Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e203631333137.roa
File:                     3139332e32322e3135332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Dm+oEhNGLlAi+VTMJcVxepv4pvgtB0CLv441Ix58WYM=
Subject key identifier:   2A:2D:DD:27:63:97:03:A9:F2:97:E5:BC:54:22:DF:A6:19:FB:B3:DE
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       78929CED0C218295C6FB9D82BE9CA16562DC8690
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:41:15 +0000
ROA not before:           Tue 28 Jun 2022 04:36:15 +0000
ROA not after:            Tue 27 Jun 2023 04:41:15 +0000
asID:                     61317
IP address blocks:        193.22.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:92:9c:ed:0c:21:82:95:c6:fb:9d:82:be:9c:a1:65:62:dc:86:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:15 2022 GMT
            Not After : Jun 27 04:41:15 2023 GMT
        Subject: CN=2A2DDD27639703A9F297E5BC5422DFA619FBB3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:a8:2a:87:56:f4:7d:79:9b:fb:cd:df:1b:
                    c8:d8:2a:8c:4d:6d:e3:2d:9d:52:42:6f:0e:d4:53:
                    bb:af:19:7a:32:54:f6:fe:1b:8a:73:68:75:59:14:
                    95:8b:06:99:f0:ae:5a:80:b0:95:84:de:08:79:47:
                    40:09:4a:6a:4a:b5:6d:a1:ce:8c:44:e8:b4:24:5b:
                    40:af:1f:df:85:c0:33:08:ae:18:f1:1a:95:b0:53:
                    c1:f7:af:b3:81:4b:7f:bd:69:25:fc:dc:b2:b6:b8:
                    95:e9:cc:a9:5c:e5:17:ed:7b:7b:73:7e:27:91:d2:
                    08:78:a4:75:dc:82:21:5b:72:15:f8:02:b7:d3:b6:
                    54:cf:38:e6:17:32:08:d0:00:c0:4c:fd:b6:23:98:
                    46:89:6e:41:58:d7:15:f1:23:12:6e:05:7a:8f:45:
                    b2:46:c5:2f:a9:42:61:b0:6c:b4:3c:d0:ab:ad:6c:
                    f8:b7:64:84:c4:09:23:af:7c:64:7f:9f:92:c5:ab:
                    c7:7b:55:e3:5a:d6:c4:44:ea:50:3f:4f:e0:03:86:
                    7f:fa:b7:01:12:88:e7:05:1a:9c:6e:4f:36:5b:47:
                    9e:17:e8:2a:1f:e4:70:f7:8c:97:ab:8c:73:6a:db:
                    ce:89:b4:72:00:40:01:47:4f:72:82:6b:ff:60:ac:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2D:DD:27:63:97:03:A9:F2:97:E5:BC:54:22:DF:A6:19:FB:B3:DE
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:d3:a9:7a:fa:c2:59:ca:57:2c:52:70:f4:70:fc:e8:54:8d:
         18:81:23:04:2e:bf:0c:cf:d0:89:c3:33:8f:35:13:be:b2:02:
         eb:0f:d1:2a:09:17:9f:32:62:2d:1e:c3:36:a0:11:07:52:8c:
         7f:ee:c3:e4:4a:88:3e:fc:4b:bd:7a:19:f2:8a:f4:ce:fe:68:
         2c:60:90:be:35:3d:e9:42:fd:95:cd:fc:75:f8:cf:7b:e6:bd:
         e8:e6:6e:9e:a8:a2:52:e8:83:da:88:ca:6a:d8:ef:06:df:89:
         a6:87:85:07:78:1c:b8:70:19:f7:5e:f6:41:60:3e:46:3c:b1:
         29:4c:bf:ba:1a:e4:46:9f:c3:16:0f:e8:28:a9:a0:0c:98:4c:
         af:65:f7:8e:56:87:d6:80:05:13:4c:a9:3e:d8:bd:ea:c8:4f:
         67:45:01:5d:cd:32:6b:61:bf:97:63:59:85:8e:43:19:79:b9:
         e7:17:3f:9b:b2:50:38:96:13:30:27:42:aa:c6:13:3f:d5:90:
         bc:e5:04:2b:c9:f9:22:d5:b5:07:39:79:9c:1f:f2:9e:e5:dd:
         23:14:d5:11:0b:1e:be:0c:c7:df:44:11:99:57:3b:ca:3a:38:
         d5:1f:c9:98:82:71:91:33:71:98:e8:8c:14:54:a0:bb:64:e1:
         91:81:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org