Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/176/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa
File:                     34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          PBcXkES6uIZhR8wqnq5qkyEBI9zdbI2Hkyq3p+RRCww=
Subject key identifier:   B0:BA:71:AE:85:8B:2D:55:CD:5E:4E:A0:9E:8F:0C:62:EA:88:A0:53
Certificate issuer:       /CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
Certificate serial:       2DA9EB88133C332866FE44FA5F0B93CC65270CAB
Authority key identifier: E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:37 +0000
ROA not before:           Sat 22 Oct 2022 04:29:37 +0000
ROA not after:            Sat 21 Oct 2023 04:34:37 +0000
asID:                     201341
IP address blocks:        45.130.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a9:eb:88:13:3c:33:28:66:fe:44:fa:5f:0b:93:cc:65:27:0c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
        Validity
            Not Before: Oct 22 04:29:37 2022 GMT
            Not After : Oct 21 04:34:37 2023 GMT
        Subject: CN=B0BA71AE858B2D55CD5E4EA09E8F0C62EA88A053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:ab:f7:f8:88:84:fc:67:63:09:09:04:5f:
                    01:0a:63:45:23:f3:75:18:b4:98:50:24:02:af:01:
                    dd:05:ce:be:13:f4:9b:49:4f:ea:4f:a6:3c:0c:d4:
                    cf:d5:5d:52:3e:d1:7c:ce:bc:88:90:da:19:43:fc:
                    78:6a:c7:2f:9d:54:b1:c5:d1:5c:12:12:ff:21:8a:
                    c7:3f:b7:c6:4c:1f:d8:1c:e5:28:33:55:bf:0c:44:
                    0d:f9:c9:1e:d8:b0:df:9b:21:b8:fa:ba:27:92:f6:
                    86:6b:bc:b1:5c:9c:af:85:12:db:07:0f:c9:b1:08:
                    94:bc:7b:ff:e6:d2:47:d9:7e:bb:62:d6:ac:ca:83:
                    2d:9f:1b:a6:a5:87:4d:60:68:2f:80:72:a7:9b:f1:
                    8d:1e:64:d7:13:ae:f2:54:a1:98:5a:75:62:e0:5e:
                    e1:03:bc:31:a9:0e:e1:6c:7a:c7:49:96:c8:59:6a:
                    ef:cc:d8:94:42:27:0b:3d:c0:77:cc:86:3e:a5:32:
                    54:8c:dc:d6:0d:68:12:ae:a6:5b:f2:ad:da:c9:06:
                    37:3f:60:ee:88:22:94:40:b9:d4:b0:5a:33:80:d7:
                    e5:d8:a3:de:75:22:f9:f2:e3:aa:7a:0d:c5:68:b1:
                    01:d1:fd:c5:c2:d9:40:97:17:80:8f:64:d6:04:e6:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BA:71:AE:85:8B:2D:55:CD:5E:4E:A0:9E:8F:0C:62:EA:88:A0:53
            X509v3 Authority Key Identifier:
                keyid:E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:e9:a3:3d:0f:87:34:c6:d7:9e:55:8b:fd:c7:d5:67:a6:d8:
         3f:b7:4e:7f:c1:75:37:21:be:08:c6:95:f7:39:2d:b5:3b:2c:
         0b:87:d4:3c:14:a8:8a:a6:b1:4b:e6:07:46:51:cb:14:04:4a:
         fc:ba:01:d8:20:1c:2b:d3:eb:8a:b2:56:e6:c4:b1:ce:e6:31:
         ce:79:d0:80:1c:59:3b:f7:9d:da:e7:68:fa:44:4b:0f:9c:0f:
         a4:ca:38:6c:f4:10:7b:de:12:6b:01:cc:7d:c0:fa:ad:ec:27:
         ee:fa:f2:d6:e5:ad:d8:54:1c:e7:08:dd:0d:9c:09:81:6d:ae:
         f3:e9:d5:2b:da:b0:99:ba:71:07:bb:29:5a:9d:35:f6:51:19:
         1f:89:09:a6:ad:6c:30:d1:20:fd:25:34:37:0e:1e:9f:6c:39:
         6a:5c:41:51:c9:a6:98:38:9e:4a:ca:f6:bd:29:1d:a2:f1:ce:
         64:09:8b:5e:0f:44:7f:7e:1b:17:16:dd:25:d7:8c:91:1c:eb:
         43:2b:3e:b3:87:61:33:18:ef:0b:42:7d:71:ed:fd:7d:73:a9:
         41:a5:d7:4a:a9:23:0e:b9:88:5b:78:04:1a:11:bc:5b:f6:8f:
         4f:79:c0:1d:8e:e0:03:09:21:9d:58:ab:11:4c:54:81:d4:48:
         3c:84:f4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org