Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          AFiSao+7+UNlujwwA8AYY8RKxNT9tEEM/gKaNWElnz0=
Subject key identifier:   46:79:30:A4:F6:09:B5:0A:C0:94:4A:46:54:55:48:24:C6:65:3C:31
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       555FE2A43BACD2820428A1B48FB23CA9E6C4213D
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 11 Jul 2024 23:16:49 +0000
ROA not before:           Thu 11 Jul 2024 23:11:49 +0000
ROA not after:            Thu 10 Jul 2025 23:16:49 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:11f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5f:e2:a4:3b:ac:d2:82:04:28:a1:b4:8f:b2:3c:a9:e6:c4:21:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jul 11 23:11:49 2024 GMT
            Not After : Jul 10 23:16:49 2025 GMT
        Subject: CN=467930A4F609B50AC0944A4654554824C6653C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7a:92:e0:e7:cb:82:65:e2:3e:24:d5:b7:61:
                    22:26:ac:47:80:3e:a0:95:7d:59:1f:56:74:74:f6:
                    c3:b1:a4:95:73:5a:b5:67:04:28:d1:29:ff:96:46:
                    bb:49:8b:ab:31:1f:34:27:05:79:9f:0a:c7:f7:81:
                    39:19:90:91:60:2f:0c:de:8b:f4:0e:bb:76:94:3c:
                    c8:72:9d:f2:cb:e7:87:a5:db:51:dc:0a:f6:23:c3:
                    09:2c:4f:cf:69:7e:f6:5b:bc:c8:f0:aa:cc:5e:52:
                    40:3f:a8:51:31:bd:bf:79:e6:df:fd:57:cb:32:1c:
                    b5:a3:04:fc:c0:de:3b:66:f8:72:ec:3c:44:2f:1c:
                    45:20:7c:5f:97:18:b9:7e:04:4e:e7:c8:36:43:99:
                    eb:6d:17:0c:91:88:06:93:9c:4d:59:cc:6a:d6:fb:
                    1b:f5:a6:12:d1:0e:67:55:fb:ec:8e:53:64:4b:80:
                    e4:b1:81:9a:17:07:89:33:64:47:35:6e:a8:da:57:
                    eb:f9:48:74:f6:06:ac:9b:57:33:06:6d:81:ef:8a:
                    c2:5c:08:53:96:59:e3:9e:23:f5:b6:e9:8e:91:08:
                    67:d7:32:69:47:40:6f:bd:8f:32:a9:0c:b9:6d:2b:
                    3b:3f:96:5e:80:64:49:06:43:6a:c9:55:14:bc:29:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:79:30:A4:F6:09:B5:0A:C0:94:4A:46:54:55:48:24:C6:65:3C:31
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:11f::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:f1:ac:c7:85:ee:96:97:f4:63:25:95:81:39:cc:14:1f:59:
         03:7f:d6:06:88:4d:0b:e0:43:05:d1:f3:1b:ff:ba:ca:aa:95:
         cb:3f:ae:ac:40:ea:80:bc:f0:6a:2a:28:6e:4a:2e:9b:db:40:
         5c:46:83:53:cd:64:bf:da:16:63:7b:be:8f:c3:5e:ec:d7:16:
         02:b7:89:ed:d8:f9:3e:d9:c7:ba:e3:de:5a:a6:00:e8:a7:c7:
         06:42:7b:d9:f0:ea:ad:24:60:47:bb:36:1b:f0:83:a9:71:c3:
         e5:1e:44:14:bd:3e:cc:b7:b9:e6:b6:5e:82:80:1e:65:f6:e0:
         a1:8f:fa:ed:68:b7:df:f8:dd:bc:2e:41:36:c3:a9:af:1e:13:
         95:3a:50:9b:67:92:2f:77:28:ff:dd:ff:ba:91:7b:58:f8:0f:
         b7:b0:a8:65:0f:92:f7:4b:f3:b1:0d:29:1e:61:c6:19:19:6a:
         fe:7d:a7:ec:44:6d:2b:64:69:ad:03:b7:22:b9:29:7e:f6:cd:
         28:98:9a:96:8f:e8:bf:d0:7d:c8:18:69:a7:db:91:69:dc:3f:
         9d:34:8a:41:9c:99:d7:47:e4:3c:37:56:f2:9d:c4:50:e4:d7:
         5c:4b:54:e9:64:90:fb:26:19:06:c5:99:69:53:73:8b:54:69:
         d6:9d:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----