Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          9eCF42S+TnXR6HMkrK/KQgoCN25risgWbMidFHp8Q7A=
Subject key identifier:   D5:D6:CE:3E:8A:4E:B3:52:16:35:E8:AC:5B:F2:8C:D0:BF:2E:C0:D9
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       01198A672955D113B7CAFC57284AC896D4F8F06C
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 05 Apr 2025 04:49:54 +0000
ROA not before:           Sat 05 Apr 2025 04:44:54 +0000
ROA not after:            Sat 04 Apr 2026 04:49:54 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c32::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:19:8a:67:29:55:d1:13:b7:ca:fc:57:28:4a:c8:96:d4:f8:f0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr  5 04:44:54 2025 GMT
            Not After : Apr  4 04:49:54 2026 GMT
        Subject: CN=D5D6CE3E8A4EB3521635E8AC5BF28CD0BF2EC0D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:9d:b1:14:bd:6c:7b:8c:4d:98:36:64:39:
                    28:e4:4d:04:26:9a:14:0b:0c:55:79:da:93:de:08:
                    e6:69:1b:3a:14:f4:31:ef:77:94:c0:64:e4:71:3f:
                    a7:1f:24:1c:60:2f:76:2d:5a:e9:92:49:11:fb:ba:
                    a4:0f:6c:cb:94:11:f7:33:90:13:e4:2c:9d:2c:82:
                    64:ed:f5:29:d2:5e:36:28:99:74:8e:ea:b0:44:bc:
                    1e:be:28:fb:4e:b7:79:b4:ba:b9:31:6a:04:e7:16:
                    76:3d:e1:41:68:f6:74:3b:03:0c:1e:b6:d2:5b:ce:
                    e5:68:19:86:7f:1e:d5:c7:2c:e7:19:cd:40:ef:d6:
                    88:f7:af:5a:64:8e:15:66:7d:d9:60:46:b2:e8:30:
                    86:e0:e6:99:57:11:bd:df:6c:60:11:4d:e2:87:e8:
                    a2:96:61:2d:ab:90:51:da:52:bf:75:81:eb:1d:c5:
                    9e:65:7a:ae:f5:26:61:13:5b:cf:0c:a4:4e:7e:01:
                    27:e5:41:5e:a4:6c:c6:ea:31:f0:f1:2c:0d:ee:bb:
                    c3:67:f4:03:02:fe:fb:f5:89:0b:76:14:bd:0b:93:
                    66:62:b3:f4:de:ba:00:99:44:46:42:5f:22:9c:cd:
                    3c:1b:2b:80:b1:87:2a:a4:e4:32:89:01:b3:ca:49:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D6:CE:3E:8A:4E:B3:52:16:35:E8:AC:5B:F2:8C:D0:BF:2E:C0:D9
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c32::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:8d:cf:3e:c3:0e:94:32:a5:7d:f2:60:41:f9:7d:98:0e:10:
         ec:82:11:44:8d:62:37:13:f3:ab:4f:76:e9:95:c6:a0:86:af:
         1a:09:fa:aa:1e:b7:8c:f5:1b:a1:3d:94:ef:a9:46:61:58:4a:
         6d:ad:b1:0b:f4:98:d5:08:71:c9:f8:5e:22:09:15:ca:d8:df:
         0f:23:ea:d6:62:e6:ca:a7:3c:78:52:d2:8c:2b:0b:66:0d:c0:
         43:1c:74:fb:1e:0c:fd:2e:ad:9d:e7:af:04:fa:19:d5:1a:9f:
         c0:0c:72:b0:f0:7c:fc:8f:37:93:bc:57:6a:ab:05:8b:8a:97:
         e7:99:e9:49:da:d1:53:73:e1:2a:f2:8c:aa:ea:a8:8f:b6:26:
         8e:8d:a3:4c:61:82:88:fe:39:cc:59:cb:07:d0:a9:dd:d8:52:
         1b:2c:e8:9d:d8:0f:a0:1b:9b:5e:41:4b:77:a1:08:03:ce:2f:
         03:d7:d8:0c:1c:3e:ae:67:d1:10:ed:73:c4:e0:47:0c:53:c2:
         00:9f:19:ca:39:5e:7c:14:c3:11:6c:6e:f9:01:bf:c5:a2:f2:
         4b:9d:b5:a6:ed:cd:b2:7d:4a:ec:c0:3a:14:18:d1:bc:87:20:
         b3:b2:40:31:71:88:db:76:20:49:3a:39:ef:1a:de:c2:92:00:
         ef:20:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----