Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38382e3232312e302f32342d3234203d3e2030.roa
File:                     34352e38382e3232312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          cUbYSCnNYClJy/mhBRN+ri+A4Jj3waDKaDrxhMtk1dQ=
Subject key identifier:   4C:3B:9C:4B:26:9A:55:F0:F8:7A:C2:E7:FB:00:71:CB:AE:AB:6A:AB
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       5BF12B1DA00A605BB057E8C4E814283002AD53CE
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38382e3232312e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:23:41 +0000
ROA not before:           Fri 03 Mar 2023 16:18:41 +0000
ROA not after:            Fri 01 Mar 2024 16:23:41 +0000
asID:                     0
IP address blocks:        45.88.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f1:2b:1d:a0:0a:60:5b:b0:57:e8:c4:e8:14:28:30:02:ad:53:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Mar  3 16:18:41 2023 GMT
            Not After : Mar  1 16:23:41 2024 GMT
        Subject: CN=4C3B9C4B269A55F0F87AC2E7FB0071CBAEAB6AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:26:6d:80:c4:85:99:10:e5:41:c1:a1:93:30:
                    c5:ca:9e:16:a6:cd:9d:4d:77:84:fb:d7:85:f5:e0:
                    f2:fe:87:37:5f:90:cd:79:64:36:6d:eb:03:1d:74:
                    21:34:d8:af:3a:5b:ab:ec:3f:4b:79:07:9e:9c:39:
                    ab:13:3b:9a:6a:d6:1c:e5:9b:15:cf:a3:3f:67:6c:
                    29:cd:68:f6:3b:1d:ee:65:7b:b6:5e:ef:44:49:ae:
                    8d:e0:ab:b1:f8:68:81:6b:b9:41:17:11:b8:0b:e7:
                    bc:c5:8f:79:41:ba:e6:88:91:8a:4f:29:20:52:cb:
                    f3:e2:88:54:9f:c3:66:a6:ec:7e:9e:2f:6e:e6:ae:
                    22:23:b6:7f:61:42:7a:45:4f:8c:8b:e5:c1:6c:7a:
                    ad:8f:36:29:59:0a:5c:ca:c3:43:4b:2e:3e:b1:7c:
                    c4:bc:64:63:61:77:ee:b1:35:23:4c:10:12:0a:d3:
                    5d:74:29:fa:a2:8d:44:f2:0d:04:2a:4a:46:f8:07:
                    36:18:e2:a8:64:a3:27:54:5a:be:02:ac:b4:29:ee:
                    3a:0e:c0:64:d5:76:71:28:8c:ea:6e:10:8f:b3:e6:
                    2d:7a:30:87:5f:e8:48:ac:82:45:b3:a2:61:21:77:
                    06:2c:4d:69:e1:ff:51:76:37:f4:b5:fd:59:cf:af:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3B:9C:4B:26:9A:55:F0:F8:7A:C2:E7:FB:00:71:CB:AE:AB:6A:AB
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38382e3232312e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:01:a8:f2:d9:c2:b7:c3:b3:9b:a8:4c:3d:e4:af:e0:28:46:
         4a:60:0d:b6:86:9d:4d:06:b8:20:3c:84:b7:22:6a:8d:bc:86:
         e9:3e:ea:c6:75:ae:3b:4c:16:47:db:c4:9a:e9:3a:e5:f2:3b:
         a6:55:c3:0b:a4:dc:28:c3:37:c8:df:91:c8:b9:83:c8:66:e0:
         03:ae:0e:bd:b3:8a:e2:cf:ec:fd:1f:53:b1:6c:10:15:41:96:
         49:d5:e9:59:06:d1:40:77:68:09:27:ba:28:f5:e8:b1:c9:bb:
         14:6d:1f:d0:5e:da:70:fa:1b:2f:e5:38:dd:23:50:b6:a3:38:
         e6:4f:cf:66:7d:a9:b7:82:5c:bb:68:97:a2:83:41:5c:80:2f:
         a0:5b:1f:a5:b0:04:56:8b:c6:cd:33:91:8d:20:49:36:e8:e8:
         8f:4b:11:db:db:e4:c3:15:87:83:ee:ef:a9:0b:51:b4:7a:51:
         03:8d:78:16:1b:45:dc:8e:60:0c:af:42:e6:8f:97:3e:7c:30:
         2a:af:57:a4:4c:64:11:18:c9:53:28:ea:b3:6a:bd:f0:32:7f:
         29:7a:a2:10:cf:5c:1c:da:d7:44:aa:1a:46:78:84:09:6d:b4:
         14:e4:8e:ab:73:af:c6:8a:71:f8:88:0d:96:c6:29:af:6a:44:
         ea:e0:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org