Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34362e302f32332d3234203d3e203631333137.roa
File:                     34352e3135322e34362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Ar23EOLkbG0kMJ7hxPjyYAuDYd0AdnvMKilx6E+aBTw=
Subject key identifier:   F0:64:BF:ED:C9:DA:96:13:D3:F6:23:42:F9:EF:BB:64:61:92:15:D6
Certificate issuer:       /CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Certificate serial:       1F3328753194504C648588B1CFE7741F55AAD367
Authority key identifier: 4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34362e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:27:52 +0000
ROA not before:           Tue 01 Dec 2020 23:22:52 +0000
ROA not after:            Tue 30 Nov 2021 23:27:52 +0000
asID:                     61317
IP address blocks:        45.152.46.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:33:28:75:31:94:50:4c:64:85:88:b1:cf:e7:74:1f:55:aa:d3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
        Validity
            Not Before: Dec  1 23:22:52 2020 GMT
            Not After : Nov 30 23:27:52 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:6d:39:76:f4:dd:3c:de:8e:72:18:f6:01:
                    c8:37:d8:46:5c:3c:83:5e:0b:5f:d9:16:58:72:12:
                    14:66:34:a2:2d:1c:b6:24:c3:0a:aa:d8:31:96:68:
                    78:33:be:8d:67:f2:ca:6a:9e:5d:16:41:b2:f3:a4:
                    0e:5b:d4:c3:63:e1:0b:f3:12:31:e2:d4:16:32:78:
                    85:70:ed:f2:a3:ec:cc:fd:f7:57:bc:3b:ad:d6:54:
                    6e:66:05:fa:06:c1:07:6f:ad:e1:b1:b6:5c:f1:d6:
                    4c:6a:d0:a8:9d:f4:2c:33:dc:16:b4:f4:ab:c8:26:
                    ba:c9:75:ef:fa:29:fc:56:95:0f:81:de:46:c7:e5:
                    1c:51:38:c6:3b:1a:19:a3:24:3c:f0:ec:99:f1:f0:
                    20:c7:f3:77:5c:65:27:76:f0:35:63:41:30:10:97:
                    71:d2:3c:6c:c2:d2:50:f4:61:f0:75:30:1d:e4:a3:
                    d2:f4:e3:d9:71:95:a0:50:3a:53:dd:b3:e5:0d:90:
                    b9:0f:9f:c7:09:08:f4:69:64:86:11:12:bd:f5:e0:
                    fc:ac:c5:70:b1:3d:74:e4:27:3a:ea:1a:64:f8:5f:
                    96:ba:63:06:e1:fa:e1:a5:96:df:a5:55:30:93:dd:
                    d6:27:a7:93:59:3e:38:8c:14:92:52:3f:9b:f7:22:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:64:BF:ED:C9:DA:96:13:D3:F6:23:42:F9:EF:BB:64:61:92:15:D6
            X509v3 Authority Key Identifier:
                keyid:4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:08:23:37:0b:3b:19:9a:85:3d:97:8a:a4:f0:bb:0e:cc:c9:
         7a:a9:ec:0f:d1:c2:01:8e:64:12:67:5d:a6:19:44:f8:cf:37:
         0d:be:7b:97:66:bd:25:64:ac:51:e2:14:de:40:a6:e7:ab:12:
         93:f7:47:4c:62:9c:b8:2f:c7:c2:11:de:8f:7d:75:a5:22:3a:
         73:7a:ef:46:ae:8e:77:6a:36:0e:93:27:cc:50:bc:c3:31:f8:
         25:65:81:2a:e1:7d:ff:f6:65:8b:29:94:00:4a:40:24:d0:eb:
         04:fa:e0:de:8a:3f:3b:05:bf:fd:7b:5b:18:db:ba:1c:4d:48:
         d2:09:50:2a:6e:eb:9b:58:08:5b:7c:34:ed:ee:3c:e7:9d:49:
         13:27:68:5a:93:91:3a:3d:ec:e8:18:04:ea:68:fb:b0:ed:23:
         f2:fb:15:cd:5e:c0:82:f9:2b:31:54:90:14:d5:e7:ad:0e:50:
         75:7f:fc:ee:88:53:71:45:6d:a2:e3:21:09:31:5e:15:f5:3e:
         7c:8d:73:5d:f3:79:4e:ac:59:e9:67:f2:fd:ad:74:2a:fc:84:
         9f:c8:57:68:04:a7:ec:bd:45:58:a1:01:ad:16:5e:f6:84:af:
         80:6e:30:68:68:d1:8b:d3:25:c6:58:01:59:20:c0:24:8e:8f:
         69:0b:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org