Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33322e302f32332d3234203d3e203631333137.roa
File:                     352e3138322e33322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          WsovMr3h0mR8JoaaQdrD1SYc1anKPfbMloQW4oT8up4=
Subject key identifier:   5F:AE:6D:69:4B:0B:0F:D8:AC:93:02:AB:7B:10:F4:66:C5:81:06:18
Certificate issuer:       /CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
Certificate serial:       6B7A80351C18B926AC8FDF3FB390BB70AFE79828
Authority key identifier: 18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33322e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:26:35 +0000
ROA not before:           Tue 01 Dec 2020 23:21:35 +0000
ROA not after:            Tue 30 Nov 2021 23:26:35 +0000
asID:                     61317
IP address blocks:        5.182.32.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7a:80:35:1c:18:b9:26:ac:8f:df:3f:b3:90:bb:70:af:e7:98:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
        Validity
            Not Before: Dec  1 23:21:35 2020 GMT
            Not After : Nov 30 23:26:35 2021 GMT
        Subject: CN=3082010A0282010100BB29AE5D87BFAF46CDB12B63F8CC9E5D23579F50A24CB5DD94A98AFC4F24A83B9D0CC06F74CB37BDC33047644623A803B00585A456FB3466C0B592C3963FAA99CCEE100B80926C3B412967C1AA533B445479D4A4BBA012D24F0D4DBF902D7927BE21168D13593C5BBECBAE8C78327AF0AFEEE3DF705427AF8C029EAA6710E052DAD58F5D59920BE916004B08B336C999EFE6AD9F2B6DED038BF37B0E94ECBE881B66BECE1C3066CAD08F06078BCAE436ADF4F4DABE566BFD0EA2A26A43B7C2B5BE8FBD59D07F1F56F9F77C099A0C5DB159C610BAC856DAE6664C0E1C6A963B0CA88D87D6740D4F6238A43D0916870FC4AC785CA2E1DF2A5369F2926E073231110203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:ae:5d:87:bf:af:46:cd:b1:2b:63:f8:cc:
                    9e:5d:23:57:9f:50:a2:4c:b5:dd:94:a9:8a:fc:4f:
                    24:a8:3b:9d:0c:c0:6f:74:cb:37:bd:c3:30:47:64:
                    46:23:a8:03:b0:05:85:a4:56:fb:34:66:c0:b5:92:
                    c3:96:3f:aa:99:cc:ee:10:0b:80:92:6c:3b:41:29:
                    67:c1:aa:53:3b:44:54:79:d4:a4:bb:a0:12:d2:4f:
                    0d:4d:bf:90:2d:79:27:be:21:16:8d:13:59:3c:5b:
                    be:cb:ae:8c:78:32:7a:f0:af:ee:e3:df:70:54:27:
                    af:8c:02:9e:aa:67:10:e0:52:da:d5:8f:5d:59:92:
                    0b:e9:16:00:4b:08:b3:36:c9:99:ef:e6:ad:9f:2b:
                    6d:ed:03:8b:f3:7b:0e:94:ec:be:88:1b:66:be:ce:
                    1c:30:66:ca:d0:8f:06:07:8b:ca:e4:36:ad:f4:f4:
                    da:be:56:6b:fd:0e:a2:a2:6a:43:b7:c2:b5:be:8f:
                    bd:59:d0:7f:1f:56:f9:f7:7c:09:9a:0c:5d:b1:59:
                    c6:10:ba:c8:56:da:e6:66:4c:0e:1c:6a:96:3b:0c:
                    a8:8d:87:d6:74:0d:4f:62:38:a4:3d:09:16:87:0f:
                    c4:ac:78:5c:a2:e1:df:2a:53:69:f2:92:6e:07:32:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AE:6D:69:4B:0B:0F:D8:AC:93:02:AB:7B:10:F4:66:C5:81:06:18
            X509v3 Authority Key Identifier:
                keyid:18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/1897F5D19C0B1376CBBC8F96D8489F37A85FBF2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:dd:52:8f:7e:cf:16:7d:2c:2d:0b:55:eb:d3:06:9a:3a:27:
         87:fd:3f:9a:94:bb:41:92:8c:6b:f3:55:5c:ec:62:e6:3c:31:
         c6:80:32:a7:79:2e:aa:fe:3d:98:75:47:de:84:21:af:b2:0c:
         af:4d:69:c4:d7:68:ec:57:06:27:98:51:8b:04:01:b1:8f:67:
         7c:56:5c:68:17:36:50:67:35:4e:5a:06:25:d2:ed:7b:60:5f:
         89:e6:7c:c6:a1:0f:93:cd:11:07:96:cb:97:7c:ed:e7:d7:62:
         0c:bb:86:57:9a:c3:94:54:66:80:34:7a:53:0e:76:22:69:3e:
         96:39:d0:05:13:36:84:5d:7d:34:f3:ea:03:5c:fb:56:5c:79:
         07:53:b5:b8:f8:38:f1:c8:f4:9c:9e:ae:21:08:dc:f4:fa:c7:
         5a:df:f4:33:bd:77:ab:0b:00:47:4d:b2:4d:8a:2c:a3:a6:c3:
         6b:17:74:c4:df:55:22:c9:98:d1:e3:50:5d:e6:42:b8:86:8e:
         77:37:67:2a:03:04:48:97:84:df:57:55:f4:00:8e:c0:c6:6d:
         76:cf:49:3e:a1:0a:70:77:cc:f8:a6:89:e1:87:7b:aa:42:62:
         d8:5f:34:8f:4e:09:ff:7d:4f:ef:df:6a:59:fb:0e:45:29:dc:
         13:f3:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org