2:53:0f:94:20:6f:88:21:7f:
         d0:91:e9:6a:21:1a:4d:57:fb:66:f7:0a:c8:35:f2:f1:10:cc:
         64:e3:82:71:e8:5b:e7:fe:09:43:7c:8d:11:40:3d:55:5a:25:
         ef:15:40:cd:18:46:ca:a5:62:69:27:0c:b4:84:54:0e:3e:71:
         f2:79:52:a3:d3:e9:b3:e6:94:4c:e0:ea:c6:75:a9:53:13:2f:
         0d:9d:3a:d5:9e:11:7b:86:54:16:83:e3:21:ee:fc:d2:89:c7:
         4f:62:83:ba:0c:9a:0a:ec:d6:3d:fe:95:df:e7:fc:1c:d7:02:
         4f:2d:15:40:9e:26:4c:0a:e1:bf:75:93:e6:70:5d:ec:08:67:
         59:10:ba:25:7d:22:63:ec:fb:a3:32:53:46:7d:f9:e5:67:30:
         07:66:0b:a8:27:ab:ff:4f:da:f3:a9:d7:df:8d:71:af:ed:c7:
         c2:ba:c4:1c:5a:9b:2f:e1:cd:88:ff:ec:d0:d7:ac:d5:1e:c5:
         c5:e5:c8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----