Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e39342e3231302e302f32342d3234203d3e20313437303439.roa
File:                     34352e39342e3231302e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          so4obd3bqWRqVJbW+Ot6IZmDENw4IWiREVCsNBaG8fk=
Subject key identifier:   9D:DF:49:71:13:88:DB:B7:85:7A:FC:64:8B:95:5C:B0:42:F5:E4:A0
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       45B5C1A0D82774C978497D07EF271AB714339CAD
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e39342e3231302e302f32342d3234203d3e20313437303439.roa
Signing time:             Wed 14 Dec 2022 07:35:35 +0000
ROA not before:           Wed 14 Dec 2022 07:30:35 +0000
ROA not after:            Wed 13 Dec 2023 07:35:35 +0000
asID:                     147049
IP address blocks:        45.94.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b5:c1:a0:d8:27:74:c9:78:49:7d:07:ef:27:1a:b7:14:33:9c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Dec 14 07:30:35 2022 GMT
            Not After : Dec 13 07:35:35 2023 GMT
        Subject: CN=9DDF49711388DBB7857AFC648B955CB042F5E4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:a6:a7:51:31:3c:63:a9:56:57:91:bf:50:
                    92:cb:95:b2:62:42:d7:5a:43:23:be:09:b0:89:4d:
                    a2:a8:0c:e0:68:1b:68:55:4a:2c:ca:7f:f4:5e:fa:
                    9e:72:ab:bb:b6:c9:64:59:77:a9:1a:9c:6a:b4:a4:
                    dc:86:f3:f9:e8:7f:a6:8a:d0:2d:05:81:1e:77:78:
                    95:03:df:92:9c:8b:f8:aa:a3:1f:42:38:4d:60:59:
                    65:2d:85:56:f5:c4:07:cf:de:0c:33:cb:be:c3:8f:
                    cc:92:61:8c:5e:24:14:3e:9e:a4:44:ea:49:55:3e:
                    d7:ca:97:dd:2a:e0:0d:82:f8:47:ef:52:ca:e3:63:
                    03:4e:ac:17:bd:99:a8:56:b0:84:a9:82:e3:ca:ac:
                    0f:38:af:66:21:c5:30:15:f3:83:bf:c1:6e:0f:2f:
                    69:c0:78:36:69:a9:f4:9c:e8:03:25:9c:9b:94:09:
                    e3:b5:01:94:a6:0c:40:d7:4e:c4:6e:60:24:01:4c:
                    50:02:79:02:7a:8e:ce:a1:d2:b5:19:b4:dc:95:8e:
                    87:f3:62:7b:84:00:d7:df:b6:dc:ed:7a:7c:2a:5f:
                    51:23:fd:79:5b:00:27:34:ac:f9:43:03:c3:ff:ed:
                    7f:90:07:91:c0:97:19:fc:97:23:a1:a5:75:04:6d:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DF:49:71:13:88:DB:B7:85:7A:FC:64:8B:95:5C:B0:42:F5:E4:A0
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e39342e3231302e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:51:cf:80:9f:37:93:66:2c:2f:39:ba:80:ba:b0:b2:b8:
         14:d2:3f:15:99:9e:15:d5:5f:f8:f1:34:e8:e0:57:db:a8:09:
         2a:e8:4b:cf:cb:b6:50:ce:8f:ca:1a:1f:d8:fa:53:58:8e:86:
         d5:d9:79:7e:23:54:5e:6c:ba:e7:ce:91:5e:90:25:07:5d:f6:
         ba:31:81:4e:25:ab:ce:c4:3a:9c:9e:71:fb:d4:c5:d9:c9:e5:
         f9:57:96:c6:c1:ff:a7:b1:7b:90:6a:4e:35:d8:c8:ac:80:63:
         97:14:ed:5d:bf:a2:5b:95:3c:3b:b4:54:39:ec:fd:e6:69:51:
         d8:4e:88:08:96:a5:e8:7b:76:43:de:9f:86:f6:1c:0d:e3:42:
         c6:5f:c3:f2:fa:76:08:e6:42:10:b2:41:bd:13:4e:ba:72:97:
         52:61:c6:77:35:41:7e:eb:b9:b2:7e:fe:86:d4:fd:5a:48:18:
         a5:55:3b:83:4d:2c:20:db:71:29:6d:3e:c7:97:26:38:a0:43:
         56:d1:e6:d7:6d:f8:1f:7e:27:bb:8c:07:c3:9f:1c:52:85:aa:
         08:54:25:ee:d6:15:ba:83:50:19:05:67:a9:70:67:8e:a3:5e:
         59:69:a9:ac:48:95:df:d3:13:67:2c:c8:d9:87:e1:f6:8a:55:
         83:f1:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org