Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/153/34352e31302e3135342e302f32342d3234203d3e203430363736.roa
File:                     34352e31302e3135342e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          UWg6Oa1zg/Q0COthqme7++8ce1Z1zR+bUSzR8ani6ng=
Subject key identifier:   5D:1B:E6:C9:49:91:2A:67:71:9A:0D:EC:F5:89:B1:DC:97:2B:83:10
Certificate issuer:       /CN=2db99cc50935295f8e3427a0bb691b41507e3276
Certificate serial:       33DB516734C505043FD3F685B9B97C0CA8ED1414
Authority key identifier: 2D:B9:9C:C5:09:35:29:5F:8E:34:27:A0:BB:69:1B:41:50:7E:32:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LbmcxQk1KV-ONCegu2kbQVB-MnY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/153/34352e31302e3135342e302f32342d3234203d3e203430363736.roa
Signing time:             Thu 07 Jan 2021 21:06:50 +0000
ROA not before:           Thu 07 Jan 2021 21:01:50 +0000
ROA not after:            Thu 06 Jan 2022 21:06:50 +0000
asID:                     40676
IP address blocks:        45.10.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:db:51:67:34:c5:05:04:3f:d3:f6:85:b9:b9:7c:0c:a8:ed:14:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db99cc50935295f8e3427a0bb691b41507e3276
        Validity
            Not Before: Jan  7 21:01:50 2021 GMT
            Not After : Jan  6 21:06:50 2022 GMT
        Subject: CN=3082010A02820101009D07F9BFD247540DD3CB5A2EA4A58F2760861167D885973090DEB988FC0E3FA36C6F8E7640FEFC243FA988CEBCCFC84B5BDCC465D4DB6F0852607A9CC141F6AEFF4CE643C7A1F05552E99C9D23296447E77BB86076F50F8687D86B51A31D85B3F6FE363ED47ED7ECBB181BBA005055C7822F13E97D4D1ED69EC877E07FA09271093833D38E66C355066E774B7DC63C813AC671575C53832728E0516A31A1C31A0C4DD9E9E32F468001815FD642D0B2AF47B935F9404228BA7D2821E225367F3141315665A89B66119C2418EAC1B01AFD5474EA218911D045C804E8C916D0C38CB216379A41ACEE93148C35019B3D1A903C09C4A629755FDAD2353395E16D838B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:f9:bf:d2:47:54:0d:d3:cb:5a:2e:a4:a5:
                    8f:27:60:86:11:67:d8:85:97:30:90:de:b9:88:fc:
                    0e:3f:a3:6c:6f:8e:76:40:fe:fc:24:3f:a9:88:ce:
                    bc:cf:c8:4b:5b:dc:c4:65:d4:db:6f:08:52:60:7a:
                    9c:c1:41:f6:ae:ff:4c:e6:43:c7:a1:f0:55:52:e9:
                    9c:9d:23:29:64:47:e7:7b:b8:60:76:f5:0f:86:87:
                    d8:6b:51:a3:1d:85:b3:f6:fe:36:3e:d4:7e:d7:ec:
                    bb:18:1b:ba:00:50:55:c7:82:2f:13:e9:7d:4d:1e:
                    d6:9e:c8:77:e0:7f:a0:92:71:09:38:33:d3:8e:66:
                    c3:55:06:6e:77:4b:7d:c6:3c:81:3a:c6:71:57:5c:
                    53:83:27:28:e0:51:6a:31:a1:c3:1a:0c:4d:d9:e9:
                    e3:2f:46:80:01:81:5f:d6:42:d0:b2:af:47:b9:35:
                    f9:40:42:28:ba:7d:28:21:e2:25:36:7f:31:41:31:
                    56:65:a8:9b:66:11:9c:24:18:ea:c1:b0:1a:fd:54:
                    74:ea:21:89:11:d0:45:c8:04:e8:c9:16:d0:c3:8c:
                    b2:16:37:9a:41:ac:ee:93:14:8c:35:01:9b:3d:1a:
                    90:3c:09:c4:a6:29:75:5f:da:d2:35:33:95:e1:6d:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1B:E6:C9:49:91:2A:67:71:9A:0D:EC:F5:89:B1:DC:97:2B:83:10
            X509v3 Authority Key Identifier:
                keyid:2D:B9:9C:C5:09:35:29:5F:8E:34:27:A0:BB:69:1B:41:50:7E:32:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/153/2DB99CC50935295F8E3427A0BB691B41507E3276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbmcxQk1KV-ONCegu2kbQVB-MnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/153/34352e31302e3135342e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a8:b8:1e:bd:9a:a8:8e:19:4f:46:02:a7:4e:b9:37:4f:4b:
         bd:5c:5f:42:d8:d6:b3:d7:61:08:6f:39:74:34:3d:0f:a8:eb:
         79:0b:cf:81:81:89:20:32:2c:d0:dc:0d:35:a1:ca:f8:0e:4d:
         af:94:6b:26:62:72:db:79:8a:82:e0:29:07:90:1a:68:3b:24:
         b0:94:a5:8e:2e:a7:2c:5d:1b:e1:f6:e9:a1:0a:a6:0b:9a:b0:
         89:06:c5:43:c8:51:46:da:ea:7c:a2:d0:b2:8e:ed:85:06:18:
         16:7c:10:8b:d8:ef:ec:3c:bc:5a:b4:63:b5:b5:19:6b:b9:be:
         39:88:9c:0b:a2:4f:0c:76:b8:69:d3:b1:98:57:64:3d:3a:20:
         51:72:7f:09:25:c6:2a:bd:0c:c0:b1:f9:fa:a0:4c:70:b4:68:
         9a:79:71:81:25:c0:19:52:f3:21:72:ab:b5:a1:10:dc:61:b3:
         71:5d:65:a6:c4:ad:fc:2c:47:18:dd:92:91:9a:e2:a1:90:c3:
         98:22:7f:e1:d6:4e:50:bc:0c:0f:60:9c:73:56:50:3c:37:56:
         79:38:55:45:3d:c7:80:69:e6:e1:a8:d9:ca:06:83:be:1a:05:
         4e:b6:4c:5a:33:5c:da:65:12:49:e5:67:cb:20:51:e1:1b:38:
         6f:e0:aa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:46 2023 by rpki-client on console-fra.rpki-client.org