Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
File:                     34352e38382e3232302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          47S0jDTpNdwIOD2q596+7grfCj55S6Ax7uaIpbZQIAM=
Subject key identifier:   6C:82:C1:E3:13:3D:2C:45:A3:FF:16:6B:D2:FF:FB:D1:69:3E:BC:F3
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       4B58DE2C76859139FAFCD5B0B03A6C90AC37F18D
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
Signing time:             Fri 09 Dec 2022 09:44:29 +0000
ROA not before:           Fri 09 Dec 2022 09:39:29 +0000
ROA not after:            Fri 08 Dec 2023 09:44:29 +0000
asID:                     141039
IP address blocks:        45.88.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:58:de:2c:76:85:91:39:fa:fc:d5:b0:b0:3a:6c:90:ac:37:f1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Dec  9 09:39:29 2022 GMT
            Not After : Dec  8 09:44:29 2023 GMT
        Subject: CN=6C82C1E3133D2C45A3FF166BD2FFFBD1693EBCF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:1c:57:20:c2:c6:06:e1:a3:a6:e3:4a:26:
                    41:32:a2:22:fb:17:47:d9:c1:88:46:d4:e4:07:ba:
                    4e:6a:b3:44:d3:97:5f:da:14:92:55:7a:e2:42:1a:
                    3d:81:79:ee:ea:9c:a5:8b:b1:4d:67:00:57:68:97:
                    2e:f1:f8:62:09:72:40:e3:44:47:2c:c4:ed:3a:50:
                    35:f0:07:de:3b:cd:ac:60:58:b9:c7:fd:56:3e:79:
                    0d:2d:8a:1d:9d:3e:aa:31:01:e2:e8:8d:c1:23:8e:
                    9c:35:80:06:41:e6:48:68:75:73:e7:8a:cc:d7:30:
                    1b:f9:1a:6c:04:00:de:c0:37:39:1c:2e:54:a0:f5:
                    25:37:f0:17:b3:81:c6:e5:b5:87:d8:60:95:e5:21:
                    80:d0:70:ad:bc:c2:5f:0a:d5:45:f5:30:2b:84:9c:
                    64:e5:2b:7b:8a:87:a3:6a:e3:ba:61:ea:d4:77:95:
                    37:37:42:33:bd:d0:c1:06:86:e6:d9:c2:8d:14:6c:
                    83:93:13:61:57:f4:36:56:e7:c8:a1:67:d4:65:17:
                    78:88:f4:61:19:76:6e:1a:c1:16:01:2e:7f:bf:47:
                    16:ff:cf:5c:2b:1a:b9:80:08:50:f0:97:5d:1e:09:
                    73:bb:6e:09:4a:7a:c9:c0:ea:a1:bb:da:67:65:df:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:82:C1:E3:13:3D:2C:45:A3:FF:16:6B:D2:FF:FB:D1:69:3E:BC:F3
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d4:6a:af:10:11:ba:43:f8:aa:d2:03:69:d8:e8:e8:21:88:
         a1:f9:1d:25:3b:07:62:6e:2a:f6:23:f3:0b:e0:d8:91:3b:42:
         07:56:86:7e:1c:48:63:ac:d0:92:13:82:a3:57:3b:80:a9:dd:
         9f:38:70:a6:32:5e:45:1c:38:db:13:d1:55:4b:dd:16:6b:4e:
         af:18:d5:d1:bb:74:4c:0a:b3:f4:06:e2:e9:e6:f6:cd:70:fc:
         08:de:ec:3d:68:41:9b:f9:c6:ff:5f:9b:e5:10:30:4d:65:5a:
         19:d6:27:33:a7:e6:ce:ab:af:12:ad:1c:88:cf:37:d4:a5:9a:
         62:37:27:f9:5d:e5:99:73:e6:69:ae:2b:16:be:f2:0d:0b:e9:
         25:e4:0b:45:7b:01:c3:c3:22:d8:50:16:ec:2a:33:ca:b5:f1:
         31:4c:83:e0:65:92:7e:53:4b:08:42:ce:23:c6:7e:3d:3a:1b:
         8f:1f:1a:da:c7:04:87:73:a6:d0:65:7e:02:e0:0b:9a:81:7d:
         19:5b:80:e6:a0:30:82:f3:91:63:0d:2c:68:a0:94:97:24:40:
         68:6d:b1:06:7f:34:35:e5:06:c7:23:69:f8:ea:c0:6c:e3:13:
         c8:94:34:6d:d6:26:c4:d5:ac:43:f8:eb:3e:d3:a6:ef:80:70:
         e5:bd:bf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-fra.rpki-client.org