Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34362e31372e3137342e302f32332d3234203d3e203437353833.roa
File:                     34362e31372e3137342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          iGLv/VgF3vMOSmUUDgN7ooj47KZX7eyX2BglNjr5sgs=
Subject key identifier:   A7:EE:DC:BA:FA:B1:CC:07:E6:C6:20:4F:EF:05:89:4A:AA:52:48:70
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       5DF5AD13D1447F63E2D69084360465F402CFD1C8
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/34362e31372e3137342e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:02 +0000
ROA not before:           Sat 22 Oct 2022 04:29:02 +0000
ROA not after:            Sat 21 Oct 2023 04:34:02 +0000
asID:                     47583
IP address blocks:        46.17.174.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f5:ad:13:d1:44:7f:63:e2:d6:90:84:36:04:65:f4:02:cf:d1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:02 2022 GMT
            Not After : Oct 21 04:34:02 2023 GMT
        Subject: CN=A7EEDCBAFAB1CC07E6C6204FEF05894AAA524870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:11:69:f4:df:ec:0b:d4:78:88:a8:52:71:
                    40:1e:55:55:88:8f:d4:0e:a2:fc:dd:71:cf:57:ef:
                    35:4f:82:a3:c3:12:39:81:53:5f:f3:5d:3a:a4:65:
                    2b:ee:ee:a5:28:aa:ce:38:6f:2b:ed:0b:09:60:68:
                    82:76:79:60:65:5c:c5:69:30:4a:3c:85:e2:d2:96:
                    37:4e:9f:48:2a:a6:f0:ed:66:20:07:50:a3:71:ee:
                    57:10:c0:e8:93:be:d7:6d:1d:b0:fb:f6:1d:9b:00:
                    e0:0b:25:b3:50:26:3d:1a:fc:c7:a0:40:76:d2:ee:
                    6f:90:29:1d:b9:7d:e5:00:a3:59:11:f0:14:9f:02:
                    4e:44:ab:84:9f:51:64:94:42:1d:1e:53:5c:cb:c1:
                    f3:0a:2b:d0:5d:ff:cc:a5:ba:9d:50:99:c1:38:ae:
                    ff:6b:33:71:3e:ad:fe:08:d6:d7:ce:6c:c0:24:0f:
                    a8:dc:a0:57:45:0f:be:fa:8a:3a:4d:74:ce:4d:1b:
                    25:b7:bd:36:4d:64:65:d7:3c:6b:20:ef:28:35:24:
                    ac:a4:07:f6:bf:de:7b:50:39:6a:8c:bd:6e:c9:02:
                    4d:46:2a:17:00:b4:6f:6a:a2:9f:98:f8:c8:1a:db:
                    0b:4e:3e:6d:5e:01:49:b7:50:2b:fb:39:f6:37:32:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EE:DC:BA:FA:B1:CC:07:E6:C6:20:4F:EF:05:89:4A:AA:52:48:70
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34362e31372e3137342e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.17.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:34:85:3f:99:62:37:37:81:71:1f:cd:65:9c:2d:1d:cb:33:
         46:cc:60:fb:f4:79:e7:41:62:68:d4:01:34:f7:cc:ec:91:09:
         dc:b1:d5:41:62:ad:02:89:bd:7a:9c:c2:82:5d:d6:0f:65:70:
         2b:0b:25:27:96:78:3c:12:a4:2e:7e:a2:3a:2a:ce:c9:1a:11:
         7d:8f:4a:29:2d:9b:f0:25:71:40:ce:11:0a:c2:ad:c2:fb:75:
         b9:a4:9a:4c:ee:b7:18:a7:dd:1b:64:17:47:6b:02:b6:09:0a:
         ec:2c:eb:28:12:71:b3:30:dc:fd:08:46:7b:a4:17:a0:c1:7e:
         bf:75:d4:86:bf:bb:cb:a5:34:d8:9b:11:df:fe:a1:21:80:d8:
         61:53:01:4d:f3:31:18:51:f2:f6:67:63:98:9b:b2:5a:1a:a2:
         98:a9:ac:52:24:15:d7:63:fa:6d:8b:b2:4f:24:e4:e3:e8:7d:
         51:a6:11:41:bb:32:c1:41:b8:d6:17:7f:99:fc:f2:4c:f7:99:
         2d:49:3f:12:c3:bc:ae:0f:0c:e7:13:2e:fd:96:e2:d3:f1:82:
         99:2b:6a:06:93:9a:0b:00:00:57:05:73:94:30:7a:01:17:e0:
         4c:5e:35:ac:79:f8:66:27:b5:37:4d:43:54:e2:29:61:83:f8:
         1b:7b:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org