Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          ak7zsMmR0eADOYgpBY5bl5JleBpydsrq1Ok5uGTwhcM=
Subject key identifier:   24:C5:36:F6:99:55:14:3F:42:E4:71:95:58:5A:DC:91:C4:32:AD:20
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       0E5D5106257E81BDAAA0C3633D5EB5729B7E0A35
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Apr 2025 11:14:35 +0000
ROA not before:           Thu 10 Apr 2025 11:09:35 +0000
ROA not after:            Thu 09 Apr 2026 11:14:35 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2e39::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5d:51:06:25:7e:81:bd:aa:a0:c3:63:3d:5e:b5:72:9b:7e:0a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 10 11:09:35 2025 GMT
            Not After : Apr  9 11:14:35 2026 GMT
        Subject: CN=24C536F69955143F42E47195585ADC91C432AD20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:8f:d7:66:2c:e6:85:7c:19:31:d0:38:63:
                    be:ed:33:cc:78:b5:9c:4a:94:bf:2a:92:1a:42:1c:
                    cd:dc:3f:1e:94:f3:f5:6d:e5:23:ce:a8:51:75:08:
                    d1:4a:ce:2e:56:6f:97:df:85:d6:71:8b:82:ec:ab:
                    14:8b:a3:4f:1c:7c:e1:c1:04:02:4a:59:cd:60:ec:
                    74:5f:02:ad:a7:a2:bd:7d:27:d2:0a:e7:ab:47:a3:
                    9c:88:9b:89:d6:d5:19:54:45:74:d2:a0:d5:18:4a:
                    25:32:0a:16:5b:e6:e1:a1:f0:ba:eb:65:39:7f:b6:
                    1a:ff:f7:1a:a9:80:1d:f4:a6:3e:e4:77:f4:8b:ba:
                    16:cd:67:26:4d:fe:72:11:76:87:1d:c3:2d:4b:f2:
                    98:f3:0c:03:c6:4f:df:e5:e5:9f:f4:ab:e5:cc:9d:
                    29:1f:cb:20:0d:63:96:6e:40:b5:af:60:d7:ff:51:
                    12:75:a3:df:de:da:5a:eb:47:d8:c1:0b:8d:f0:4c:
                    28:18:a1:de:16:8f:a2:1f:a9:54:79:d2:7a:f4:49:
                    b0:8d:d9:73:42:fa:c4:62:9b:98:de:a1:f4:bb:50:
                    18:c6:ae:85:38:5b:be:43:72:ac:20:54:33:d7:33:
                    b1:43:ca:9b:2c:2d:f9:37:2c:69:b2:1a:0b:55:f2:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C5:36:F6:99:55:14:3F:42:E4:71:95:58:5A:DC:91:C4:32:AD:20
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2e39::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:ea:47:8e:d6:58:fd:5e:37:10:db:41:df:ff:99:30:d3:3c:
         41:0e:cc:9d:3e:3a:91:71:70:d1:a9:95:6d:02:68:8f:28:b8:
         99:ad:36:e7:3e:bb:bb:d2:4a:18:db:18:d4:3e:20:58:61:73:
         4c:b9:31:2d:d7:cf:14:47:c4:2e:03:d9:53:96:30:e5:fb:22:
         fc:f8:9e:0a:8a:5c:fc:55:c4:4b:28:3b:1f:9c:a8:4b:b4:ec:
         7b:d4:39:24:3e:27:88:6b:88:8e:ff:1b:63:f3:c5:eb:7f:8f:
         72:a0:5d:3d:63:9f:21:4e:b6:18:ad:3c:75:fa:c6:03:2b:d2:
         db:ac:ce:41:56:91:df:be:c7:15:08:a8:93:a9:7b:b9:1f:f6:
         19:f5:93:05:2c:03:51:b4:44:5a:a3:7d:08:f6:c5:32:c6:1c:
         61:34:0d:94:22:26:b1:d2:90:0d:3a:68:82:c9:70:cf:f0:76:
         a7:d2:3b:8e:c8:de:f4:e8:83:3b:67:a7:ea:1b:45:b8:22:10:
         9f:e4:f9:b3:87:1f:85:00:3d:fe:b9:1b:11:78:f9:c3:6e:b9:
         b1:98:88:00:f2:05:1f:91:fa:16:7c:81:e7:3f:83:55:f8:9b:
         9b:d6:c3:7c:45:b1:51:8d:d6:77:86:f0:9e:fc:38:29:22:55:
         e7:9b:04:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----