Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/153/34352e31302e3135342e302f32342d3234203d3e203631333137.roa
File:                     34352e31302e3135342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          xGA3s90NOC/ODLX+QgEEsMSia09mRyqPsR2uuI9dogI=
Subject key identifier:   7B:C2:9E:CD:F2:32:D9:20:3E:A6:29:BD:81:19:F4:EB:0D:75:EA:E0
Certificate issuer:       /CN=2db99cc50935295f8e3427a0bb691b41507e3276
Certificate serial:       529217BAD6BCE1CC9FDCF6D0EE1F4D526254744B
Authority key identifier: 2D:B9:9C:C5:09:35:29:5F:8E:34:27:A0:BB:69:1B:41:50:7E:32:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LbmcxQk1KV-ONCegu2kbQVB-MnY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/153/34352e31302e3135342e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:29:04 +0000
ROA not before:           Tue 01 Dec 2020 23:24:04 +0000
ROA not after:            Tue 30 Nov 2021 23:29:04 +0000
asID:                     61317
IP address blocks:        45.10.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:92:17:ba:d6:bc:e1:cc:9f:dc:f6:d0:ee:1f:4d:52:62:54:74:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db99cc50935295f8e3427a0bb691b41507e3276
        Validity
            Not Before: Dec  1 23:24:04 2020 GMT
            Not After : Nov 30 23:29:04 2021 GMT
        Subject: CN=3082010A0282010100E43B6D0EA95F74E228254C2B0C85AA6934133D62C96DB799C784DDDB636DDBC449BEF1726F6744B67A3366B6AF1EECFA1A1A60E86AC2F53CBA25D1D611233CCC7AEF4C6B28E110F2227A26B628FB88AD91F75B3AF9D1A393DF7129E992687EF8B6E6FED87D51DBFAE94AC6939628DF5639BA74B5121F2CFEEF424749D142853BB16872C90660B1C16D9A45A9B140DFE40EF06E6A321D0ED0CEAA0E352E168B361F7FD6AC3D6124C334799DC26CB01BF3194854FF9155248177E126AAB34107F9784D6335589937CA6DBD9A547A6B9427CB8F4AFD2C12DB47F1C1231DA278B89F0E5998224206433B4386206A1F9BCF1AF57F4249F759B9793EE3E048CD4E27D70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3b:6d:0e:a9:5f:74:e2:28:25:4c:2b:0c:85:
                    aa:69:34:13:3d:62:c9:6d:b7:99:c7:84:dd:db:63:
                    6d:db:c4:49:be:f1:72:6f:67:44:b6:7a:33:66:b6:
                    af:1e:ec:fa:1a:1a:60:e8:6a:c2:f5:3c:ba:25:d1:
                    d6:11:23:3c:cc:7a:ef:4c:6b:28:e1:10:f2:22:7a:
                    26:b6:28:fb:88:ad:91:f7:5b:3a:f9:d1:a3:93:df:
                    71:29:e9:92:68:7e:f8:b6:e6:fe:d8:7d:51:db:fa:
                    e9:4a:c6:93:96:28:df:56:39:ba:74:b5:12:1f:2c:
                    fe:ef:42:47:49:d1:42:85:3b:b1:68:72:c9:06:60:
                    b1:c1:6d:9a:45:a9:b1:40:df:e4:0e:f0:6e:6a:32:
                    1d:0e:d0:ce:aa:0e:35:2e:16:8b:36:1f:7f:d6:ac:
                    3d:61:24:c3:34:79:9d:c2:6c:b0:1b:f3:19:48:54:
                    ff:91:55:24:81:77:e1:26:aa:b3:41:07:f9:78:4d:
                    63:35:58:99:37:ca:6d:bd:9a:54:7a:6b:94:27:cb:
                    8f:4a:fd:2c:12:db:47:f1:c1:23:1d:a2:78:b8:9f:
                    0e:59:98:22:42:06:43:3b:43:86:20:6a:1f:9b:cf:
                    1a:f5:7f:42:49:f7:59:b9:79:3e:e3:e0:48:cd:4e:
                    27:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C2:9E:CD:F2:32:D9:20:3E:A6:29:BD:81:19:F4:EB:0D:75:EA:E0
            X509v3 Authority Key Identifier:
                keyid:2D:B9:9C:C5:09:35:29:5F:8E:34:27:A0:BB:69:1B:41:50:7E:32:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/153/2DB99CC50935295F8E3427A0BB691B41507E3276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbmcxQk1KV-ONCegu2kbQVB-MnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/153/34352e31302e3135342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:89:02:54:63:04:23:20:1a:4a:bc:13:a2:c9:55:8a:90:30:
         4e:46:f5:ef:59:94:fa:04:b2:34:56:ca:22:8e:94:d0:65:ee:
         07:5b:4c:38:95:6f:9f:bb:ab:6e:06:3e:ae:0a:02:bb:25:3d:
         71:69:3f:57:08:2d:15:e5:c7:06:9e:12:c9:27:d2:59:c5:fc:
         b5:37:6d:b9:18:e5:f9:17:8b:db:99:66:7d:ce:9d:f9:f7:a4:
         82:23:af:4a:54:05:97:6e:3b:d5:0d:05:4e:53:c2:10:7f:77:
         03:80:0b:e0:55:b3:24:47:06:82:f3:2e:db:9d:f4:a9:34:28:
         73:6e:31:81:a2:ec:e9:f9:35:e1:9a:ab:52:8d:53:03:00:7b:
         18:cd:56:29:c7:b7:b1:f2:56:5a:50:e2:63:d9:8d:eb:1c:2d:
         ee:a6:ba:8f:8f:52:4b:89:f7:e7:df:0c:97:ee:d5:dc:ec:79:
         13:d8:67:12:e9:c2:8b:6b:2f:18:99:ff:1f:09:9a:a6:75:02:
         c2:4c:a3:10:6c:0d:0d:fd:5c:82:bc:d9:fd:4c:9f:db:e8:6b:
         41:87:38:55:de:c3:f9:24:4c:2a:92:44:87:21:6f:6d:a6:fd:
         eb:0c:9a:39:dd:ce:67:d3:76:3c:15:af:87:d0:e5:3c:94:ff:
         5d:bd:4a:d2
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUUpIXuta84cyf3PbQ7h9NUmJUdEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmRiOTljYzUwOTM1Mjk1ZjhlMzQyN2EwYmI2OTFiNDE1
MDdlMzI3NjAeFw0yMDEyMDEyMzI0MDRaFw0yMTExMzAyMzI5MDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTQzQjZEMEVBOTVGNzRFMjI4
MjU0QzJCMEM4NUFBNjkzNDEzM0Q2MkM5NkRCNzk5Qzc4NEREREI2MzZEREJDNDQ5
QkVGMTcyNkY2NzQ0QjY3QTMzNjZCNkFGMUVFQ0ZBMUExQTYwRTg2QUMyRjUzQ0JB
MjVEMUQ2MTEyMzNDQ0M3QUVGNEM2QjI4RTExMEYyMjI3QTI2QjYyOEZCODhBRDkx
Rjc1QjNBRjlEMUEzOTNERjcxMjlFOTkyNjg3RUY4QjZFNkZFRDg3RDUxREJGQUU5
NEFDNjkzOTYyOERGNTYzOUJBNzRCNTEyMUYyQ0ZFRUY0MjQ3NDlEMTQyODUzQkIx
Njg3MkM5MDY2MEIxQzE2RDlBNDVBOUIxNDBERkU0MEVGMDZFNkEzMjFEMEVEMENF
QUEwRTM1MkUxNjhCMzYxRjdGRDZBQzNENjEyNEMzMzQ3OTlEQzI2Q0IwMUJGMzE5
NDg1NEZGOTE1NTI0ODE3N0UxMjZBQUIzNDEwN0Y5Nzg0RDYzMzU1ODk5MzdDQTZE
QkQ5QTU0N0E2Qjk0MjdDQjhGNEFGRDJDMTJEQjQ3RjFDMTIzMURBMjc4Qjg5RjBF
NTk5ODIyNDIwNjQzM0I0Mzg2MjA2QTFGOUJDRjFBRjU3RjQyNDlGNzU5Qjk3OTNF
RTNFMDQ4Q0Q0RTI3RDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5DttDqlfdOIoJUwrDIWqaTQTPWLJbbeZx4Td22Nt28RJvvFyb2dE
tnozZravHuz6Ghpg6GrC9Ty6JdHWESM8zHrvTGso4RDyInomtij7iK2R91s6+dGj
k99xKemSaH74tub+2H1R2/rpSsaTlijfVjm6dLUSHyz+70JHSdFChTuxaHLJBmCx
wW2aRamxQN/kDvBuajIdDtDOqg41LhaLNh9/1qw9YSTDNHmdwmywG/MZSFT/kVUk
gXfhJqqzQQf5eE1jNViZN8ptvZpUemuUJ8uPSv0sEttH8cEjHaJ4uJ8OWZgiQgZD
O0OGIGofm88a9X9CSfdZuXk+4+BIzU4n1wIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FHvCns3yMtkgPqYpvYEZ9OsNdergMB8GA1UdIwQYMBaAFC25nMUJNSlfjjQnoLtp
G0FQfjJ2MA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNTMvMkRC
OTlDQzUwOTM1Mjk1RjhFMzQyN0EwQkI2OTFCNDE1MDdFMzI3Ni5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL0xibWN4UWsxS1YtT05DZWd1MmtiUVZCLU1uWS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTUzLzM0MzUyZTMxMzAyZTMx
MzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtCpowDQYJKoZIhvcNAQELBQADggEBACaJAlRjBCMgGkq8E6LJVYqQME5G9e9Z
lPoEsjRWyiKOlNBl7gdbTDiVb5+7q24GPq4KArslPXFpP1cILRXlxwaeEskn0lnF
/LU3bbkY5fkXi9uZZn3Onfn3pIIjr0pUBZduO9UNBU5TwhB/dwOAC+BVsyRHBoLz
Ltud9Kk0KHNuMYGi7On5NeGaq1KNUwMAexjNVinHt7HyVlpQ4mPZjescLe6muo+P
UkuJ9+ffDJfu1dzseRPYZxLpwotrLxiZ/x8JmqZ1AsJMoxBsDQ39XIK82f1Mn9vo
a0GHOFXew/kkTCqSRIchb22m/esMmjndzmfTdjwVr4fQ5TyU/129StI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:46 2023 by rpki-client on console-fra.rpki-client.org