Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e38382e302f32342d3234203d3e203235303938.roa
File:                     34352e31342e38382e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          4kL0994hReX0bIHHjZdR9/lKq2RSuqAzj1c+0SY54A4=
Subject key identifier:   86:84:A1:ED:99:10:E1:F2:82:F5:02:8A:44:AB:FE:9A:A9:BA:25:D5
Certificate issuer:       /CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Certificate serial:       15DEFEA1A343C430A39F20604DFFA3629ED44CE7
Authority key identifier: 4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e38382e302f32342d3234203d3e203235303938.roa
Signing time:             Tue 01 Dec 2020 23:27:19 +0000
ROA not before:           Tue 01 Dec 2020 23:22:19 +0000
ROA not after:            Tue 30 Nov 2021 23:27:19 +0000
asID:                     25098
IP address blocks:        45.14.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:de:fe:a1:a3:43:c4:30:a3:9f:20:60:4d:ff:a3:62:9e:d4:4c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
        Validity
            Not Before: Dec  1 23:22:19 2020 GMT
            Not After : Nov 30 23:27:19 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:b0:95:ce:43:72:13:89:87:25:88:cc:99:
                    02:e0:7c:03:a6:10:d2:99:f5:52:98:03:79:a4:60:
                    2d:e8:e7:17:49:56:bd:81:d0:62:ac:5e:6c:54:00:
                    b6:73:63:8c:80:4a:73:63:3c:6b:b3:dd:2d:5c:59:
                    7f:65:f1:79:c7:77:8a:36:71:f0:b4:7f:e3:95:07:
                    19:8b:e5:32:56:7d:dd:4f:92:92:16:76:31:ce:c4:
                    e3:62:1c:32:9e:cd:87:22:64:cd:ac:37:64:51:76:
                    1c:b1:4b:32:4e:80:a2:16:6e:e7:e4:b5:f8:c3:05:
                    82:21:fb:5e:e2:ec:b7:fd:2e:1a:a4:6e:1c:a8:6d:
                    d3:d9:66:c3:b6:6b:c8:d0:07:db:35:21:7e:4d:b7:
                    05:d4:76:d9:c9:1b:08:d4:c0:e0:17:11:ba:b4:d7:
                    13:d2:65:be:b9:8c:92:21:94:e0:b1:7a:d4:0b:88:
                    4e:6e:f1:01:34:fe:a4:b8:40:56:bf:e6:6f:95:b1:
                    f3:81:9e:4f:7c:f1:a1:76:fd:f3:6e:bb:46:f1:f6:
                    d1:fb:e5:6f:4b:ad:52:ed:c5:22:2b:1f:46:db:e7:
                    b2:26:f1:9a:98:3a:f5:d5:1b:ca:63:3c:cb:f5:9e:
                    73:7e:74:a8:a6:3c:64:35:1c:ad:cb:79:58:43:5f:
                    60:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:84:A1:ED:99:10:E1:F2:82:F5:02:8A:44:AB:FE:9A:A9:BA:25:D5
            X509v3 Authority Key Identifier:
                keyid:4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e38382e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:2b:c6:28:00:15:a9:95:b7:b3:e0:8a:61:85:f9:bb:1b:df:
         6a:7f:3a:35:a6:8b:3e:04:23:3b:a0:fe:59:d7:35:be:c0:79:
         83:14:a3:45:5f:32:f5:da:62:c5:d4:1e:f9:c5:4e:83:b5:d5:
         38:55:75:28:81:92:d3:4d:28:ad:4c:9d:f5:05:db:9f:8e:6a:
         07:73:b3:99:87:e7:38:50:c6:d1:e4:b2:12:6e:4f:55:e8:b7:
         0d:6f:ef:42:1b:6a:dd:51:37:42:42:3a:a1:45:3b:4a:4d:36:
         b9:fa:b1:ff:cd:97:50:bd:2e:91:cb:41:77:5d:82:38:6f:23:
         ce:e0:f7:a1:d0:bc:d1:df:75:dd:10:ef:b2:df:8e:4b:57:05:
         05:1e:96:b6:7d:0f:01:c6:12:9c:24:f6:ac:1f:3d:f9:76:2d:
         f5:e1:58:fa:07:33:ee:24:d3:dc:49:3c:eb:e9:a4:a1:1b:c5:
         d5:91:d3:b6:ad:c5:aa:f2:fc:e7:4e:d4:5a:f9:a1:44:7f:8d:
         9e:40:bc:33:84:3a:a7:b1:f9:e5:d6:c2:73:2e:82:cf:e2:94:
         00:6d:0c:8b:b4:82:cc:5c:08:b0:e7:62:ee:83:17:97:d3:5c:
         bc:33:34:f2:6e:6d:10:d4:d4:d9:9d:ce:c5:0f:22:d6:58:f2:
         92:2d:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org