Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a32313a3a2f34382d3438203d3e203532303235.roa
File:                     323630323a666137653a32313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          TdG3NWkjnjADuKo7Dt2Gv+2+wtp0Ls2yB9ZFdEn8Gn0=
Subject key identifier:   14:7D:B2:1D:14:25:F9:90:02:5E:56:43:23:07:13:00:4E:1E:DF:CF
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       29D1B54F00B76668A9904D1FA386B96D48020CB5
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a32313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Tue 18 Feb 2025 23:08:47 +0000
ROA not before:           Tue 18 Feb 2025 23:03:47 +0000
ROA not after:            Tue 17 Feb 2026 23:08:47 +0000
asID:                     52025
IP address blocks:        2602:fa7e:21::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d1:b5:4f:00:b7:66:68:a9:90:4d:1f:a3:86:b9:6d:48:02:0c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Feb 18 23:03:47 2025 GMT
            Not After : Feb 17 23:08:47 2026 GMT
        Subject: CN=147DB21D1425F990025E5643230713004E1EDFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:03:36:04:c9:61:a9:aa:6d:83:84:37:f4:
                    ea:bc:92:b0:c0:3f:96:2e:ea:0e:3f:e9:ac:65:1d:
                    22:b5:40:04:0c:58:b5:23:bd:08:2a:d2:48:99:29:
                    4d:d0:92:9f:0c:0a:7e:cb:34:86:7e:83:36:da:60:
                    a1:0f:aa:08:68:2a:8f:70:3a:41:07:5c:b9:fe:11:
                    19:d0:bd:60:bd:b5:71:02:66:5d:e7:b5:6c:14:a0:
                    a1:66:c4:ba:0b:b6:40:3a:c3:37:81:17:bd:86:09:
                    60:93:ef:5e:a3:9f:66:65:e0:1e:f7:32:63:4b:05:
                    06:ca:e4:6b:04:f5:d1:6f:76:c3:ba:38:d7:10:26:
                    e1:bf:0c:8e:2c:78:6c:d0:3c:23:63:a9:d5:2f:31:
                    6d:8b:4d:f1:25:34:29:89:be:71:9a:ff:89:2a:7f:
                    a4:5b:1c:70:1c:69:4c:f3:79:50:ba:b7:47:7b:5e:
                    bb:78:2f:70:35:50:8e:16:4f:c9:06:91:b1:7e:a1:
                    3d:2a:42:93:bc:43:e0:4b:c1:c8:df:b7:43:46:3e:
                    69:e6:90:68:25:b6:9e:f2:f1:cd:9d:e8:e6:e8:ee:
                    4b:ff:48:6f:4d:2b:81:16:7c:40:a5:4b:b5:3e:a9:
                    4e:7d:fa:78:dc:7e:82:28:08:d8:71:39:95:1c:42:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7D:B2:1D:14:25:F9:90:02:5E:56:43:23:07:13:00:4E:1E:DF:CF
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a32313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:21::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:2d:ee:d9:c8:ce:7b:8d:5f:14:00:5d:f3:59:2d:20:6c:
         79:50:47:9f:84:30:43:14:1f:d2:c2:1c:34:b2:ca:7c:0a:6f:
         de:41:61:e0:a7:93:b1:a4:46:03:4e:ea:30:9c:ec:21:fe:f7:
         cd:d4:fc:b6:ca:60:0f:10:7c:6a:79:81:cf:b7:3e:31:0c:ad:
         58:4d:22:b8:bf:dd:11:27:1d:6e:98:4a:95:3b:66:a7:d4:df:
         ac:69:87:9d:6f:1d:a1:cb:19:0f:67:ac:77:e9:b2:33:be:f9:
         3d:c9:89:b4:29:a2:f7:28:cc:a9:b8:d2:f9:93:af:f5:76:53:
         c7:cd:d5:38:52:3b:03:8a:ba:a7:d1:2a:44:aa:01:9c:3c:9f:
         c4:99:c3:6c:cd:73:e6:80:a3:25:0b:c9:22:94:9d:d7:84:14:
         83:26:0f:5f:38:ee:2c:61:3b:53:60:0a:29:98:2b:39:08:3d:
         cf:be:c0:51:06:3a:67:93:5b:67:df:5b:37:17:0b:d0:d4:7e:
         82:d1:92:26:e0:19:bd:4d:6e:49:6f:cd:11:37:7e:bd:51:f8:
         ce:e4:2d:4c:aa:e1:be:2d:1f:10:9a:de:d5:fd:52:c7:39:00:
         18:fb:9f:ec:aa:be:fc:14:9a:64:d9:10:49:cc:6c:d7:60:5f:
         fb:b6:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:15:01 2025 by rpki-client