Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          UAklwydWThDEb/1cf8ayfcarnKvpR6YzlxzlzBBB+xk=
Subject key identifier:   FA:28:2D:72:30:AC:DB:3C:1A:FF:66:0F:3A:B2:73:A4:F0:50:04:7F
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       1FF48F3A1A3A3E8088BF0E48803FEE51F4979429
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:38 +0000
ROA not before:           Thu 24 Apr 2025 13:14:38 +0000
ROA not after:            Thu 23 Apr 2026 13:19:38 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:12::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f4:8f:3a:1a:3a:3e:80:88:bf:0e:48:80:3f:ee:51:f4:97:94:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:38 2025 GMT
            Not After : Apr 23 13:19:38 2026 GMT
        Subject: CN=FA282D7230ACDB3C1AFF660F3AB273A4F050047F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:fc:9d:2a:05:45:4e:9a:6d:80:c4:a0:9a:
                    72:9c:ff:d1:c3:7d:90:73:5f:1c:cc:df:8c:b4:61:
                    8e:cb:f3:ce:bb:bc:ff:f6:14:ba:69:4c:8b:c3:a1:
                    ea:9f:fc:5f:c5:d1:dc:11:b7:70:88:f2:33:92:d1:
                    56:18:b5:53:60:79:f4:e7:5a:d1:2d:04:fd:59:b2:
                    7b:ea:9f:1b:02:86:98:22:38:98:61:be:e2:9f:a4:
                    36:cb:ea:f3:c8:c9:f6:8a:86:da:5e:53:cf:47:15:
                    6b:be:f3:d9:a5:b8:42:36:27:a5:21:23:06:dd:6d:
                    59:15:ef:67:e0:ac:35:e1:50:42:3d:45:cf:7d:98:
                    64:1d:3a:c4:ea:02:8d:e0:f5:7c:2a:89:15:c0:3e:
                    84:5b:fe:d8:01:f5:b6:d9:83:23:98:e8:9c:2a:30:
                    db:85:84:8b:a9:f8:a6:17:cd:30:d2:a3:15:c8:0f:
                    8d:b5:02:8b:f5:4e:1a:13:88:92:75:40:65:dd:07:
                    df:d8:4a:2a:cc:61:ab:cb:2b:c6:f8:c8:a9:32:6f:
                    96:b9:14:4d:23:f5:b0:99:b1:d7:6c:3c:d4:87:f4:
                    44:ad:b0:ad:2a:da:7e:e9:04:af:d0:9d:55:75:20:
                    0c:e0:4f:c4:e1:f4:41:a4:f9:3b:23:90:7b:a4:81:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:28:2D:72:30:AC:DB:3C:1A:FF:66:0F:3A:B2:73:A4:F0:50:04:7F
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:1f:4c:a0:98:fd:5c:49:dd:6d:e9:41:71:05:bc:d2:dc:c3:
         09:91:51:3e:65:26:64:67:38:34:f7:85:05:20:a2:52:d0:7c:
         99:13:f4:25:d7:83:e9:c0:62:9f:b0:a4:bf:fd:e2:05:17:f3:
         1d:70:3c:a4:41:a3:08:14:78:fb:c7:ea:d5:6a:bd:fa:b9:df:
         14:2c:2a:9e:7e:20:af:65:b6:ea:d6:9c:eb:56:bd:75:15:d7:
         d7:e0:3d:0c:d8:33:22:6e:8f:40:09:3e:4b:4d:a3:e2:16:92:
         f0:ac:2a:4a:1c:5f:40:d0:f4:97:d5:71:0a:5d:e6:5a:bc:2a:
         96:44:20:73:aa:09:1c:29:da:dc:2a:9c:ce:dc:dd:19:35:da:
         c3:1f:ed:db:54:fb:aa:17:e9:4e:d7:03:50:6a:55:c9:2f:0d:
         f8:07:97:42:57:d0:01:e5:19:5a:d3:64:c9:f2:15:f7:b4:95:
         38:a3:a9:5e:e1:4f:e0:39:1e:c8:1e:79:b4:a4:a8:e5:b3:9d:
         bb:25:d6:30:c4:ea:7e:f3:12:f9:01:68:31:0c:39:47:b0:99:
         d9:33:93:38:35:ae:2d:09:19:0f:a2:b5:b0:34:10:08:19:0a:
         93:c3:dc:c5:89:70:6c:e5:8c:7b:fd:bd:7a:6c:53:e1:3e:7c:
         a5:a3:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----