Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa
File:                     3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          AKt8Qd2BGOhUXRCOwK4aLimIzEYEO3bFa4YzpJAWfRM=
Subject key identifier:   79:4C:20:09:A2:E5:A5:A2:9C:22:3B:F7:86:5E:F3:0E:D2:DF:CD:71
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       391D3EFC573B8EBC8D07F68B33893F6808E967DE
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:41 +0000
ROA not before:           Sat 22 Oct 2022 04:28:41 +0000
ROA not after:            Sat 21 Oct 2023 04:33:41 +0000
asID:                     51167
IP address blocks:        185.252.234.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1d:3e:fc:57:3b:8e:bc:8d:07:f6:8b:33:89:3f:68:08:e9:67:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:41 2022 GMT
            Not After : Oct 21 04:33:41 2023 GMT
        Subject: CN=794C2009A2E5A5A29C223BF7865EF30ED2DFCD71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:a8:a7:9d:4d:7c:28:ba:ea:aa:a4:b9:77:
                    ec:3c:9d:17:e6:0e:fa:16:05:29:5c:b5:63:e4:2f:
                    7b:a4:62:0e:47:2c:88:fd:d0:18:d3:9f:df:89:3e:
                    5b:d9:74:22:fd:b7:a6:42:43:0b:0a:46:a2:75:42:
                    53:d4:24:a6:80:64:50:38:8e:d3:93:d9:cf:46:56:
                    ed:35:a3:96:71:38:ff:a2:d4:2d:bf:62:23:28:f6:
                    6e:5d:fe:9f:17:db:f4:28:f7:5b:69:95:17:79:14:
                    c4:a3:cb:aa:9d:fa:bc:63:4b:1b:40:1c:37:d9:f3:
                    54:91:35:68:10:e5:51:4f:79:5d:eb:b2:02:49:cd:
                    a8:7b:50:87:f0:6b:64:73:d1:e9:97:81:f6:0c:66:
                    b5:43:74:a8:dd:61:f9:05:a6:b6:d3:da:fd:37:14:
                    1a:fe:28:52:72:61:0f:b9:02:b2:1d:8f:66:ea:6a:
                    dc:3d:84:55:31:e8:ff:33:34:9b:e3:65:05:bf:54:
                    50:81:0d:9c:0d:d9:0e:52:70:06:bf:9e:46:25:af:
                    be:45:f6:e1:45:f2:b0:af:89:8d:90:15:d9:01:df:
                    0e:ad:cf:3a:53:80:ef:09:e1:ba:f3:bf:17:75:0f:
                    fa:da:8c:4a:c8:55:5c:2b:b2:75:a3:da:01:dc:51:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4C:20:09:A2:E5:A5:A2:9C:22:3B:F7:86:5E:F3:0E:D2:DF:CD:71
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:bf:43:c6:7c:98:f4:70:88:65:46:2c:80:d2:13:b5:a3:8a:
         49:80:fa:60:49:84:a8:7b:0f:dd:75:c2:e3:16:33:e1:0a:70:
         e9:4b:d5:e9:78:fc:98:70:fe:16:dd:fc:ba:26:ef:d8:b6:13:
         eb:8c:fb:9b:ee:d0:68:4d:2c:73:35:f8:00:0c:fe:a8:5a:c1:
         2e:2e:dd:ed:14:f8:85:b2:5d:d9:c2:64:e1:e0:b6:f6:2b:cf:
         bb:fc:7b:e0:3c:7f:24:4c:36:0d:56:62:43:89:0b:dc:9f:b4:
         f3:95:77:47:40:85:aa:c1:cf:36:9c:32:df:e7:2e:45:3b:73:
         86:e6:2f:81:df:ef:c3:c9:5b:80:1f:ea:68:3a:23:f6:d7:e2:
         be:3a:0c:de:7f:63:44:7b:e0:cc:df:06:18:d2:6e:6e:7b:99:
         b3:9a:fd:34:d2:3d:69:70:79:ac:4f:e6:6b:8c:de:c3:b4:06:
         cc:30:2b:77:1f:0d:e6:b4:df:a1:69:73:18:a0:9d:53:f0:c4:
         75:a3:c4:1b:e7:1b:71:35:b8:d4:32:01:7b:ad:fa:3e:c1:c0:
         41:65:02:51:b9:ca:d2:84:b0:e6:89:82:bb:6d:97:6f:2e:ac:
         3b:9e:70:2d:da:28:89:44:e7:09:e2:2c:6d:07:57:bd:e5:1a:
         a2:7b:24:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----