Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316332633a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a316332633a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          DPePImL+pvHyGPP7jyvZptX4rQqCii/Nxwsssw0KF6E=
Subject key identifier:   23:77:4B:5C:BB:47:E5:1A:8F:C5:2E:74:26:D1:4B:D7:25:F5:1E:32
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       3F22D6DBF2F140BBA3111F7422105C7BD811ECF5
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316332633a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 06 Mar 2025 08:04:58 +0000
ROA not before:           Thu 06 Mar 2025 07:59:58 +0000
ROA not after:            Thu 05 Mar 2026 08:04:58 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1c2c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:d6:db:f2:f1:40:bb:a3:11:1f:74:22:10:5c:7b:d8:11:ec:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Mar  6 07:59:58 2025 GMT
            Not After : Mar  5 08:04:58 2026 GMT
        Subject: CN=23774B5CBB47E51A8FC52E7426D14BD725F51E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:2b:b6:2c:ce:31:0e:55:e2:ee:e1:86:6f:
                    bd:87:c7:50:6a:7d:b4:af:f2:c8:be:28:d2:67:72:
                    4a:54:2c:00:dd:e8:00:08:90:b1:f5:ad:d0:1b:e9:
                    ff:b5:14:40:8c:c8:f8:99:5d:67:7a:2a:5b:24:62:
                    2b:6c:50:cf:44:be:fa:43:8e:10:20:e9:d8:86:6e:
                    53:94:83:c6:d5:4a:0d:19:a9:61:d9:07:8d:f0:97:
                    70:fe:79:02:64:3d:33:7e:5f:46:b6:8e:9e:9a:fc:
                    8f:c5:01:69:90:6e:93:6e:30:01:98:11:cc:bd:8f:
                    4a:c7:e4:49:23:a5:3d:17:d1:d0:8d:31:ef:15:72:
                    64:00:4d:83:b8:b4:2a:3e:8f:77:b0:8c:2b:c0:f5:
                    a1:49:d1:99:78:1e:88:34:78:28:ab:0e:b6:b6:6d:
                    83:5a:a3:a1:3b:34:0e:6b:31:c3:44:47:99:1d:d9:
                    31:92:be:bf:03:07:77:f5:c6:7c:c7:40:66:d8:3a:
                    1c:84:2e:70:f3:00:c6:de:1a:d0:28:7c:cf:32:4d:
                    2d:a3:a2:36:fb:aa:ca:81:93:42:4c:c4:f0:d5:a2:
                    23:18:68:ae:b5:7b:af:f1:f3:cb:df:8f:6b:2e:7e:
                    db:66:69:49:af:e8:0b:c9:78:ab:13:61:68:fb:b6:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:77:4B:5C:BB:47:E5:1A:8F:C5:2E:74:26:D1:4B:D7:25:F5:1E:32
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316332633a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1c2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:e3:10:be:63:5a:a6:68:40:f0:51:21:77:70:01:6f:5f:5d:
         54:9d:d6:b0:f5:69:1b:3d:82:32:10:be:b0:d2:5c:ef:8a:15:
         57:58:6b:5a:d2:06:a7:f9:bc:89:67:0a:ff:e5:30:1b:57:92:
         68:51:45:a1:a6:24:48:3a:62:b8:59:c3:27:e4:c9:d5:6c:0d:
         af:44:b4:ec:c5:56:ca:99:54:f5:64:31:86:40:fe:72:82:60:
         bc:d4:77:95:64:2e:39:33:80:8a:e7:49:f8:45:36:36:3f:8d:
         00:b1:4f:cf:43:d4:d5:10:09:75:74:a3:d7:0d:90:18:a0:cd:
         87:8b:e7:5f:f7:83:7c:ae:5e:1d:95:ec:79:81:05:17:55:8b:
         af:88:27:1e:f1:7c:40:19:71:c9:87:82:f9:67:86:c6:8b:98:
         e6:1b:29:e4:66:de:97:a5:57:1a:7d:d4:48:bf:d0:2d:c3:71:
         9b:7f:61:e7:7a:b7:f0:1d:89:1e:f0:75:22:1d:9d:e7:a2:d8:
         09:fb:3b:4c:d9:33:1a:aa:5a:95:12:cf:13:73:45:1f:95:48:
         23:11:9d:3d:12:3d:e2:8c:2d:bd:55:3e:3d:9c:80:3f:27:f6:
         ff:30:b9:1e:4e:c5:de:85:ac:31:95:1e:15:92:1b:2a:00:58:
         6a:2a:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:55 2025 by rpki-client