Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31363a3a2f34382d313238203d3e203532303235.roa
File:                     323630323a666137653a31363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          OtM4ObgjYMYIKT4Sw5d3b7mCfaQfcaYccx+Azfn+gp0=
Subject key identifier:   A5:F0:C3:E3:12:56:81:AE:76:F6:32:23:BF:30:00:50:0B:A8:E6:57
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       02512684408F7194BE90708E08618E1746C8DEC9
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 27 Mar 2025 00:10:42 +0000
ROA not before:           Thu 27 Mar 2025 00:05:42 +0000
ROA not after:            Thu 26 Mar 2026 00:10:42 +0000
asID:                     52025
IP address blocks:        2602:fa7e:16::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:51:26:84:40:8f:71:94:be:90:70:8e:08:61:8e:17:46:c8:de:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Mar 27 00:05:42 2025 GMT
            Not After : Mar 26 00:10:42 2026 GMT
        Subject: CN=A5F0C3E3125681AE76F63223BF3000500BA8E657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5a:d5:38:78:e6:2e:64:b6:c7:6a:04:8f:99:
                    17:6f:27:02:c3:36:e0:e2:02:02:cb:ce:4c:c1:6f:
                    fb:59:8d:4f:ca:c3:a8:61:4c:12:d0:2c:c6:b1:8c:
                    cb:67:a4:e8:78:db:1e:4c:5b:1d:33:1b:d8:b4:fd:
                    58:ae:16:00:0f:bf:ed:9f:c0:38:1e:6d:81:39:39:
                    1d:e5:45:be:f0:62:37:39:19:af:f5:e5:c9:b9:87:
                    cf:2b:e8:93:74:e6:b6:42:a2:66:f4:58:f0:31:32:
                    a4:c3:b0:09:c6:1a:71:38:4b:b4:34:39:ed:30:b5:
                    cb:73:f1:c4:ee:7b:fc:f4:0a:bd:57:07:39:b0:5d:
                    6c:2d:97:44:ab:aa:4e:54:a8:4d:7b:de:9d:76:5a:
                    57:86:1c:ee:f6:fc:19:bf:15:9e:8b:98:7e:73:26:
                    20:ac:d5:f7:80:77:23:62:9e:28:13:c1:18:a8:6a:
                    ae:2f:22:6f:bd:dc:e3:c0:c4:2b:46:59:0e:ae:53:
                    2c:c8:97:77:06:ed:61:7e:57:3d:82:82:06:fc:66:
                    cd:b9:0a:76:01:a4:4b:21:58:e8:40:8f:98:86:51:
                    2f:51:72:ab:ea:21:a2:60:37:d8:58:66:c6:a4:8b:
                    97:5a:f7:54:43:53:4f:f5:80:b4:b5:15:da:94:a0:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F0:C3:E3:12:56:81:AE:76:F6:32:23:BF:30:00:50:0B:A8:E6:57
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:69:3d:3b:1b:13:07:d5:f8:bd:fc:81:5a:0d:07:26:a5:7d:
         0c:05:9a:09:73:3e:09:91:d2:ce:ed:8a:3f:78:7f:da:32:52:
         22:6e:38:64:58:59:95:2c:01:84:b2:57:ae:ab:11:31:c2:da:
         e6:a2:79:db:d4:7b:f8:c3:dd:6d:6c:91:8a:3c:ca:53:1f:8d:
         b7:a9:00:93:84:39:92:98:27:fc:e3:d7:cc:3e:cf:5a:98:db:
         82:a2:ec:1a:9d:9e:6d:c2:81:79:de:ee:44:03:3d:19:e6:50:
         0c:2a:75:0d:e9:d3:30:50:38:15:ed:40:8b:e1:d1:68:20:b4:
         9d:33:21:2a:8d:5b:f5:76:e4:29:a6:3b:24:4c:f2:67:78:2c:
         1c:4d:58:8c:bb:54:da:11:a3:62:95:23:6b:4b:a7:7e:9c:71:
         41:b3:5a:fd:30:e3:d6:22:67:94:80:ff:c8:80:c9:c3:5b:c9:
         dc:9e:42:ca:36:96:ce:15:be:6d:79:a1:4c:d7:bb:de:a7:7f:
         ae:7e:6e:3d:2b:37:f1:27:ed:b7:af:10:78:8a:c9:8c:d7:d4:
         89:5c:88:c8:84:19:77:b7:c5:5a:2e:a6:a3:46:32:f0:40:30:
         18:66:d8:f9:cf:c6:b0:4b:37:9d:cf:f6:e8:51:d0:f0:a0:b8:
         f3:fc:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----