Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          M4lqzi+U+D9jR+wvV0xN9YaOTJRX9RLpzgEcqqbLZHE=
Subject key identifier:   B2:B1:E4:C6:09:C7:F4:81:34:6A:A4:E5:6D:FC:84:EA:F1:C4:6C:A5
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2C4BAAC3E992AFACD0AD7CD95FD1C631D48D5DD3
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Wed 26 Feb 2025 03:26:18 +0000
ROA not before:           Wed 26 Feb 2025 03:21:18 +0000
ROA not after:            Wed 25 Feb 2026 03:26:18 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:232b::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4b:aa:c3:e9:92:af:ac:d0:ad:7c:d9:5f:d1:c6:31:d4:8d:5d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Feb 26 03:21:18 2025 GMT
            Not After : Feb 25 03:26:18 2026 GMT
        Subject: CN=B2B1E4C609C7F481346AA4E56DFC84EAF1C46CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:a5:ae:12:98:8a:08:2c:77:5f:58:fe:62:
                    4f:33:43:df:2b:34:9d:c9:80:5d:ba:52:2f:90:31:
                    81:d4:f3:b7:d2:bf:48:7d:7e:7a:0d:32:6f:ed:55:
                    d5:32:db:6d:92:d7:4b:4a:9d:44:74:78:ea:08:44:
                    3d:07:2b:20:61:f0:a2:2c:3a:79:78:22:de:35:e0:
                    be:7e:af:17:d8:f5:75:ee:7f:33:e3:f3:d4:b5:e4:
                    54:b5:f6:4c:89:e3:10:30:8a:6a:ee:09:6d:c7:cc:
                    31:eb:1b:38:45:33:8a:28:c2:32:cd:5e:95:87:40:
                    7a:9f:23:46:71:98:6c:3a:a1:67:6c:6e:83:50:c3:
                    a3:9c:b6:d6:0f:f2:9f:7d:aa:ba:9a:01:cf:a3:4b:
                    89:4a:f5:2f:4c:1e:38:7d:90:47:9d:43:b1:a6:a2:
                    4e:a1:d1:01:aa:23:ef:f0:10:d2:34:a0:02:c6:24:
                    26:66:22:e0:9a:ea:8d:0e:9f:18:42:87:53:17:e7:
                    5e:c9:49:1b:75:02:ba:29:86:34:7b:d9:a1:bf:12:
                    d9:70:1e:5e:08:8c:36:7e:14:6a:a7:7b:6d:86:b2:
                    26:2d:5e:8c:85:ea:af:22:a6:33:6b:ad:43:c8:d0:
                    30:74:e2:be:ac:f2:6a:df:28:3e:d5:aa:7c:32:cf:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B1:E4:C6:09:C7:F4:81:34:6A:A4:E5:6D:FC:84:EA:F1:C4:6C:A5
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:232b::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:60:13:15:f5:70:5a:7f:af:cd:7b:2f:52:91:77:bc:2a:9e:
         06:80:b8:7a:0b:3c:8e:51:f9:a3:4c:d7:0f:ca:a9:7b:8b:a4:
         25:0e:58:2d:a9:91:f8:24:a2:a1:3e:ee:a6:d4:f1:52:c9:26:
         0e:c5:48:23:22:af:1c:be:4b:6e:9a:3c:fe:56:03:da:f2:43:
         6a:48:a7:aa:69:c1:a8:a4:5b:27:80:39:bc:a1:4c:07:5b:1c:
         13:36:9c:46:b4:63:dc:b9:86:13:9c:c2:8a:b6:7b:b6:f3:7c:
         ca:ff:cc:63:3a:18:bf:b5:e6:85:20:c5:58:e7:1e:bd:df:40:
         a7:8c:d2:3b:c5:1a:de:22:b9:53:e5:be:d8:2a:45:48:fc:83:
         28:ff:9d:50:54:3f:6e:38:27:c2:97:1c:ab:18:ca:22:a5:c6:
         72:f1:1e:94:b2:aa:3a:32:d3:6c:2f:e5:87:c4:92:75:77:c0:
         2a:80:d9:db:47:c4:e3:68:fe:2a:89:eb:7b:1f:f0:56:38:51:
         de:b6:72:b7:4d:c9:00:cf:b8:52:fb:9f:29:bb:4d:8c:ad:38:
         7c:e3:c8:0a:d9:62:7f:28:b9:db:97:46:7a:f0:79:26:b9:83:
         e6:38:cf:68:44:23:74:ba:ad:97:f5:19:9d:78:07:c6:fd:d2:
         39:01:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:23:43 2025 by rpki-client