Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32322e302f32342d3234203d3e2030.roa
File:                     38342e35342e32322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          JNuXYSUxAb23qyh0TVEb4J5rI8w5fTgXmesrobLSJSA=
Subject key identifier:   54:FA:A0:E3:0F:09:F1:D4:06:76:8A:25:FB:9D:98:FF:1E:4D:1F:C5
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5CF83399634021AD6E56CEA2479103672BB2618A
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32322e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:19:08 +0000
ROA not before:           Fri 03 Mar 2023 16:14:08 +0000
ROA not after:            Fri 01 Mar 2024 16:19:08 +0000
asID:                     0
IP address blocks:        84.54.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f8:33:99:63:40:21:ad:6e:56:ce:a2:47:91:03:67:2b:b2:61:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Mar  3 16:14:08 2023 GMT
            Not After : Mar  1 16:19:08 2024 GMT
        Subject: CN=54FAA0E30F09F1D406768A25FB9D98FF1E4D1FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:5a:30:25:98:85:8a:12:a0:7d:5c:c0:2d:
                    a2:1c:a0:5e:99:cd:6a:d5:78:fc:bc:a2:55:c7:50:
                    5d:89:d0:bb:d4:60:a6:21:87:4d:f3:02:be:59:ac:
                    78:a8:8b:d3:34:44:a0:50:0f:f7:cc:d4:ac:d5:7e:
                    ac:51:17:b6:0d:99:69:aa:cd:60:c7:91:6c:39:4a:
                    ef:95:1d:fc:fe:6a:24:84:bd:07:37:ab:9c:e3:ca:
                    be:97:fe:f5:84:03:18:d7:66:3b:ed:cb:e0:c8:5f:
                    04:cb:1e:c6:62:e0:c9:ec:a7:7c:5e:cb:ad:3c:3e:
                    f1:36:7b:0a:b8:9a:90:a2:d4:ca:bb:4a:33:ae:e0:
                    ea:06:3d:85:aa:0f:ec:bb:1b:b6:c8:2c:f0:42:5c:
                    1c:a1:e9:17:85:33:94:23:c0:90:25:1e:70:74:00:
                    bc:60:65:a8:5b:40:b8:63:10:a5:85:c2:60:06:6b:
                    3e:28:b0:1e:e0:b9:30:84:02:fc:4a:8f:f9:ee:c8:
                    43:f6:1d:87:c3:25:c8:4f:63:7a:7d:ec:60:3e:2a:
                    ba:11:9a:ce:6d:f6:d7:4e:09:d7:63:bc:ec:19:df:
                    50:ce:1d:b4:df:7b:26:bf:87:97:b1:7c:cc:39:84:
                    4d:98:43:3e:b6:77:47:7a:ad:07:6f:73:e1:f0:85:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FA:A0:E3:0F:09:F1:D4:06:76:8A:25:FB:9D:98:FF:1E:4D:1F:C5
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32322e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.54.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ff:12:4e:82:8b:0e:67:bf:4b:a7:20:8e:2f:d4:44:3e:ad:
         12:fa:fc:07:06:83:b4:dc:30:f6:55:7b:2f:84:5e:ef:97:6a:
         ec:ef:16:93:26:27:72:31:ac:0f:cc:f9:8d:d4:04:7c:cf:0e:
         57:b0:14:b0:c2:1a:f9:8b:94:80:dd:f5:41:0d:8a:dd:a6:c2:
         85:cf:7b:10:5b:39:7b:08:e3:bd:f2:9b:a3:2f:7c:89:a1:71:
         3c:cf:a3:0f:56:b7:ea:b4:5e:e9:3b:35:96:f9:31:39:0d:08:
         6d:b4:5a:47:15:c8:44:59:81:90:37:10:43:67:4b:ec:8f:ee:
         8f:f8:98:47:78:6c:4a:df:7c:c0:b6:1d:a5:1d:b1:6b:26:f9:
         7e:ce:c1:a3:ef:2b:93:cf:cd:dd:50:59:1e:dd:01:bd:d3:f1:
         74:5e:9e:32:17:98:5f:62:5a:27:19:a7:e0:10:c2:55:c9:db:
         29:be:49:d7:a0:34:3b:2f:3b:32:17:13:33:df:ce:59:e1:c4:
         02:c4:c2:65:0d:5b:8f:1a:84:03:fa:7e:e4:6f:d3:ea:68:ac:
         71:f3:f6:9b:23:d7:29:fa:a7:14:47:67:eb:0e:8e:7c:78:4a:
         ed:12:2f:14:34:7e:41:08:62:fd:1c:9d:69:e6:08:ab:62:79:
         de:12:ad:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org