Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          4o5f2KkKliZPoZ0xH9DwmNrPzEs02d1uDKivUd9tp0k=
Subject key identifier:   B8:9B:33:77:E1:F3:B7:EE:EC:24:63:C4:79:D3:DE:F4:C9:1B:E9:C7
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       102AD1B828D32D41281EF7928BD0F0F6C0E54E05
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 06 Mar 2025 08:04:55 +0000
ROA not before:           Thu 06 Mar 2025 07:59:55 +0000
ROA not after:            Thu 05 Mar 2026 08:04:55 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1b4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2a:d1:b8:28:d3:2d:41:28:1e:f7:92:8b:d0:f0:f6:c0:e5:4e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Mar  6 07:59:55 2025 GMT
            Not After : Mar  5 08:04:55 2026 GMT
        Subject: CN=B89B3377E1F3B7EEEC2463C479D3DEF4C91BE9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:9c:14:fd:ee:ab:4e:d8:41:67:80:9d:c5:
                    e5:dc:aa:1e:0e:68:27:2e:ee:b4:96:21:13:13:1a:
                    c5:a2:6b:84:6d:ad:c3:22:f4:fe:e3:c9:a0:7e:53:
                    84:b0:17:a1:f6:25:29:87:19:26:b0:d3:c7:50:b3:
                    f1:63:7a:49:ac:56:2b:23:3c:46:91:cf:1b:63:49:
                    fb:31:a7:23:30:b5:df:e8:50:e6:45:ea:2c:32:bf:
                    cf:ca:83:c3:09:12:ae:a1:f2:7c:18:ac:7c:c6:fc:
                    81:59:a1:e0:b8:b8:99:5e:4b:89:b2:6e:d2:83:1d:
                    25:d1:da:c0:e1:8f:ea:80:b8:27:a6:b7:57:96:a8:
                    59:ab:ba:bb:08:c9:6e:e5:ad:6c:d6:79:e5:51:df:
                    fb:dd:2e:27:d0:80:81:f8:e5:9b:12:fa:c6:3f:0e:
                    ed:d7:77:af:8a:83:35:c7:c5:30:55:58:8b:f2:a8:
                    18:73:6a:ce:df:aa:0f:2c:40:36:7c:c6:5a:e9:8a:
                    26:fc:da:52:2e:0b:17:03:d9:60:e1:fb:9f:c2:33:
                    91:db:11:3b:96:7a:0a:5e:a1:da:50:5b:8f:f2:83:
                    61:38:f9:38:71:ce:5b:02:fa:12:d1:09:05:b2:0d:
                    66:d4:82:f4:13:bc:a5:56:1e:22:1c:ec:f4:14:71:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9B:33:77:E1:F3:B7:EE:EC:24:63:C4:79:D3:DE:F4:C9:1B:E9:C7
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:f3:de:c8:cf:4b:ee:87:12:ea:18:ea:34:13:3d:d8:44:05:
         67:5b:c0:57:88:31:b6:a3:61:af:13:fb:fa:5e:a3:70:24:90:
         f1:e8:15:d6:10:4f:05:97:fd:46:51:ff:d4:d2:5c:62:e7:e9:
         ca:4e:66:6e:ff:be:51:be:6b:29:a5:04:1f:99:00:a6:be:ab:
         5e:c4:0f:43:fc:1f:99:fd:71:3c:d1:b7:df:d3:49:a7:47:50:
         2f:5c:80:90:d3:c2:d4:92:48:82:12:d6:d9:21:c1:b6:64:a5:
         7c:b8:3d:07:81:fd:c0:de:c6:fc:cd:86:c1:7b:54:09:9d:51:
         78:c7:5c:65:a1:ee:25:4d:9a:dc:6a:77:8e:73:14:fa:01:2d:
         69:dd:cc:85:90:b2:ce:33:49:34:b9:81:a0:23:2d:21:a7:c2:
         d1:81:1a:ca:09:f4:8a:13:e1:2c:b7:8b:3d:8d:dc:c3:78:cf:
         cc:26:82:c1:5c:00:4c:46:3f:b3:bf:64:ed:82:29:f0:cd:f2:
         92:db:d1:3d:bd:78:c2:9c:72:7f:58:36:42:ea:0f:23:ed:be:
         60:86:11:59:66:28:21:1e:21:fd:83:57:28:d5:7b:ba:60:a2:
         8a:7e:32:a3:79:3a:b0:0a:69:9b:21:b4:df:c3:b9:21:49:9f:
         03:72:1f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:55 2025 by rpki-client