Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa
File:                     39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa (raw, json)
Hash identifier:          uEeTHdpWpzfzki5FGZxq2Ajtssxdbzs//HUJGguXreA=
Subject key identifier:   C6:51:CD:B9:FF:D6:75:E3:EB:CB:BF:2B:7E:F8:88:78:75:7B:2C:24
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       1E6D1B1BEE2E98411780FBEAE9C1125EB0AAFC29
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa
Signing time:             Wed 08 Mar 2023 08:48:32 +0000
ROA not before:           Wed 08 Mar 2023 08:43:32 +0000
ROA not after:            Wed 06 Mar 2024 08:48:32 +0000
asID:                     211192
IP address blocks:        94.101.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6d:1b:1b:ee:2e:98:41:17:80:fb:ea:e9:c1:12:5e:b0:aa:fc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  8 08:43:32 2023 GMT
            Not After : Mar  6 08:48:32 2024 GMT
        Subject: CN=C651CDB9FFD675E3EBCBBF2B7EF88878757B2C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:43:bf:30:3b:49:1b:05:6b:ef:1e:a6:96:
                    35:a1:9f:51:34:2b:ec:74:a1:63:01:a6:3b:88:0c:
                    26:12:c0:2c:8b:ca:df:cb:bb:48:a0:c5:11:bd:1d:
                    f7:3f:c8:2f:03:39:22:b3:e9:99:c6:19:63:b7:f8:
                    28:97:a3:b4:c4:00:0c:db:a7:89:84:d9:2f:42:28:
                    25:8c:02:78:c8:dd:ed:8f:9f:19:1b:02:5e:c0:db:
                    6d:00:1d:12:e3:d6:5a:79:e6:9f:fe:50:2a:83:eb:
                    79:20:d2:4e:61:dc:76:9a:1a:a2:26:04:77:b4:f0:
                    91:21:6a:3d:ba:04:34:68:2a:ef:8a:24:17:c7:31:
                    2b:8b:3c:ff:ea:d0:a8:27:c6:7e:37:80:a4:4e:cb:
                    b1:73:8a:89:fc:ed:90:f6:38:62:a3:a7:b6:95:a6:
                    be:92:1b:a7:ec:64:52:49:52:46:b3:76:c0:58:3c:
                    ca:2c:02:cc:b0:24:79:bb:12:b6:be:38:56:14:32:
                    dc:dd:a9:a4:87:ff:45:46:80:3a:e0:fa:3c:8f:a0:
                    4d:5c:3e:cd:4b:d5:7a:bc:ca:50:f3:df:ff:6b:58:
                    8c:f9:82:8a:62:94:b2:1a:22:2a:e5:f4:98:a3:e5:
                    5f:44:03:e0:46:d7:31:d5:b6:9b:49:06:9f:ab:0f:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:CD:B9:FF:D6:75:E3:EB:CB:BF:2B:7E:F8:88:78:75:7B:2C:24
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.101.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:1a:59:4b:2f:13:f8:e0:bb:06:3f:05:54:44:cd:56:a9:fc:
         b1:4f:11:06:e5:1c:8d:ff:b9:b6:68:6c:ec:83:48:92:81:7e:
         b8:aa:7a:6c:e4:8d:98:40:52:c2:07:50:f6:2b:48:fb:8d:b4:
         7a:f9:7b:bd:75:c9:6e:96:e8:84:ec:b8:93:5f:ba:d6:43:9a:
         99:e7:a5:25:2b:d2:29:3f:3d:0f:a5:ff:05:e1:72:86:5e:5c:
         b0:96:5d:f9:25:09:93:25:59:6f:6d:d6:32:18:03:80:62:52:
         3a:58:b7:ba:19:07:87:9b:65:1a:99:80:5f:8d:ab:03:67:b6:
         2e:0d:5c:59:c1:cb:d8:06:ea:95:b8:41:ed:6c:08:18:1b:04:
         98:29:3d:5e:90:81:87:d8:22:7d:15:b3:4b:2a:39:6d:8f:95:
         95:13:79:9b:3a:8f:16:3c:d9:2c:66:e1:a4:43:61:90:c2:f7:
         06:e4:af:4f:b6:63:5e:53:ef:50:5f:7d:d4:b9:39:cf:ad:51:
         c9:07:14:e7:4c:2f:f6:42:a0:cb:30:8c:02:5c:6e:be:9f:b0:
         e0:9c:34:f3:43:3b:86:c4:9c:90:0e:02:eb:77:5e:ac:b7:86:
         9d:f8:fe:09:20:f5:5c:6c:b4:7a:73:62:44:58:c7:ba:1c:46:
         1f:ea:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org