Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e392e302f32342d3332203d3e203532303235.roa
File:                     32332e3135342e392e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          FeJmbaoKJOXAR6mcwbyzCqUZPja9gPAyqwfovBx0X2A=
Subject key identifier:   C6:34:51:38:2A:3A:7E:B3:4C:69:AB:5C:E3:8C:33:75:12:42:0A:6E
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       0C58D8257F40A24D9B40EA44AA596B634D1BC377
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e392e302f32342d3332203d3e203532303235.roa
Signing time:             Thu 20 Mar 2025 21:19:08 +0000
ROA not before:           Thu 20 Mar 2025 21:14:08 +0000
ROA not after:            Thu 19 Mar 2026 21:19:08 +0000
asID:                     52025
IP address blocks:        23.154.9.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:58:d8:25:7f:40:a2:4d:9b:40:ea:44:aa:59:6b:63:4d:1b:c3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Mar 20 21:14:08 2025 GMT
            Not After : Mar 19 21:19:08 2026 GMT
        Subject: CN=C63451382A3A7EB34C69AB5CE38C337512420A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:a4:dd:26:23:cf:28:c7:d1:2e:a8:e3:3c:
                    19:2e:6a:0a:7c:43:96:82:0d:05:0d:69:3e:8f:ea:
                    5d:2e:6d:07:19:81:b6:14:27:16:c7:9b:ce:64:ab:
                    3b:71:09:4b:3f:60:f5:ef:08:b7:1c:e7:e3:2c:bc:
                    f1:05:87:15:0c:6d:1d:a3:e5:41:86:e9:cb:2c:fd:
                    c4:e1:db:04:60:9d:f4:ef:84:62:85:5b:75:7d:3e:
                    c5:93:3f:c0:1f:69:b6:97:36:db:6a:16:b0:77:ec:
                    02:01:57:b3:a3:3d:b4:70:ac:58:8c:56:4a:d7:c3:
                    38:0e:79:8e:2c:f5:f2:eb:69:4a:51:c9:72:52:7a:
                    0d:3a:de:de:a3:6a:f6:62:e6:0e:fd:d4:99:cf:69:
                    4f:9f:88:b8:6a:a4:3a:58:a0:f7:37:b0:ae:2f:09:
                    fd:4c:1a:cc:17:54:c0:0c:6d:6c:c2:6d:2b:12:5c:
                    d3:00:4a:61:c9:06:1d:1e:7a:af:26:be:87:4b:07:
                    03:9a:f6:73:b7:ad:01:32:9e:07:bb:50:31:8f:72:
                    ee:a9:79:74:2b:d4:15:37:d6:78:c3:c3:7f:13:ce:
                    8c:ca:51:7c:9f:81:3d:49:ce:b9:c3:dc:3e:51:b6:
                    8b:f8:1a:4c:f2:c0:e4:54:6f:e5:0a:64:ff:ac:16:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:34:51:38:2A:3A:7E:B3:4C:69:AB:5C:E3:8C:33:75:12:42:0A:6E
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e392e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:a2:9f:a3:9a:90:f8:dc:8c:84:f6:e0:42:a9:e1:ed:92:8f:
         ea:df:8d:39:ac:8f:6e:c4:64:49:a6:62:76:80:41:6d:2b:4c:
         8d:3c:b7:61:7a:ad:28:4a:3c:96:ea:f9:08:c6:46:86:a5:8c:
         6f:7b:22:ff:d5:80:db:5b:fa:8e:7d:59:a2:68:ec:f8:1a:0a:
         be:fe:a3:ab:01:99:0d:6d:38:05:2a:a8:6a:dc:17:bd:47:40:
         32:59:22:10:d7:1c:70:9e:b6:4d:64:6b:45:b1:ac:1e:19:94:
         62:1f:99:30:83:a4:50:3e:27:49:cf:09:e9:22:e3:23:b9:5d:
         ce:2a:99:06:96:6e:66:66:39:2f:5e:43:4c:a6:50:63:39:26:
         7b:91:da:10:71:8f:d1:e6:fb:c9:b7:b8:03:d6:cb:a3:9b:b1:
         b4:0a:53:ef:66:f5:5b:67:45:4e:21:a7:05:e3:58:db:65:d3:
         62:35:0d:fa:4c:2b:60:5f:7f:b9:45:93:4b:1b:27:0b:02:3b:
         cf:af:74:55:8f:80:c0:f2:2b:e1:69:a1:1e:e5:c1:7c:99:7e:
         78:df:70:51:6f:53:73:26:0d:ae:7b:72:46:4f:07:a1:6d:2d:
         56:87:db:90:b7:98:2a:35:d2:04:6d:a5:c9:83:c0:89:1d:68:
         8c:bf:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----