Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326333373a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326333373a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          le2MAvGTOfEXZzhIaBOuXURUoPNdJLP4FXdVR61B+8c=
Subject key identifier:   C3:58:29:74:72:DF:E3:47:6A:0F:65:FF:62:AB:FB:97:FE:FC:0D:44
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6765C5714416E9E5BAEFCC67F358627AB12653F1
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326333373a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Apr 2025 11:14:31 +0000
ROA not before:           Thu 10 Apr 2025 11:09:31 +0000
ROA not after:            Thu 09 Apr 2026 11:14:31 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2c37::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:65:c5:71:44:16:e9:e5:ba:ef:cc:67:f3:58:62:7a:b1:26:53:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 10 11:09:31 2025 GMT
            Not After : Apr  9 11:14:31 2026 GMT
        Subject: CN=C358297472DFE3476A0F65FF62ABFB97FEFC0D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:56:2d:13:14:62:fd:0d:7f:65:16:27:f6:
                    17:03:be:c0:5f:78:d3:c1:59:61:ca:ed:1e:47:5f:
                    b5:61:8a:92:18:93:d8:b6:a1:91:66:a1:31:97:c7:
                    3e:40:e3:b5:9a:9b:b5:4c:51:2c:3b:d4:3a:1b:66:
                    fe:cd:cf:a8:18:b6:7f:e5:78:f1:96:45:d5:f8:af:
                    38:d6:96:bb:2c:15:dc:e5:df:a0:fc:14:32:95:0d:
                    49:ed:dd:bf:fd:74:15:a4:15:e6:6a:59:80:9f:e6:
                    bf:10:3a:5c:37:06:f1:ae:f3:6f:91:6e:1a:7e:fb:
                    f6:38:05:e9:4e:e4:af:e6:2f:e5:bd:f5:5c:d1:f1:
                    69:45:4d:a3:5a:3f:4f:4c:dc:a6:71:84:b9:80:d5:
                    80:66:98:97:c6:1b:76:b1:f7:1e:e7:2e:d7:83:f8:
                    3b:e9:d4:42:6b:84:af:19:04:a4:dc:af:3a:49:fa:
                    3f:24:c5:db:75:ea:47:b1:c8:1f:18:f2:c3:ee:e2:
                    5b:44:15:86:b5:9f:6d:68:f7:f1:b1:a6:75:39:86:
                    c6:6a:a6:44:69:ee:ba:cd:07:f1:d3:d2:bb:23:ab:
                    d6:9a:f1:13:e0:07:d5:82:bd:cf:fa:ad:76:5b:09:
                    66:7d:2e:83:96:a6:20:94:61:70:75:14:12:ae:85:
                    88:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:58:29:74:72:DF:E3:47:6A:0F:65:FF:62:AB:FB:97:FE:FC:0D:44
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326333373a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2c37::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:7f:f7:75:e0:19:3d:93:38:20:79:11:49:da:90:ff:92:ae:
         3e:59:22:79:e0:c3:23:1b:2c:0a:92:d0:14:57:f8:0b:80:41:
         4d:cc:b8:94:66:8e:4d:be:78:67:8a:da:99:d1:79:9f:e3:c8:
         bc:28:97:d2:d3:a2:24:72:c6:73:f9:13:2e:20:a8:a6:6d:64:
         21:6a:41:1b:0d:89:bd:4b:e0:37:50:e3:c0:0d:96:8f:67:80:
         33:fb:ee:c5:8e:5b:a6:17:f8:2a:75:38:d6:3a:dc:cd:f5:b0:
         95:ab:79:25:48:4c:ee:dd:d5:59:46:89:0e:c4:dd:c2:d0:20:
         20:5c:cc:8c:41:1e:f7:2d:63:48:a7:fd:f6:49:d6:47:21:22:
         7a:7e:a0:ac:6b:bb:9c:cd:ed:07:23:27:93:a8:95:8b:34:fd:
         df:d2:a4:f3:f6:94:bf:99:cf:1e:af:9f:b9:44:3b:46:ca:77:
         0a:81:1b:85:6c:5b:47:bc:6e:63:19:f8:65:95:8e:0e:fa:56:
         09:ea:37:f7:60:90:0c:09:2e:75:ef:1c:b0:72:6c:0c:6a:8b:
         95:63:b5:ee:0a:b8:6b:54:0a:97:c2:d2:85:7e:99:0a:0b:57:
         ac:f9:71:2f:a7:2d:5d:29:7a:3f:39:f8:4a:a3:a6:ea:da:b6:
         4d:d1:19:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----