Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          7t70V3WgflH7RLQ53cYBx3DbnFHVXmddoY85GM+IC6s=
Subject key identifier:   5D:09:C0:41:F5:F1:07:7B:C7:49:5F:AC:9E:3A:07:87:BF:C9:74:C0
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       683B299436860DBDDC011EAE0FF9EA76700A6970
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 06 Feb 2025 06:30:55 +0000
ROA not before:           Thu 06 Feb 2025 06:25:55 +0000
ROA not after:            Thu 05 Feb 2026 06:30:55 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1e27::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3b:29:94:36:86:0d:bd:dc:01:1e:ae:0f:f9:ea:76:70:0a:69:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Feb  6 06:25:55 2025 GMT
            Not After : Feb  5 06:30:55 2026 GMT
        Subject: CN=5D09C041F5F1077BC7495FAC9E3A0787BFC974C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:7d:1b:3e:c3:18:ce:32:b9:fb:6a:43:07:
                    ca:50:bd:28:3c:ff:64:8e:a5:81:0d:59:5c:65:63:
                    69:ad:ee:6a:88:47:73:d2:52:db:e7:20:22:00:af:
                    f9:5c:25:6f:f4:15:b5:9f:8a:77:2d:88:5b:df:36:
                    2e:0a:02:f6:7e:2c:62:d4:56:98:9d:eb:50:15:7e:
                    22:03:cb:01:46:11:41:76:9e:a0:6e:a9:b6:a2:9b:
                    d3:92:fe:e8:8e:98:d9:01:44:ff:91:af:09:2a:8a:
                    15:a2:3d:a9:47:e7:c3:eb:b5:57:b2:82:0e:f2:7d:
                    10:25:47:c1:28:64:5d:35:c7:24:da:40:82:36:27:
                    17:62:c5:3e:78:19:9d:0b:83:c3:e9:e0:8c:98:0d:
                    69:98:c7:2f:a2:61:4e:86:44:55:99:76:d9:ae:00:
                    c3:b1:ce:96:3c:e0:9b:03:44:5d:74:8c:b3:e9:a5:
                    a3:70:f9:13:28:74:07:16:e6:6f:d8:b0:89:a8:57:
                    39:1e:1c:7a:d0:66:58:8d:a5:bf:24:67:e2:fa:ef:
                    7c:2c:5a:c7:22:67:fc:78:13:00:3c:97:3f:78:c6:
                    b6:ba:bb:cb:0a:86:5f:fb:83:6b:da:9f:d1:64:7c:
                    aa:87:d9:0b:90:75:29:82:e3:8e:07:d1:87:5a:cd:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:09:C0:41:F5:F1:07:7B:C7:49:5F:AC:9E:3A:07:87:BF:C9:74:C0
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1e27::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:79:5d:40:06:f9:1d:a2:f0:83:b6:9f:7c:7c:fe:a0:a2:6b:
         6f:95:a1:71:80:d7:90:60:65:38:c6:67:91:88:25:3c:88:f9:
         45:03:69:a2:8a:85:db:70:25:8e:ef:8a:af:cb:84:32:9c:2c:
         a4:12:80:d3:1f:e4:5e:55:37:11:60:1e:2b:2f:24:57:ff:44:
         e7:4a:d5:46:a1:36:f9:ec:c7:43:76:2b:c5:11:e8:a4:07:87:
         6d:0f:b1:92:2c:fb:e0:8d:bd:93:95:e6:32:7d:48:16:35:a0:
         aa:b0:75:91:79:99:2d:53:41:5b:34:5b:50:c6:98:df:75:c7:
         13:11:90:fd:88:ba:fd:27:46:0f:de:11:ab:9c:62:4a:3c:3d:
         5c:b1:52:1c:42:12:54:c4:33:e3:27:74:e7:94:e0:e5:c1:34:
         7a:c9:3a:37:02:19:40:32:44:9e:0b:03:60:f2:6c:cc:c3:dc:
         89:25:bf:cf:4c:f8:4f:9e:64:5c:7f:bd:96:bb:08:8e:33:83:
         df:e3:20:e3:99:f5:c8:60:a3:36:5b:52:52:6a:14:3b:91:c2:
         db:04:18:b0:cd:84:f2:33:73:51:73:78:02:b9:a9:79:ca:30:
         12:72:9d:84:bd:59:86:21:91:b5:41:ea:dc:4c:48:db:bf:17:
         f2:cf:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:22:55 2025 by rpki-client