Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6332393a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6332393a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          AVu4hnUhNggwZnhVicDt/wqov/Cxi3+pmds3tz8xb68=
Subject key identifier:   9B:76:13:A5:03:CA:BB:FF:B9:BD:B0:89:E1:63:18:A5:70:7F:89:3F
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       4EC2C0BA19241F03F2E7055F6129D9F60F07D927
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6332393a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 08 Feb 2025 20:32:51 +0000
ROA not before:           Sat 08 Feb 2025 20:27:51 +0000
ROA not after:            Sat 07 Feb 2026 20:32:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c29::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c2:c0:ba:19:24:1f:03:f2:e7:05:5f:61:29:d9:f6:0f:07:d9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Feb  8 20:27:51 2025 GMT
            Not After : Feb  7 20:32:51 2026 GMT
        Subject: CN=9B7613A503CABBFFB9BDB089E16318A5707F893F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ab:bb:d2:7f:8b:c3:95:43:ed:5c:af:4c:a5:
                    f3:e7:97:87:34:9c:b0:b1:0f:a1:95:e1:6e:28:ff:
                    dd:05:3d:0c:92:6e:39:6f:1d:11:f5:bb:e8:9e:fb:
                    0e:00:ec:a7:1c:b9:73:a9:63:bb:a1:5f:2d:b5:3b:
                    ad:bf:e8:f2:a7:6a:a4:10:5f:a0:8d:b6:3d:2a:c4:
                    a9:29:90:70:df:a9:a3:0f:28:32:e0:e2:f5:6b:1f:
                    2d:f5:e4:9f:c4:dc:03:45:63:fb:4d:7a:05:38:69:
                    44:26:ad:f7:26:6a:7f:19:21:ff:55:f1:a8:10:84:
                    95:1f:0b:06:79:16:66:12:8c:f3:12:49:3e:0a:57:
                    47:3e:db:95:2f:35:40:e8:1a:b4:e8:fe:f0:db:3b:
                    da:5b:a8:b7:2d:f8:de:0d:6e:f8:86:ed:ab:7e:4b:
                    46:eb:46:dc:d7:54:d8:5c:5e:4a:df:01:19:25:ef:
                    47:7f:55:35:fa:83:1b:f5:c3:68:60:44:a7:ec:86:
                    62:9a:cc:16:13:39:61:9b:02:b6:e2:5e:dd:9e:db:
                    09:b9:a0:2c:ef:9e:06:f5:ae:d0:c2:58:65:31:22:
                    03:a1:22:fd:16:41:39:ce:e7:6f:c3:c1:07:bb:5a:
                    3c:14:05:3d:2a:eb:f0:33:b4:79:62:8b:97:2e:55:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:76:13:A5:03:CA:BB:FF:B9:BD:B0:89:E1:63:18:A5:70:7F:89:3F
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6332393a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c29::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:f1:f3:e4:41:24:48:e2:eb:a0:49:43:31:2a:60:aa:c7:
         32:f1:4c:a1:06:fc:d8:1a:fc:c5:52:16:81:01:f2:d8:5c:39:
         5c:91:2c:85:38:fb:85:a6:31:3b:80:00:71:58:40:cb:4c:89:
         b0:7c:f9:3c:85:65:e6:2d:0b:15:66:75:75:8b:e7:9d:98:da:
         d7:30:fa:57:99:c6:e8:ef:1c:7b:87:c9:51:8d:c3:35:d9:b6:
         fc:a3:47:ca:70:79:0d:e8:89:ca:28:b7:7e:3c:ce:70:28:ef:
         f2:cb:31:21:56:4a:98:a7:1f:6d:8a:91:3a:4c:15:8a:91:ac:
         50:90:c7:4b:d6:ad:8f:45:2f:2c:25:c4:83:33:bf:16:55:0d:
         69:4a:ae:fb:30:9e:46:f9:9b:fa:78:f4:8d:16:cb:9b:0a:1d:
         04:f8:5f:50:a2:a9:d7:7a:1c:2a:9d:49:83:74:7c:48:57:d3:
         48:52:1e:b5:9c:be:42:55:d0:2d:c6:be:34:86:11:f8:15:cd:
         e3:b4:b7:64:c7:f3:97:94:18:f9:39:0d:3d:78:8c:17:9e:39:
         82:93:7c:eb:29:87:d1:e1:77:2c:c7:c1:6b:45:91:47:2d:d8:
         a0:05:f2:77:29:c5:ea:1b:6b:cf:2f:87:37:d8:44:17:6a:99:
         3b:2a:18:e4
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUTsLAuhkkHwPy5wVfYSnZ9g8H2ScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNTAyMDgyMDI3NTFaFw0yNjAyMDcyMDMyNTFaMDMxMTAvBgNV
BAMTKDlCNzYxM0E1MDNDQUJCRkZCOUJEQjA4OUUxNjMxOEE1NzA3Rjg5M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnq7vSf4vDlUPtXK9MpfPnl4c0
nLCxD6GV4W4o/90FPQySbjlvHRH1u+ie+w4A7KccuXOpY7uhXy21O62/6PKnaqQQ
X6CNtj0qxKkpkHDfqaMPKDLg4vVrHy315J/E3ANFY/tNegU4aUQmrfcman8ZIf9V
8agQhJUfCwZ5FmYSjPMSST4KV0c+25UvNUDoGrTo/vDbO9pbqLct+N4NbviG7at+
S0brRtzXVNhcXkrfARkl70d/VTX6gxv1w2hgRKfshmKazBYTOWGbArbiXt2e2wm5
oCzvngb1rtDCWGUxIgOhIv0WQTnO52/DwQe7WjwUBT0q6/AztHlii5cuVXfxAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUm3YTpQPKu/+5vbCJ4WMYpXB/iT8wHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
Mi8zMjYxMzAzNTNhNjQ2NjYzMzQzYTYzMzIzOTNhM2EyZjM0MzgyZDMxMzIzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QMKTANBgkqhkiG9w0BAQsF
AAOCAQEASwzx8+RBJEji66BJQzEqYKrHMvFMoQb82Br8xVIWgQHy2Fw5XJEshTj7
haYxO4AAcVhAy0yJsHz5PIVl5i0LFWZ1dYvnnZja1zD6V5nG6O8ce4fJUY3DNdm2
/KNHynB5DeiJyii3fjzOcCjv8ssxIVZKmKcfbYqROkwVipGsUJDHS9atj0UvLCXE
gzO/FlUNaUqu+zCeRvmb+nj0jRbLmwodBPhfUKKp13ocKp1Jg3R8SFfTSFIetZy+
QlXQLca+NIYR+BXN47S3ZMfzl5QY+TkNPXiMF545gpN86ymH0eF3LMfBa0WRRy3Y
oAXydynF6htrzy+HN9hEF2qZOyoY5A==
-----END CERTIFICATE-----