Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6132323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6132323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          fK/dec3WzIUWa1JOl+istBR0idpBUVYDEsV3CbN90BU=
Subject key identifier:   4D:DF:68:3F:25:20:B3:BD:F4:14:21:E8:5D:91:F6:B8:4C:9D:34:B0
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       0A26D079B64FCB75D7F9250B5263BC6F59D0FB97
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6132323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Wed 05 Feb 2025 12:44:11 +0000
ROA not before:           Wed 05 Feb 2025 12:39:11 +0000
ROA not after:            Wed 04 Feb 2026 12:44:11 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:a22::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:26:d0:79:b6:4f:cb:75:d7:f9:25:0b:52:63:bc:6f:59:d0:fb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Feb  5 12:39:11 2025 GMT
            Not After : Feb  4 12:44:11 2026 GMT
        Subject: CN=4DDF683F2520B3BDF41421E85D91F6B84C9D34B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:85:21:52:9b:25:ac:c0:2c:73:84:d9:a3:
                    6e:dc:16:86:8a:33:ef:0f:21:b0:bf:df:91:52:12:
                    04:b9:0d:a2:e8:44:ac:53:57:54:97:d7:6f:64:97:
                    85:33:32:1d:7c:07:a3:dc:ab:3e:63:05:b9:2c:dc:
                    3c:ff:79:df:e9:f1:b9:ba:6d:16:68:03:f1:8f:af:
                    43:ec:33:74:86:33:c1:31:d8:d2:f3:8e:29:8d:f8:
                    81:85:58:1c:0d:8e:76:bd:1a:a2:93:02:6a:61:66:
                    63:27:ba:e5:90:0f:9c:38:17:53:fa:7b:45:92:07:
                    17:5a:91:bc:83:b4:76:6e:56:3d:54:50:11:0f:39:
                    a0:2c:d1:83:ef:ac:94:a7:4c:57:ca:18:2b:56:9a:
                    e9:0c:35:c2:97:ca:97:d0:7d:f1:4c:04:07:f7:df:
                    1c:d0:ab:6f:de:e9:4e:71:2c:42:2b:ab:d0:89:17:
                    87:c2:40:63:12:a2:cd:e2:eb:6a:1a:08:ef:a9:1c:
                    59:18:1c:d0:3f:b3:87:96:0f:25:97:f8:b7:f8:70:
                    8d:c6:44:0a:fd:04:c0:db:7d:e8:14:0c:81:0c:ab:
                    f5:ba:82:32:51:6b:a4:b9:e1:21:15:89:48:30:6f:
                    93:7e:1e:a0:4e:e5:76:dc:44:6a:1d:19:d4:c5:00:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DF:68:3F:25:20:B3:BD:F4:14:21:E8:5D:91:F6:B8:4C:9D:34:B0
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6132323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:a22::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:81:45:ba:98:f5:ff:d5:78:ac:d8:3c:34:2d:18:38:a3:79:
         fa:51:d0:f3:8b:d5:29:c7:04:9b:a3:b0:9b:b2:72:57:61:8a:
         b7:29:c9:27:71:ed:9b:16:b6:bb:82:c6:11:75:c3:13:81:c1:
         5a:47:39:69:2d:5f:cc:86:93:d2:bd:a9:7a:18:5d:6b:ea:c0:
         c7:fb:b2:2b:fa:2d:5d:4d:fb:73:37:24:a1:02:75:08:cb:f8:
         60:40:ef:77:6c:b8:72:e0:7e:62:39:5f:67:24:97:a8:75:77:
         02:57:cc:1a:12:f7:16:af:60:33:9b:74:21:c0:73:05:05:61:
         d8:e8:72:18:2a:39:a2:53:2e:7a:5b:6c:ca:18:88:51:c6:e4:
         6f:8d:cb:93:fd:a3:65:50:4f:8b:96:e6:3c:4f:8f:10:71:cc:
         16:a4:ae:61:9b:c3:f5:0b:74:29:2a:a0:1d:ec:6a:29:02:68:
         df:15:1f:72:a6:b8:ad:ba:54:0a:4b:b7:fc:f9:e0:cf:e1:f1:
         2d:12:d7:eb:ad:63:54:27:fc:54:0c:31:97:77:8a:f1:50:16:
         87:69:00:51:3d:6d:f6:06:92:30:cd:4d:a6:f1:f6:9d:49:ae:
         28:eb:63:47:e0:ad:18:28:2d:f6:f2:56:4e:87:81:b9:b0:39:
         e2:98:56:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----