Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3134382e302f32332d3234203d3e203631333137.roa
File:                     352e3138302e3134382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          b8LJ+Ve8Y3oyAueUfAzSk11GJZK60g88PO7/NzlBH28=
Subject key identifier:   F2:F6:D3:A4:F6:DC:C3:51:FA:91:2F:84:32:72:F9:59:0E:9E:39:08
Certificate issuer:       /CN=077015f3f016b7d62b8733579a7ca46841f5ab65
Certificate serial:       6E67BD39F80D0F662C50F39BA8C5823CBBF414BA
Authority key identifier: 07:70:15:F3:F0:16:B7:D6:2B:87:33:57:9A:7C:A4:68:41:F5:AB:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3AV8_AWt9YrhzNXmnykaEH1q2U.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3134382e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 16:04:01 +0000
ROA not before:           Mon 30 Nov 2020 15:59:01 +0000
ROA not after:            Mon 29 Nov 2021 16:04:01 +0000
asID:                     61317
IP address blocks:        5.180.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:67:bd:39:f8:0d:0f:66:2c:50:f3:9b:a8:c5:82:3c:bb:f4:14:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077015f3f016b7d62b8733579a7ca46841f5ab65
        Validity
            Not Before: Nov 30 15:59:01 2020 GMT
            Not After : Nov 29 16:04:01 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:d5:f8:12:8f:77:09:be:d0:be:9f:92:1f:
                    18:2c:8e:ef:32:33:6c:57:82:98:ca:a6:21:fa:74:
                    3a:5f:25:5a:86:ac:ff:d9:f8:a1:ff:92:40:84:da:
                    08:c2:c0:4e:43:fd:4b:62:82:e6:53:c6:0f:1e:aa:
                    dc:f9:90:a1:92:3f:23:f3:fa:31:ed:8e:d9:9e:f5:
                    41:27:19:69:98:e6:14:e8:05:74:ad:35:31:68:4a:
                    c4:6b:fc:57:6e:2d:47:a7:4a:3b:fe:3d:b8:39:68:
                    15:99:40:c9:0b:98:4f:9e:a9:cc:41:5d:f7:23:de:
                    65:b7:37:48:fd:ec:b5:57:cb:ef:b7:fd:d2:3b:4c:
                    ff:b7:7f:df:7c:5e:2e:42:bb:43:d4:06:ce:30:d4:
                    5c:d1:2c:0f:b8:2c:85:58:ee:fd:e5:fe:f8:d5:db:
                    66:7b:c7:d0:59:f9:d9:fd:35:8d:b0:6b:8f:06:68:
                    29:b4:c6:87:28:0e:3a:4f:35:90:71:5a:18:b8:48:
                    b3:65:32:d8:0a:bf:14:60:88:b7:62:f7:76:a7:08:
                    e0:6d:37:49:ef:ab:b5:bd:05:84:e2:51:c8:14:b0:
                    f6:75:08:52:97:bd:d2:ff:27:23:2e:15:15:10:6b:
                    16:f6:86:33:51:54:be:e9:c1:a7:c9:a7:0a:53:d8:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F6:D3:A4:F6:DC:C3:51:FA:91:2F:84:32:72:F9:59:0E:9E:39:08
            X509v3 Authority Key Identifier:
                keyid:07:70:15:F3:F0:16:B7:D6:2B:87:33:57:9A:7C:A4:68:41:F5:AB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/15/077015F3F016B7D62B8733579A7CA46841F5AB65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3AV8_AWt9YrhzNXmnykaEH1q2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3134382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:74:03:42:46:37:55:eb:60:cf:89:8f:80:02:39:1e:d7:b6:
         4b:3c:91:46:26:f2:ee:07:37:6b:8d:92:b1:bc:00:8a:20:2f:
         33:4b:4c:f6:a2:28:0b:98:ea:6d:7f:e6:6f:cf:a0:82:54:e8:
         06:18:6e:af:b6:e7:4d:61:04:b6:51:c5:ee:b5:e6:d3:8a:30:
         dc:32:e9:86:94:1c:01:05:be:92:1b:60:c1:97:0c:a6:b2:47:
         65:cc:63:42:ef:a2:5f:8d:4b:74:cb:96:70:d9:fe:41:a1:42:
         46:a6:2a:6e:bb:1e:64:13:17:bb:39:e6:a5:a1:dc:eb:ed:e8:
         7b:2c:28:84:3a:c4:d2:37:ea:a1:e8:04:d5:f5:c1:e7:dd:82:
         81:f2:79:44:26:84:50:fd:81:99:31:93:36:b2:77:10:ae:1d:
         96:b9:3b:db:ba:0c:30:4c:0a:18:65:9d:58:94:39:66:14:7f:
         53:16:2c:a8:d7:3b:d6:72:0e:b7:c8:fc:d9:9a:cc:1f:e0:16:
         26:1b:5d:f6:01:e3:53:96:f8:ae:54:51:6a:98:44:a2:b4:6a:
         2d:16:53:3d:b3:63:92:7b:f2:f5:20:91:8d:ab:9e:59:cc:d4:
         6c:6f:8f:35:00:3b:94:ca:d2:63:c3:2f:d6:fc:52:33:7e:56:
         c3:e9:56:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:46 2023 by rpki-client on console-fra.rpki-client.org