Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139322e3134352e3131372e302f32342d3234203d3e20313431303339.roa
File:                     3139322e3134352e3131372e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          37TeVoAdOM+lTEzALaX34wsxubSgeVJHJtO46ORL7Os=
Subject key identifier:   7C:D3:2A:02:53:24:E9:9D:9B:7A:16:6D:23:4B:5E:73:6C:FD:CB:9B
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       1AE6BB0366DBAA3E540FD1EB56F3BD8D807356C6
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139322e3134352e3131372e302f32342d3234203d3e20313431303339.roa
Signing time:             Fri 24 Feb 2023 07:49:10 +0000
ROA not before:           Fri 24 Feb 2023 07:44:10 +0000
ROA not after:            Fri 23 Feb 2024 07:49:10 +0000
asID:                     141039
IP address blocks:        192.145.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e6:bb:03:66:db:aa:3e:54:0f:d1:eb:56:f3:bd:8d:80:73:56:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Feb 24 07:44:10 2023 GMT
            Not After : Feb 23 07:49:10 2024 GMT
        Subject: CN=7CD32A025324E99D9B7A166D234B5E736CFDCB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:fe:90:83:a1:08:a6:39:88:62:c2:dc:d8:
                    05:66:35:93:53:d6:47:c7:b7:a5:a3:01:ab:9a:04:
                    1d:3d:47:bb:1f:41:bc:08:f6:ad:69:1f:f1:62:0d:
                    f5:50:60:53:46:f9:68:c3:9e:f5:0d:82:67:1e:48:
                    69:a5:b1:a0:af:d8:2c:10:fc:59:88:a8:88:34:d2:
                    00:ee:95:22:09:d5:f8:8d:d9:ea:11:70:6d:02:20:
                    99:2f:10:c0:62:08:13:a4:34:9c:bd:76:ff:62:0f:
                    ba:f1:7f:07:2f:52:ba:6b:e5:27:15:04:e8:bc:43:
                    23:d0:74:f9:c2:4a:09:de:78:9d:c2:ec:4a:40:0a:
                    61:45:4e:49:93:a8:3c:49:52:bf:45:70:d3:d2:a5:
                    17:c0:1f:38:49:fc:42:38:18:15:58:b9:6d:45:53:
                    9d:28:57:c7:2b:1c:4e:21:61:76:80:5d:a5:96:45:
                    76:32:1e:6f:cc:ec:4d:00:ab:db:bc:ab:52:d4:ad:
                    e7:b3:8d:79:fb:d9:83:a1:5c:08:94:36:11:21:3f:
                    29:a1:f3:f7:89:66:df:1e:5a:a2:28:fb:72:d8:7e:
                    22:ea:bd:2f:0f:e3:85:84:aa:6f:e3:33:7b:84:83:
                    02:97:6d:be:f9:4d:ae:bc:54:26:0a:3a:47:40:8b:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D3:2A:02:53:24:E9:9D:9B:7A:16:6D:23:4B:5E:73:6C:FD:CB:9B
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139322e3134352e3131372e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:40:44:b2:2c:9a:74:91:f0:51:3d:90:b2:7d:38:6d:8b:05:
         04:52:0e:30:e7:04:6d:b0:1d:fd:c2:f1:5c:4b:c2:f2:04:4f:
         a5:2b:c1:c6:60:25:ff:46:d8:0c:a0:c7:bb:0b:ce:00:9a:d9:
         bd:3b:b2:cd:fe:99:78:6d:96:e0:73:db:66:43:6b:9f:ba:5c:
         8b:cf:e7:d9:5f:29:0b:c4:58:32:70:5d:27:c9:9a:5b:bf:17:
         ab:20:0a:b9:df:cb:ab:a1:fc:7d:dd:95:42:7d:33:0f:d7:ba:
         9f:34:57:63:f2:f8:75:ae:b0:c3:f1:12:8a:dd:46:09:24:27:
         22:9e:ef:32:1b:5c:c6:68:41:b0:b6:ac:7f:2c:36:23:d6:a5:
         14:c4:8e:55:25:33:bd:0b:fa:ff:9a:cd:b6:55:b4:50:b3:f0:
         a0:65:79:85:03:d7:03:80:2a:86:4f:85:fd:03:31:1c:6e:a0:
         90:d0:04:ef:25:31:ed:79:48:13:2f:79:84:57:70:d0:18:1c:
         fe:4d:7f:61:9c:b0:db:d4:b4:e2:22:d8:fe:42:86:75:73:55:
         39:89:cb:0c:9e:08:bc:94:fa:49:2e:9c:96:7e:c5:49:cf:bc:
         3e:3f:54:09:1e:0f:e8:c9:3d:ea:4e:ab:13:ba:30:19:43:4c:
         a6:e4:15:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org