Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326433383a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326433383a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          psFhA8plxWP9VCk6XquJ0xepiefqdV2LIiL43+828HE=
Subject key identifier:   2C:4A:40:BB:9B:A4:1E:B5:39:7E:FB:E7:F4:AD:B3:58:56:34:A0:E2
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6C5FCDC6D5B97993D64C916A645A5C408FB84DDC
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326433383a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Apr 2025 11:14:33 +0000
ROA not before:           Thu 10 Apr 2025 11:09:33 +0000
ROA not after:            Thu 09 Apr 2026 11:14:33 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2d38::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5f:cd:c6:d5:b9:79:93:d6:4c:91:6a:64:5a:5c:40:8f:b8:4d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 10 11:09:33 2025 GMT
            Not After : Apr  9 11:14:33 2026 GMT
        Subject: CN=2C4A40BB9BA41EB5397EFBE7F4ADB3585634A0E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:99:26:5d:44:d7:7f:4d:9d:d0:64:7e:fa:
                    ba:af:e7:54:9b:4b:10:a4:e2:06:65:19:26:d9:6e:
                    62:33:95:3f:80:11:58:ba:97:51:86:43:b1:cc:67:
                    79:9c:b1:eb:58:a6:3b:36:ed:62:e7:26:71:57:b2:
                    88:9d:7a:27:c2:fe:53:87:af:ac:6b:33:62:48:f3:
                    45:85:d8:13:bf:de:cb:3d:4c:76:bf:6a:2b:b9:bc:
                    9d:73:01:cd:e8:45:a6:05:8e:a1:dc:a2:96:e0:6d:
                    35:9d:b4:8c:7f:72:14:08:7c:26:0c:27:44:8c:4e:
                    8f:8d:49:2e:e9:8b:24:51:20:f6:de:d2:80:28:23:
                    c6:aa:56:78:4d:80:85:5c:57:ea:53:01:84:24:41:
                    68:b0:3c:aa:55:42:f5:98:4c:e3:c8:f8:c2:3c:62:
                    f6:7b:44:ce:f8:56:52:6e:6c:04:e0:fe:c1:bf:bb:
                    e5:3e:a4:83:cd:76:4e:cc:c6:ca:09:ec:f1:5f:77:
                    11:8d:5c:92:98:ca:8e:f7:b8:44:dc:2a:1a:a4:33:
                    07:e4:cb:74:84:08:7b:ae:ff:aa:eb:06:72:49:5c:
                    44:e4:d5:86:f6:8e:9b:75:82:52:6a:66:d9:f8:1f:
                    b2:83:26:15:99:27:11:94:f9:83:5b:bc:65:93:fa:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:40:BB:9B:A4:1E:B5:39:7E:FB:E7:F4:AD:B3:58:56:34:A0:E2
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326433383a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2d38::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:c3:56:6d:08:01:90:f1:9a:ea:86:35:fb:87:50:64:74:a1:
         d2:b6:11:a8:d3:5a:bc:83:0e:e0:37:37:ed:68:31:2f:85:98:
         ea:94:fc:18:df:c8:12:8c:d5:85:5c:6d:5d:14:6a:42:81:78:
         2b:11:9e:2e:71:02:f3:26:5b:2b:30:66:1d:cc:8d:7a:12:b0:
         d4:99:f8:07:00:5e:07:49:08:a1:8b:a6:ac:1b:f9:05:6e:1e:
         2c:03:96:62:ea:d3:32:05:b4:6e:4d:c6:fb:1e:94:82:ef:a3:
         c4:0b:7a:95:94:8d:bd:c0:a9:7d:51:60:9b:59:35:cd:87:79:
         4e:c8:d9:ae:1b:b8:4c:7f:18:58:b8:97:7e:93:82:c1:49:84:
         cd:1a:b8:37:61:14:36:4c:a8:74:c9:ff:34:e3:81:70:f1:11:
         82:2c:2a:30:a3:e0:77:f8:53:a3:7e:5d:53:36:f7:0e:e4:d0:
         a9:26:b4:80:e6:e2:ab:ad:d4:db:79:71:aa:98:fd:de:77:5a:
         5c:53:1d:3d:2e:77:b2:c0:eb:8d:b7:00:90:42:31:2a:b8:98:
         8e:db:9e:c9:3b:69:83:e0:6b:26:0d:5b:75:95:4d:dd:ed:b5:
         db:b6:e0:30:7b:b8:f3:9e:41:f4:63:48:a7:59:1a:2b:43:56:
         c3:b7:b4:16
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUbF/NxtW5eZPWTJFqZFpcQI+4TdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNTA0MTAxMTA5MzNaFw0yNjA0MDkxMTE0MzNaMDMxMTAvBgNV
BAMTKDJDNEE0MEJCOUJBNDFFQjUzOTdFRkJFN0Y0QURCMzU4NTYzNEEwRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zZkmXUTXf02d0GR++rqv51Sb
SxCk4gZlGSbZbmIzlT+AEVi6l1GGQ7HMZ3mcsetYpjs27WLnJnFXsoideifC/lOH
r6xrM2JI80WF2BO/3ss9THa/aiu5vJ1zAc3oRaYFjqHcopbgbTWdtIx/chQIfCYM
J0SMTo+NSS7piyRRIPbe0oAoI8aqVnhNgIVcV+pTAYQkQWiwPKpVQvWYTOPI+MI8
YvZ7RM74VlJubATg/sG/u+U+pIPNdk7MxsoJ7PFfdxGNXJKYyo73uETcKhqkMwfk
y3SECHuu/6rrBnJJXETk1Yb2jpt1glJqZtn4H7KDJhWZJxGU+YNbvGWT+ig3AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQULEpAu5ukHrU5fvvn9K2zWFY0oOIwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
Mi8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMyNjQzMzM4M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QtODANBgkqhkiG9w0BAQsF
AAOCAQEAfsNWbQgBkPGa6oY1+4dQZHSh0rYRqNNavIMO4Dc37WgxL4WY6pT8GN/I
EozVhVxtXRRqQoF4KxGeLnEC8yZbKzBmHcyNehKw1Jn4BwBeB0kIoYumrBv5BW4e
LAOWYurTMgW0bk3G+x6Ugu+jxAt6lZSNvcCpfVFgm1k1zYd5TsjZrhu4TH8YWLiX
fpOCwUmEzRq4N2EUNkyodMn/NOOBcPERgiwqMKPgd/hTo35dUzb3DuTQqSa0gObi
q63U23lxqpj93ndaXFMdPS53ssDrjbcAkEIxKriYjtueyTtpg+BrJg1bdZVN3e21
27bgMHu4855B9GNIp1kaK0NWw7e0Fg==
-----END CERTIFICATE-----