Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          kCzaMRvIbCzu/i7LFLwsBFLaTXsI8I/j2AMkh5Bqsvo=
Subject key identifier:   61:90:B2:C5:D5:09:29:E9:17:85:B9:10:41:1D:F2:5D:F2:96:4C:86
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       0F9608A180D5B84913E12E886BBFB2CCA8545176
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Apr 2025 11:14:18 +0000
ROA not before:           Thu 10 Apr 2025 11:09:18 +0000
ROA not after:            Thu 09 Apr 2026 11:14:18 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2833::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:96:08:a1:80:d5:b8:49:13:e1:2e:88:6b:bf:b2:cc:a8:54:51:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 10 11:09:18 2025 GMT
            Not After : Apr  9 11:14:18 2026 GMT
        Subject: CN=6190B2C5D50929E91785B910411DF25DF2964C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:06:7b:c6:39:ab:8f:de:12:17:6c:80:45:
                    c8:a0:94:58:4a:a3:3d:4e:c4:d4:d3:12:43:c7:e6:
                    47:17:6c:ba:e0:d2:25:d2:89:8f:02:b8:8b:01:e5:
                    f8:31:fa:0e:47:9c:00:00:db:6c:c3:d5:79:1c:71:
                    34:b2:83:75:4c:75:48:ba:b7:8f:7a:1f:48:03:69:
                    d5:36:3f:78:66:cf:15:fa:91:a1:c7:3d:d4:b0:b8:
                    a3:46:00:ca:4e:55:99:2e:b3:40:16:21:a0:6e:ab:
                    ff:2b:6b:34:74:1b:da:70:da:fb:5d:82:62:85:51:
                    1f:53:19:a0:12:43:b7:bd:81:b9:06:86:48:cd:74:
                    42:65:f6:80:e2:f4:83:bb:63:f0:e5:72:6c:99:fb:
                    16:89:c8:11:e0:30:b3:78:e5:0d:b6:bd:19:ba:b3:
                    fe:7a:a8:36:40:c8:91:42:f2:c3:68:e0:25:0a:60:
                    5f:68:aa:98:95:c4:1e:8f:36:85:92:78:64:3f:94:
                    19:aa:12:91:05:ad:d2:eb:56:b7:00:d5:d6:92:18:
                    76:80:9a:7e:68:ac:15:12:ed:cc:a8:9c:4e:9f:07:
                    fd:7e:c1:88:02:cd:68:76:bc:02:38:46:c4:f3:6f:
                    26:3d:e2:e1:af:87:1f:fe:e8:08:9c:79:84:4f:20:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:90:B2:C5:D5:09:29:E9:17:85:B9:10:41:1D:F2:5D:F2:96:4C:86
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2833::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:a9:0a:28:a8:d9:de:57:88:14:d1:58:2b:d7:80:f8:50:fc:
         4b:40:15:c4:65:8c:9c:f3:d3:8d:ae:59:d8:58:68:d1:c5:9d:
         25:9a:52:77:9f:11:49:01:d0:c4:84:d2:1f:a4:ab:02:d9:4b:
         54:9f:05:2d:98:c4:29:d8:9b:f1:87:fd:65:b4:38:a7:4b:cb:
         0b:ee:27:d0:ec:28:4e:74:3a:63:4c:13:e5:69:c0:6e:7b:76:
         51:bd:4c:23:b6:10:08:98:47:03:e5:db:60:2a:7f:af:6a:d7:
         73:a8:9f:75:61:9a:64:73:5b:4c:7e:4b:de:62:01:31:f7:2a:
         a4:3b:b4:6c:9d:3b:dd:8f:8d:eb:51:7a:39:48:0f:a2:d9:11:
         a1:d4:b2:81:8b:65:ae:8a:d8:8a:28:f7:0d:d4:9f:e5:8f:d8:
         3f:76:cf:34:06:2b:4c:4e:c3:3e:f7:9b:5a:b3:18:43:9f:0d:
         d9:27:b2:28:27:6e:5f:8f:ea:03:79:cc:e0:f3:10:a1:e7:fd:
         94:14:93:ec:e6:04:df:fc:d5:4a:f3:de:75:9f:45:3c:f0:f8:
         79:d5:62:9c:9c:b0:56:fc:0d:23:b2:b7:e1:d3:2a:0d:41:ad:
         9f:c6:e6:92:d4:1a:cc:b9:fc:de:01:a1:9b:a8:6e:65:a2:6f:
         2f:f0:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----