Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3139302e302f32332d3234203d3e203631333137.roa
File:                     34352e38382e3139302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          gKH1ZemNRi2cDNILgKZrNND6bjyCKevAXLMLu5CdD7Y=
Subject key identifier:   47:F9:A1:66:C2:74:A0:E3:71:C0:3B:47:29:6F:A3:D3:07:87:2F:B1
Certificate issuer:       /CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
Certificate serial:       2EDA57BA28415ED59827A7A6728B323339AB29A9
Authority key identifier: 26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3139302e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 19:12:05 +0000
ROA not before:           Mon 30 Nov 2020 19:07:05 +0000
ROA not after:            Mon 29 Nov 2021 19:12:05 +0000
asID:                     61317
IP address blocks:        45.88.190.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:da:57:ba:28:41:5e:d5:98:27:a7:a6:72:8b:32:33:39:ab:29:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
        Validity
            Not Before: Nov 30 19:07:05 2020 GMT
            Not After : Nov 29 19:12:05 2021 GMT
        Subject: CN=3082010A0282010100E14532917ED83C17C55542A90F9A1F8EEBCC26F559DCD843EE583952B19829CE8D60F5D1C37191E4EB0868204EDC93FC7D6E4E56E1DBAE4BF56A04C36DDE25573CB5566212988AA127C5847526FF83A6B21FDF35BD4064F5B68A9509C063299577F6056F888B9943DA7A75D950F7153C7543321A3BB192EDBF37243387AAC0800E601C848D3F110D12B296D4AC6A916F8FA2E3DE9D961D2A4C4D749CFCCBCF684E520F29756341236D23E570388B1E3091A58ED33E1F00552CC2FA5154ACD772C3C0580C3EB16D56E5A2E8FF5F082C68ECE33819542E6FA5A84209A025E7AFD66B2379BA26ABA541C104B1EB940834426840CF16BB5A56B783AEB5D4D31C37DB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:45:32:91:7e:d8:3c:17:c5:55:42:a9:0f:9a:
                    1f:8e:eb:cc:26:f5:59:dc:d8:43:ee:58:39:52:b1:
                    98:29:ce:8d:60:f5:d1:c3:71:91:e4:eb:08:68:20:
                    4e:dc:93:fc:7d:6e:4e:56:e1:db:ae:4b:f5:6a:04:
                    c3:6d:de:25:57:3c:b5:56:62:12:98:8a:a1:27:c5:
                    84:75:26:ff:83:a6:b2:1f:df:35:bd:40:64:f5:b6:
                    8a:95:09:c0:63:29:95:77:f6:05:6f:88:8b:99:43:
                    da:7a:75:d9:50:f7:15:3c:75:43:32:1a:3b:b1:92:
                    ed:bf:37:24:33:87:aa:c0:80:0e:60:1c:84:8d:3f:
                    11:0d:12:b2:96:d4:ac:6a:91:6f:8f:a2:e3:de:9d:
                    96:1d:2a:4c:4d:74:9c:fc:cb:cf:68:4e:52:0f:29:
                    75:63:41:23:6d:23:e5:70:38:8b:1e:30:91:a5:8e:
                    d3:3e:1f:00:55:2c:c2:fa:51:54:ac:d7:72:c3:c0:
                    58:0c:3e:b1:6d:56:e5:a2:e8:ff:5f:08:2c:68:ec:
                    e3:38:19:54:2e:6f:a5:a8:42:09:a0:25:e7:af:d6:
                    6b:23:79:ba:26:ab:a5:41:c1:04:b1:eb:94:08:34:
                    42:68:40:cf:16:bb:5a:56:b7:83:ae:b5:d4:d3:1c:
                    37:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F9:A1:66:C2:74:A0:E3:71:C0:3B:47:29:6F:A3:D3:07:87:2F:B1
            X509v3 Authority Key Identifier:
                keyid:26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/26C157349BEEB72D0815CFBB33FCABC27FAD9FC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3139302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:0b:08:b1:ef:f0:79:00:77:d6:e6:29:de:15:a8:e3:b3:78:
         98:38:28:03:36:06:2b:4f:68:87:f3:50:65:4a:83:70:d0:86:
         3e:a4:42:e1:9e:89:51:d5:ee:0e:0b:c7:e7:70:12:4d:1d:b3:
         4b:23:cd:c4:25:2b:59:74:1e:15:1c:ca:d6:2d:a2:45:a8:7c:
         32:91:52:af:71:37:3f:47:3f:8f:c7:24:90:84:2c:4b:ef:ed:
         7d:cf:2a:c4:89:04:ce:a6:bb:76:d4:57:b5:d8:2c:a4:e9:7f:
         88:34:9d:ca:59:ca:ec:3a:35:9c:51:2f:9f:b6:b3:41:84:00:
         90:a2:a3:05:19:33:2c:be:0e:67:08:f5:f4:42:c1:b4:9c:89:
         5f:b3:62:d8:f4:e5:70:cd:67:b1:41:9c:88:8a:42:a3:29:7d:
         27:21:d1:05:41:d6:98:43:b9:f1:e1:d2:03:e8:68:4f:c4:d7:
         2c:2a:be:fb:03:98:56:58:b7:f9:5b:f7:00:ce:af:83:a8:32:
         63:66:8f:ac:53:0f:19:fb:4f:19:9e:6f:fd:00:bb:fd:36:ec:
         36:0c:ad:0d:03:39:58:2c:bb:2f:b0:5f:b4:b1:18:10:be:56:
         1d:b3:91:d1:8f:92:1e:bc:96:ed:83:e2:ba:b3:b0:57:25:5c:
         4a:b4:89:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org