Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          UgSlCQcxHM2JkITaWeXlwM6AQrl6uP+nCIlHy507IlA=
Subject key identifier:   E6:F2:5C:9A:45:0E:FE:11:B8:17:DB:E4:2D:58:D1:92:57:77:7D:57
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6EDBD86DE87532AC49C8E99D158F94F6E10AC02C
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:25 +0000
ROA not before:           Thu 24 Apr 2025 13:14:25 +0000
ROA not after:            Thu 23 Apr 2026 13:19:25 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1b1f::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:db:d8:6d:e8:75:32:ac:49:c8:e9:9d:15:8f:94:f6:e1:0a:c0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:25 2025 GMT
            Not After : Apr 23 13:19:25 2026 GMT
        Subject: CN=E6F25C9A450EFE11B817DBE42D58D19257777D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:40:67:36:10:e8:ec:15:bd:b9:4c:de:c9:
                    ea:65:b1:61:9e:96:8f:ab:8c:25:7d:61:0d:9d:72:
                    42:0d:22:d0:d1:ef:29:20:ac:4d:21:41:1a:6a:cc:
                    14:64:a9:1f:d5:91:5b:7e:37:9e:a3:a2:42:bb:46:
                    b1:e6:8c:85:db:42:24:c3:94:75:3f:a5:20:d2:92:
                    48:44:fe:78:98:83:a3:91:eb:96:0a:f7:f6:65:82:
                    be:37:79:cf:92:61:d6:3b:ac:6a:2f:e2:57:98:79:
                    0c:d1:1e:2e:8c:b8:d5:f1:0b:64:9a:1f:62:24:b8:
                    ba:0a:86:f2:23:9e:a3:c4:18:84:eb:2c:b8:95:b4:
                    84:92:0b:15:17:d6:60:e8:17:5a:1c:a0:54:cb:46:
                    84:48:33:95:58:ce:54:af:e8:c8:8c:f7:41:5e:b8:
                    30:7d:31:b5:8b:bf:51:fa:27:af:f5:99:89:9d:37:
                    25:3f:f7:5f:ad:29:3d:c9:4f:96:a6:40:e2:11:cc:
                    3e:8b:3d:7c:cb:29:a3:ae:11:29:54:3c:e6:d7:dd:
                    cc:c0:69:d7:49:36:e4:6f:51:e4:f0:70:ab:47:c0:
                    3c:18:f2:ce:65:e4:a7:6b:0a:80:f0:a4:cd:a6:ae:
                    ae:7d:56:e3:c6:3b:d8:0d:2b:53:79:18:75:af:d6:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F2:5C:9A:45:0E:FE:11:B8:17:DB:E4:2D:58:D1:92:57:77:7D:57
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1b1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:e4:95:64:c7:b4:32:19:55:c0:73:e2:2f:26:ac:a5:5e:24:
         99:f4:7f:b2:81:01:6d:91:70:c7:67:35:6f:fc:17:db:84:b7:
         8c:1e:cb:4c:61:47:3a:f9:a5:81:46:31:23:98:88:6c:db:95:
         87:0b:00:57:43:71:48:72:29:de:e0:b5:5e:9f:60:7a:92:66:
         d7:e5:3c:4e:fa:3e:a7:a4:d0:ff:a6:cb:dd:ba:7f:c2:43:ae:
         de:4e:fb:3c:10:8a:3b:a2:51:2a:ca:bb:11:cb:99:1a:63:d0:
         17:6b:e1:c2:bc:bc:91:d0:9a:b1:02:03:50:d2:00:b6:d7:9e:
         f0:2d:6a:0b:bd:4b:26:48:af:7e:79:07:6e:fb:a8:09:72:26:
         64:9e:f1:ba:7e:ea:1a:58:4e:ad:d0:26:ea:27:34:1c:7e:11:
         cc:70:e1:2e:98:3e:f8:46:36:58:a7:26:3d:20:4b:a2:66:80:
         08:92:f2:d6:ec:62:cf:69:c2:bf:43:0a:98:9f:a4:c9:1a:83:
         ae:bb:cc:a2:f1:fd:7c:32:b7:08:0a:8e:a2:aa:1e:7a:8c:1d:
         78:c8:b7:cd:59:43:2c:1f:b7:0b:53:a0:a6:52:ee:98:d3:79:
         a9:30:24:21:fa:1b:3d:1a:7d:57:7e:59:c5:c7:ac:a7:a8:b6:
         0f:bc:98:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----