Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          yVp3brUgzUpGMdsvuWYREG/RHJMpPPFVqmlHjPMLLiI=
Subject key identifier:   AA:7A:99:ED:D4:91:00:EF:D4:56:57:05:08:6D:0C:DC:74:A5:83:26
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       18A9F547DAB19C5600BD11EA781BCEEED16DF065
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Apr 2025 11:14:38 +0000
ROA not before:           Thu 10 Apr 2025 11:09:38 +0000
ROA not after:            Thu 09 Apr 2026 11:14:38 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2f3a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a9:f5:47:da:b1:9c:56:00:bd:11:ea:78:1b:ce:ee:d1:6d:f0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 10 11:09:38 2025 GMT
            Not After : Apr  9 11:14:38 2026 GMT
        Subject: CN=AA7A99EDD49100EFD4565705086D0CDC74A58326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:fc:6f:7c:ac:07:3a:7a:1d:c9:59:14:44:
                    c8:91:d1:7c:71:f7:b3:b0:12:c8:63:93:63:1e:10:
                    14:ab:cb:de:b2:3f:2d:74:5c:9b:53:3a:f0:78:cf:
                    b1:7f:36:f5:95:1e:83:a4:44:4e:96:65:c0:e5:37:
                    8a:ca:f1:36:7b:64:8b:32:d2:f8:13:30:3f:35:07:
                    db:7b:bb:72:ae:29:af:76:ec:6a:83:a3:85:04:6d:
                    a2:7d:df:1f:b1:62:63:e6:b3:05:ad:3d:26:c0:17:
                    d2:94:91:ac:36:6d:ab:01:cd:ce:62:78:fb:93:58:
                    20:73:63:42:40:37:c7:69:cb:a9:e7:63:f5:b4:ac:
                    63:24:79:67:ed:92:ff:6c:c6:5a:3e:d5:fc:f1:80:
                    e8:0a:f8:19:d9:6f:35:89:ae:1b:bd:a1:69:00:69:
                    ae:4d:c2:e8:bc:29:04:fc:c9:59:95:a3:40:8e:c3:
                    ad:1f:b6:bf:b1:13:9b:23:5c:b2:cb:65:30:5b:9b:
                    5d:78:32:48:f6:ed:66:2d:5f:7b:18:4e:70:51:91:
                    8d:4b:76:a0:f9:3e:ba:2e:42:76:f0:99:ca:fc:6b:
                    bd:d8:da:39:bd:8e:aa:e1:b7:6a:26:04:31:7a:f5:
                    f5:0b:4d:dc:a7:e8:21:7f:41:2a:23:40:bb:53:23:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7A:99:ED:D4:91:00:EF:D4:56:57:05:08:6D:0C:DC:74:A5:83:26
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2f3a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:fd:6f:c4:77:41:0b:f6:4c:bb:59:67:89:1a:a7:1a:e8:9e:
         f7:e6:cb:9b:ef:3d:38:37:b2:a2:17:55:0c:4f:be:3d:85:93:
         71:9d:f3:37:7d:d4:7a:90:97:a4:e5:6e:4f:9d:63:fa:62:7d:
         53:79:31:cb:44:88:2d:93:4c:73:31:48:3e:72:9b:e8:dc:35:
         31:9b:53:7b:1a:95:c3:96:32:1c:68:10:8b:bb:29:d1:dc:f8:
         72:86:29:4b:b3:e2:8c:45:38:b4:67:13:79:48:4d:34:83:a3:
         a3:de:ad:b7:b0:37:8d:6b:cc:e0:1b:8d:c8:03:19:fd:e5:e6:
         4e:bd:32:e5:d8:34:29:82:71:30:59:7b:26:5b:6b:90:5a:97:
         d7:a5:70:64:73:92:14:05:57:ed:4d:f5:9b:87:90:ac:f4:cc:
         b8:be:e2:3a:89:08:f6:a7:64:e9:65:5e:57:e4:17:c2:c2:cf:
         75:f9:ef:8e:64:26:c4:76:af:ca:42:ce:1b:aa:15:21:6e:bd:
         02:c4:f6:6f:1f:c0:81:af:eb:c2:03:08:47:ed:13:3c:c2:87:
         a0:ee:19:32:77:3e:d7:02:5b:67:d4:ec:30:aa:90:c7:90:34:
         83:5b:7a:97:1f:f3:a2:49:b8:98:b0:80:8a:70:9c:85:16:02:
         a7:3c:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----