Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34342e302f32332d3234203d3e203631333137.roa
File:                     34352e3135322e34342e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          vUMDKD8VqFygnNmY28LOS2EzqRkqdQtfM0AAxi49jcU=
Subject key identifier:   F6:32:D1:94:91:D3:B3:84:B7:0A:74:6C:67:98:94:D1:DE:59:DD:D1
Certificate issuer:       /CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Certificate serial:       06FD2348A892B76742EE4E668C748BEDE24C92AD
Authority key identifier: 4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34342e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:27:52 +0000
ROA not before:           Tue 01 Dec 2020 23:22:52 +0000
ROA not after:            Tue 30 Nov 2021 23:27:52 +0000
asID:                     61317
IP address blocks:        45.152.44.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fd:23:48:a8:92:b7:67:42:ee:4e:66:8c:74:8b:ed:e2:4c:92:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
        Validity
            Not Before: Dec  1 23:22:52 2020 GMT
            Not After : Nov 30 23:27:52 2021 GMT
        Subject: CN=3082010A0282010100D0F51EDA7CE32AC5211D502CEDD7A7593C2B57F0D7C76907F37912265BD5D91692759EA13C35592C51AEA0D7C45A4EE8EE70DE00046ED2EA0044A845D36B3DC6188CC0529D9B63628809724F45A27D085790EA6E31278CF0F9B1CC19FDF9785774BEF93E18112783244A6A5E663A0B1CB1985ABA455FB1A17E275E7FBCF4E63EB15ABC1EC6010FD4E0DAFDEE03DC96C1250EE5A4E2B722D95E16C7D21A2B66FD7A4A4E8005A26E136D8A7E3270D1D467FA75227DB3A170064C4EB6753B04B7466F692A747B18F15EA01DD7ABD60373255B9E9B861D349F6DEF1E0617F643B7D30A4BB5A2E23BF8C2C9BACC8ECC7C49CCD970065AFF4D36D29FB5C3A7E8323DB30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f5:1e:da:7c:e3:2a:c5:21:1d:50:2c:ed:d7:
                    a7:59:3c:2b:57:f0:d7:c7:69:07:f3:79:12:26:5b:
                    d5:d9:16:92:75:9e:a1:3c:35:59:2c:51:ae:a0:d7:
                    c4:5a:4e:e8:ee:70:de:00:04:6e:d2:ea:00:44:a8:
                    45:d3:6b:3d:c6:18:8c:c0:52:9d:9b:63:62:88:09:
                    72:4f:45:a2:7d:08:57:90:ea:6e:31:27:8c:f0:f9:
                    b1:cc:19:fd:f9:78:57:74:be:f9:3e:18:11:27:83:
                    24:4a:6a:5e:66:3a:0b:1c:b1:98:5a:ba:45:5f:b1:
                    a1:7e:27:5e:7f:bc:f4:e6:3e:b1:5a:bc:1e:c6:01:
                    0f:d4:e0:da:fd:ee:03:dc:96:c1:25:0e:e5:a4:e2:
                    b7:22:d9:5e:16:c7:d2:1a:2b:66:fd:7a:4a:4e:80:
                    05:a2:6e:13:6d:8a:7e:32:70:d1:d4:67:fa:75:22:
                    7d:b3:a1:70:06:4c:4e:b6:75:3b:04:b7:46:6f:69:
                    2a:74:7b:18:f1:5e:a0:1d:d7:ab:d6:03:73:25:5b:
                    9e:9b:86:1d:34:9f:6d:ef:1e:06:17:f6:43:b7:d3:
                    0a:4b:b5:a2:e2:3b:f8:c2:c9:ba:cc:8e:cc:7c:49:
                    cc:d9:70:06:5a:ff:4d:36:d2:9f:b5:c3:a7:e8:32:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:32:D1:94:91:D3:B3:84:B7:0A:74:6C:67:98:94:D1:DE:59:DD:D1
            X509v3 Authority Key Identifier:
                keyid:4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34342e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:78:c7:d6:fb:4f:ec:dd:6b:46:a6:58:52:fc:37:77:0e:52:
         81:26:29:aa:14:fe:08:0a:36:b1:ae:0f:44:e4:83:a4:19:0f:
         5e:4f:f7:43:51:bd:be:a2:32:e1:49:00:1a:36:dd:0e:28:de:
         cc:51:ea:73:cf:3c:72:e8:20:93:c6:97:57:98:d0:7d:3b:2b:
         a7:9e:a4:c8:95:a4:9b:5c:90:02:43:fd:7d:bb:a1:a8:83:a1:
         37:67:0f:55:45:ae:ef:e7:93:13:60:2e:59:16:3d:0f:95:7a:
         00:a4:2e:4e:c1:14:ae:55:cf:81:53:43:fe:83:f5:29:fc:ab:
         5f:1f:4c:14:c6:78:15:3a:5f:86:b3:97:14:53:9e:dc:11:cc:
         c5:0a:24:55:c1:57:ac:eb:fe:03:4c:cb:fb:07:a6:1d:06:c2:
         ed:79:32:17:69:e7:91:00:63:39:51:a3:38:43:47:f5:35:85:
         42:81:e7:8d:ca:fc:ad:c9:d0:ed:8d:14:28:75:4a:d8:ac:eb:
         ad:11:57:af:5b:c5:67:57:27:a9:9d:a4:f3:46:a0:89:04:8e:
         01:ed:d0:49:48:58:1b:c5:ea:52:0c:00:75:73:fc:ca:9f:35:
         b5:f6:9e:82:b5:09:17:20:1d:ec:1d:87:ab:ef:2f:af:10:db:
         3a:54:37:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org