Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3139312e302f32342d3234203d3e203630373231.roa
File:                     34352e38382e3139312e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          T6d8iM0egV31APM7c4sD4YTRIzy9TD/v+dW8ygk3rCw=
Subject key identifier:   BD:26:48:98:D3:C6:37:FD:5E:8F:04:FB:7C:2A:80:97:F1:D0:4A:CA
Certificate issuer:       /CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
Certificate serial:       09FE3F2EF67BDA1E3E64FA720ACF796D6ECE916F
Authority key identifier: 26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3139312e302f32342d3234203d3e203630373231.roa
Signing time:             Mon 01 Feb 2021 09:36:37 +0000
ROA not before:           Mon 01 Feb 2021 09:31:37 +0000
ROA not after:            Mon 31 Jan 2022 09:36:37 +0000
asID:                     60721
IP address blocks:        45.88.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fe:3f:2e:f6:7b:da:1e:3e:64:fa:72:0a:cf:79:6d:6e:ce:91:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
        Validity
            Not Before: Feb  1 09:31:37 2021 GMT
            Not After : Jan 31 09:36:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:37:22:e7:6f:07:56:8d:ab:ce:a6:d3:92:
                    e9:95:45:8b:ad:41:40:f2:ca:5b:23:b6:38:9c:8b:
                    bb:b8:39:08:70:24:75:0c:b9:05:45:91:ee:f8:41:
                    59:c5:55:72:a1:c3:b7:be:c1:ae:80:52:6f:34:a1:
                    f4:7c:34:00:80:05:08:56:46:cf:f8:85:06:da:cf:
                    f9:53:92:e7:cd:d3:d0:ea:5a:09:7c:9a:fd:f2:17:
                    f8:b6:b0:6e:d5:86:33:70:e4:78:e1:0e:12:d9:d0:
                    7d:64:5c:00:7c:92:26:3e:aa:f5:77:8a:89:c6:8e:
                    8c:55:0b:0e:10:bf:61:c8:77:06:e3:bb:a8:8d:2b:
                    9b:6c:d9:21:69:4b:e2:b3:99:f2:4f:04:a4:9e:6e:
                    ce:04:00:b5:09:b8:26:e4:94:ca:4e:82:31:00:db:
                    ed:cf:bf:b3:a1:9e:ef:ac:35:35:1a:82:d7:1b:aa:
                    7d:52:6a:8c:1e:8e:9f:7e:74:9e:b2:d1:e8:0a:ca:
                    6e:13:e6:1b:1a:31:23:c1:0f:40:a5:cf:10:72:02:
                    b3:22:d3:ec:31:e0:74:0b:0d:2d:ca:0f:00:89:8d:
                    21:51:c2:4e:1d:4e:45:8b:95:64:a4:ff:25:37:56:
                    c1:b2:81:36:b0:71:ff:50:dc:bc:44:72:d9:ca:9e:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:48:98:D3:C6:37:FD:5E:8F:04:FB:7C:2A:80:97:F1:D0:4A:CA
            X509v3 Authority Key Identifier:
                keyid:26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/26C157349BEEB72D0815CFBB33FCABC27FAD9FC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3139312e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:1f:b7:8a:c6:9d:2d:ef:5e:ce:c4:d0:4c:50:39:25:5c:3a:
         24:cc:76:5a:5a:4c:61:90:88:68:a0:08:34:70:79:75:b3:21:
         5a:f3:ca:54:21:2e:91:fb:a4:2e:43:fd:1f:a7:f6:8f:e7:2f:
         cd:5b:2d:91:08:65:67:30:8e:c8:0e:57:aa:a9:30:3b:e9:2c:
         4f:9d:5f:41:ff:a1:1e:64:0b:65:4f:55:51:ab:87:40:7f:07:
         fb:88:5e:b4:b2:16:55:fd:b5:1f:75:a7:11:d6:53:da:3b:6b:
         2c:17:5b:51:ba:27:b1:41:01:27:34:81:1d:6b:7b:46:db:64:
         c8:d6:2c:26:c4:a8:be:20:b5:16:89:65:c6:72:14:62:4e:c0:
         82:dd:1f:5e:14:f2:9b:4d:1e:bc:77:76:d7:36:6a:ca:d6:de:
         77:41:a5:f0:aa:ec:80:92:f5:66:a0:ac:0e:72:02:5a:f4:44:
         82:d3:f8:f0:5c:da:50:8c:77:69:d3:f3:b2:21:05:02:ec:06:
         6c:a8:40:27:24:d3:4f:51:0f:67:06:15:4a:7d:2e:d9:df:a4:
         50:5c:bf:96:99:cf:04:8e:06:17:fa:f9:b6:e0:d7:bd:e6:8a:
         6f:09:3b:a6:10:9a:c6:ba:b0:be:15:45:b6:c6:37:d1:c7:12:
         e2:d8:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org