Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32312e302f32342d3234203d3e20323132323938.roa
File:                     34352e3134312e32312e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier:          FrYfczRBHbQ2mTo3Lx8YkZR5bAKerI6gVqoqRKYwTfs=
Subject key identifier:   40:1C:D5:40:FA:1D:89:7A:10:FC:B7:4A:9B:4F:6F:61:93:FD:92:9D
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       7FC9E28102B06EFCCA7D0D636A161C110F79D233
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32312e302f32342d3234203d3e20323132323938.roa
Signing time:             Sat 22 Oct 2022 04:33:43 +0000
ROA not before:           Sat 22 Oct 2022 04:28:43 +0000
ROA not after:            Sat 21 Oct 2023 04:33:43 +0000
asID:                     212298
IP address blocks:        45.141.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c9:e2:81:02:b0:6e:fc:ca:7d:0d:63:6a:16:1c:11:0f:79:d2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:43 2022 GMT
            Not After : Oct 21 04:33:43 2023 GMT
        Subject: CN=401CD540FA1D897A10FCB74A9B4F6F6193FD929D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:5d:ff:4d:a6:bd:ba:a7:f4:56:78:48:3d:
                    b6:a6:7e:30:79:43:1b:0f:6b:64:49:7c:c2:31:65:
                    9e:96:9a:16:96:7e:e2:de:a4:1e:05:70:0f:bf:35:
                    09:fd:fe:a0:09:68:a7:e0:79:2d:08:f8:28:58:01:
                    eb:87:e7:f8:b2:48:9e:e7:fa:85:1e:cd:13:04:05:
                    5f:92:62:e9:1a:45:41:2c:36:6a:73:81:61:95:1f:
                    4d:cb:7a:a2:49:1b:69:46:25:d0:ac:f2:8e:70:12:
                    a4:b8:38:48:0a:e6:1d:9e:96:9a:67:32:07:49:62:
                    1c:8f:a8:80:31:fb:43:c0:84:c2:f6:03:e8:9d:16:
                    da:06:92:0d:0d:ae:3a:5a:97:63:74:55:97:97:ea:
                    60:66:07:ff:68:ee:4e:1c:a1:dd:a8:47:94:16:69:
                    2a:ab:52:d8:8f:c7:f4:55:71:dc:25:80:4e:6b:54:
                    09:be:54:fb:cf:f0:a6:f5:b6:d1:27:dd:cf:9a:7d:
                    1d:50:79:13:e2:f2:20:7d:ae:23:cb:5b:b3:31:85:
                    41:d4:a2:9a:d0:b1:57:4c:03:41:c4:42:9b:43:53:
                    72:37:7a:28:e4:0d:8a:31:da:bb:6c:dd:67:9f:9e:
                    cf:0b:31:ac:26:c5:e0:b6:51:f6:5f:d5:6f:f1:ff:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1C:D5:40:FA:1D:89:7A:10:FC:B7:4A:9B:4F:6F:61:93:FD:92:9D
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32312e302f32342d3234203d3e20323132323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:eb:23:6c:58:3f:63:a9:39:db:d9:21:b0:06:8f:e3:1c:8b:
         3d:48:80:b6:ad:9e:7d:17:a6:97:78:ea:8a:9d:4c:9f:59:c0:
         11:87:c4:6f:b9:10:be:ad:66:ef:0e:33:6a:dd:93:ea:4f:4f:
         45:fb:6c:ad:a2:7c:1f:4b:ed:ad:a2:05:3a:28:8e:c1:27:d7:
         03:5c:27:fa:44:6a:1e:03:af:44:00:64:24:e5:ad:5e:69:0d:
         77:e7:3c:47:9b:6b:d1:21:43:f5:3c:7b:2b:91:f6:86:65:00:
         5e:21:1e:56:77:e8:3e:0f:5f:df:a3:08:66:5e:af:4e:62:b2:
         83:c8:17:34:cb:82:11:fd:8c:57:ec:81:31:8d:49:03:a4:4d:
         bc:23:f6:53:16:51:a8:e2:a4:47:de:fb:e7:b1:d3:f5:05:42:
         dc:ad:f0:f9:b8:88:a5:3b:e6:51:49:c5:65:92:55:21:a0:71:
         42:69:22:3d:0b:1e:bc:79:4a:77:65:b8:b8:0f:81:77:9f:9a:
         89:73:09:f8:d3:b8:e3:ae:3f:c6:e3:f8:6f:fd:fc:ee:11:9c:
         45:72:f0:31:8f:4d:e4:ab:2a:02:ab:23:ce:e4:d2:e6:11:3a:
         0f:48:22:0a:e2:8b:19:71:84:48:58:3e:4e:8b:5f:ab:b6:59:
         39:2a:0c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org