Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/3/3139322e3230392e36332e302f32342d3234203d3e203532303235.roa
File:                     3139322e3230392e36332e302f32342d3234203d3e203532303235.roa (raw, json)
Hash identifier:          tQkSqBhvcPACJxvdNlCnq4kYfwgybgJaGoPC7ZFsukQ=
Subject key identifier:   F2:53:6B:8C:CC:6E:DD:52:AA:8C:26:F4:C9:50:24:33:E2:C8:A2:89
Certificate issuer:       /CN=9F176E94D0B8F4A60E553EF6C51DFEFFDB896753
Certificate serial:       277A16A0FBE218619E381114D3E6ED17F29B3522
Authority key identifier: 9F:17:6E:94:D0:B8:F4:A6:0E:55:3E:F6:C5:1D:FE:FF:DB:89:67:53
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/9F176E94D0B8F4A60E553EF6C51DFEFFDB896753.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/3/3139322e3230392e36332e302f32342d3234203d3e203532303235.roa
Signing time:             Tue 09 May 2023 01:36:27 +0000
ROA not before:           Tue 09 May 2023 01:31:27 +0000
ROA not after:            Tue 07 May 2024 01:36:27 +0000
asID:                     52025
IP address blocks:        192.209.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7a:16:a0:fb:e2:18:61:9e:38:11:14:d3:e6:ed:17:f2:9b:35:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F176E94D0B8F4A60E553EF6C51DFEFFDB896753
        Validity
            Not Before: May  9 01:31:27 2023 GMT
            Not After : May  7 01:36:27 2024 GMT
        Subject: CN=F2536B8CCC6EDD52AA8C26F4C9502433E2C8A289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1f:82:80:95:5f:65:f5:24:8e:1a:2e:7b:0c:
                    45:01:d9:be:38:af:fc:d8:69:35:cd:67:7f:2e:c7:
                    9d:4d:a3:4a:9f:97:3b:4a:77:0b:5e:57:5f:75:42:
                    3b:06:05:80:20:c0:a5:6b:95:43:52:83:f0:76:16:
                    a2:6d:5e:dd:88:34:86:d3:18:30:e9:d4:2f:d3:44:
                    06:9f:71:41:20:90:93:10:8f:b4:87:05:9f:ac:a5:
                    83:26:96:8d:e0:a5:9d:21:3f:43:6a:89:20:56:c9:
                    e3:e5:f4:89:91:d8:fa:2c:d8:28:08:74:4f:c1:f1:
                    8a:05:dd:01:95:99:5f:b1:04:ad:f3:a9:94:7e:dd:
                    4f:f9:78:8f:2e:42:a9:c6:72:78:7a:de:a8:99:9c:
                    56:f9:af:37:5c:7e:bd:b9:9a:29:da:68:ec:a2:b9:
                    c8:e5:a9:d1:7d:60:59:68:c4:58:6b:49:a6:74:cd:
                    cc:00:07:8d:35:9d:bc:d5:4e:24:e3:fd:4d:f1:30:
                    a5:24:54:b7:ac:84:66:26:dd:34:9f:5f:e4:89:a7:
                    7b:d4:9f:03:d1:14:e8:ae:14:56:54:a3:f9:6d:e3:
                    29:b9:7c:83:4d:fe:31:a1:86:c1:ff:8b:ae:20:32:
                    39:93:ed:ff:cd:8d:bd:21:43:cf:44:d3:fd:5d:5d:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:53:6B:8C:CC:6E:DD:52:AA:8C:26:F4:C9:50:24:33:E2:C8:A2:89
            X509v3 Authority Key Identifier:
                keyid:9F:17:6E:94:D0:B8:F4:A6:0E:55:3E:F6:C5:1D:FE:FF:DB:89:67:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/3/9F176E94D0B8F4A60E553EF6C51DFEFFDB896753.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/9F176E94D0B8F4A60E553EF6C51DFEFFDB896753.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/3/3139322e3230392e36332e302f32342d3234203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:44:b4:6e:a3:ca:df:99:03:9c:28:1f:53:06:59:9b:c8:50:
         0e:47:5c:0c:c9:5d:63:27:cc:f5:12:be:95:c0:93:5a:c2:3d:
         2d:79:80:ab:e8:d1:97:ad:fb:f4:aa:e7:29:d8:80:14:b6:76:
         b9:11:5e:12:d9:c1:33:64:63:bc:44:44:13:38:68:ee:2c:3c:
         ae:ab:03:48:7e:48:fd:08:1f:82:ff:8e:e8:ab:1c:0d:8a:91:
         68:90:1b:98:53:ba:96:ca:73:ac:25:aa:89:f7:94:2d:2c:85:
         3b:65:b2:be:40:5c:13:50:4d:e6:f0:15:d3:e7:dd:ce:66:ea:
         11:b5:8a:c9:4a:05:a6:74:c0:27:59:2a:9a:fb:c6:a1:5f:b6:
         85:af:9d:ce:e8:ba:b9:bf:51:f4:2c:81:13:ea:1f:67:9f:21:
         52:77:18:4b:23:db:6c:06:72:b0:97:3b:6f:58:06:77:d1:06:
         cd:0f:13:07:4f:4b:ca:92:8b:a0:ed:2f:71:fc:86:2d:65:4f:
         cc:8a:d5:b9:2e:58:b7:fc:de:59:97:cc:eb:68:39:7f:7d:44:
         fe:02:ab:d6:9d:66:11:00:46:7d:ea:f2:37:aa:37:7d:f2:d0:
         e8:8d:90:4a:df:10:6d:51:b3:3e:cb:9d:eb:bf:97:b6:c0:e7:
         66:d1:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-fra.rpki-client.org