Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139322e302f32332d3234203d3e203631333137.roa
File:                     34352e3133372e3139322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          /acJfH2oBRI3t4UP4y2g+YpIgED2jhMzBwD+XCcu7u8=
Subject key identifier:   28:84:94:82:BB:38:91:D6:D7:38:A9:4D:AF:A8:E3:5C:F1:DF:9E:74
Certificate issuer:       /CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
Certificate serial:       744FF07D8BF766009CEA821569A91A965B5BBE11
Authority key identifier: 10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139322e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 19:13:45 +0000
ROA not before:           Mon 30 Nov 2020 19:08:45 +0000
ROA not after:            Mon 29 Nov 2021 19:13:45 +0000
asID:                     61317
IP address blocks:        45.137.192.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4f:f0:7d:8b:f7:66:00:9c:ea:82:15:69:a9:1a:96:5b:5b:be:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
        Validity
            Not Before: Nov 30 19:08:45 2020 GMT
            Not After : Nov 29 19:13:45 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:e3:f2:73:b9:8b:f9:d3:59:16:36:ab:f4:
                    d7:93:3e:dc:86:33:bd:a9:8a:85:8c:78:62:6f:a6:
                    93:5a:da:f8:85:a8:ea:31:c7:69:c1:7d:09:67:80:
                    a2:cf:67:fa:b3:2b:8f:f6:b6:5c:26:fc:db:fc:47:
                    aa:21:14:f7:f7:8f:97:a0:39:08:ce:e3:56:d8:af:
                    da:0c:ea:20:f7:60:83:3c:11:9f:9b:c8:e2:ca:65:
                    45:32:80:f5:02:f0:ef:08:af:09:f3:49:fc:14:52:
                    70:26:64:30:f0:d4:d0:e0:69:2f:9f:4a:35:23:16:
                    01:4e:a8:d9:de:2b:a4:d4:c9:23:db:0d:2a:a4:28:
                    e0:b8:0a:3f:4c:d8:63:e8:2f:5e:7c:0d:c9:77:fc:
                    a4:f5:4d:ca:b5:05:b4:a0:b2:5b:d6:84:2f:83:e7:
                    74:f1:47:a4:2d:89:b8:48:ab:08:41:90:aa:c6:ab:
                    be:ad:29:79:5b:17:36:15:9b:a7:f2:3d:fd:a0:1a:
                    a5:73:81:e9:7c:57:e6:aa:9b:97:38:d4:40:56:59:
                    6b:53:19:87:73:83:82:3a:0b:ef:fa:19:23:db:fa:
                    4e:89:72:fd:ab:09:e4:25:7f:49:c0:67:8b:1a:5f:
                    d6:78:7d:47:cf:4c:27:7d:cc:4e:36:1e:a2:69:df:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:84:94:82:BB:38:91:D6:D7:38:A9:4D:AF:A8:E3:5C:F1:DF:9E:74
            X509v3 Authority Key Identifier:
                keyid:10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/101D22F56EE5531CC92D0861BEAE087DC3B08EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:fc:11:c5:a1:ec:a0:17:ad:fa:95:4f:e8:d4:b0:ce:d5:
         c9:6b:32:3b:bd:77:bb:1f:9e:4d:35:7b:fb:a8:2c:6d:9f:cf:
         2e:c2:94:4a:fc:b5:54:eb:e5:84:31:6b:1d:83:1b:04:96:9a:
         aa:0e:e3:af:77:d1:fd:ae:8b:85:50:20:49:64:a6:4e:81:64:
         7c:0a:d9:bf:8f:d4:cc:56:4b:8e:89:65:56:be:eb:dd:12:a6:
         f7:8a:d5:34:10:5f:68:75:1f:aa:7f:ce:0f:21:05:9b:97:ab:
         22:c9:7f:2e:1d:9e:d7:5e:76:d3:12:eb:30:e9:86:ce:22:50:
         31:7d:49:97:b1:8a:84:c9:48:6a:4f:32:dd:6b:f0:e3:a7:32:
         41:d3:05:0f:fd:cd:40:9e:ae:93:4f:0b:41:7a:b8:d1:81:6f:
         f9:39:5f:21:04:95:ae:15:8f:b4:47:18:5a:19:9c:7e:bd:49:
         ab:bf:cf:8a:d9:6f:bd:73:43:38:67:01:9d:0a:2e:84:f5:0b:
         39:b1:08:1e:ae:b4:e0:87:de:43:0f:a6:a4:fd:3e:de:72:f2:
         52:05:2c:89:ef:cf:e5:86:8b:08:52:55:5a:c6:22:97:77:76:
         4a:7d:7d:e9:1f:c4:16:c8:d4:93:18:5d:51:64:24:be:dd:88:
         b0:95:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org