Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3134372e37382e3132382e302f32322d3234203d3e20313336373837.roa
File:                     3134372e37382e3132382e302f32322d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          +BVwXdPgOilbTSCZ00hT/Xuk3ue3+3rZAyZQZRnN4jM=
Subject key identifier:   58:FA:69:CD:EC:0C:70:C9:25:83:27:58:90:31:C9:6F:8E:22:71:D1
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       355CA7BFF852E493BB7239F4354CF32539EEB4A7
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134372e37382e3132382e302f32322d3234203d3e20313336373837.roa
Signing time:             Mon 07 Nov 2022 11:18:36 +0000
ROA not before:           Mon 07 Nov 2022 11:13:36 +0000
ROA not after:            Mon 06 Nov 2023 11:18:36 +0000
asID:                     136787
IP address blocks:        147.78.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5c:a7:bf:f8:52:e4:93:bb:72:39:f4:35:4c:f3:25:39:ee:b4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov  7 11:13:36 2022 GMT
            Not After : Nov  6 11:18:36 2023 GMT
        Subject: CN=58FA69CDEC0C70C9258327589031C96F8E2271D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:6b:c0:34:9f:ad:85:ec:83:56:dc:f5:9c:
                    04:54:1b:6b:c0:33:56:bc:2b:c1:27:e8:cb:9c:8f:
                    4c:ac:d3:f6:77:6b:be:7e:f9:43:b5:7f:5d:ad:79:
                    26:fd:ce:df:2f:2a:9c:8c:8f:7f:c6:bd:64:cf:3f:
                    10:3a:09:1f:2c:57:c3:a9:f2:88:bd:d8:f9:d6:74:
                    9d:5e:23:b4:6e:89:5d:11:54:61:e9:3a:b0:f6:fb:
                    4f:5b:3d:a3:86:d5:86:fc:75:b4:d4:c3:d5:55:96:
                    32:1c:ae:22:2b:dd:71:2f:d7:83:81:35:e2:55:8f:
                    b3:df:83:58:2f:e6:5f:e9:2f:57:6b:0a:21:b9:15:
                    c5:91:0e:90:7d:15:0e:dd:6e:90:09:35:d9:09:51:
                    1e:79:c0:40:59:a1:03:8b:88:9f:99:81:b0:ec:53:
                    68:5c:3a:fc:17:69:ef:3a:bc:0e:6c:a0:0c:67:f8:
                    9e:fd:a4:79:d8:3c:a1:a4:e8:08:bd:7e:56:18:95:
                    18:55:01:95:32:a3:b6:24:1e:72:b5:20:e0:2c:d7:
                    f2:36:39:8f:04:9d:51:4a:54:a4:ac:b5:9a:8d:97:
                    34:83:09:eb:38:72:d7:ba:8b:6a:55:98:84:89:8f:
                    fe:1d:4b:80:75:50:86:38:63:b6:e2:07:2c:ad:04:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FA:69:CD:EC:0C:70:C9:25:83:27:58:90:31:C9:6F:8E:22:71:D1
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134372e37382e3132382e302f32322d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:af:7d:43:05:71:4c:45:83:95:19:c3:77:89:3f:cc:e0:ce:
         7a:8a:4d:1b:92:a1:d9:2a:77:f3:c0:ca:a3:a7:d5:71:be:3f:
         de:20:b1:cc:29:2b:ee:f4:64:de:7c:63:73:86:40:40:ff:54:
         a1:31:b7:b1:d9:6e:9b:20:6f:f9:da:ff:1f:b1:3d:f6:1f:de:
         37:ab:f2:18:fd:26:80:24:2c:12:32:c0:b0:d0:67:d9:d9:88:
         a2:99:69:2b:c6:a4:e6:86:62:9a:1f:da:2e:50:0b:97:70:8e:
         e6:db:9a:d7:49:5c:e4:c8:b3:76:18:39:c0:7b:b8:e9:72:04:
         ff:3c:a3:a8:6a:1b:35:c7:71:09:e9:eb:98:cc:22:4d:a0:2c:
         0a:38:d7:f4:dc:47:43:2f:1d:6f:bc:c1:93:40:5d:c6:f4:c7:
         ca:49:9c:51:fc:fb:6e:45:c8:01:37:34:6a:ae:25:3b:5b:05:
         a5:9f:d4:4d:52:e1:ca:3c:6e:02:66:ef:42:c6:89:93:17:a8:
         fd:17:b4:92:a3:a7:21:18:83:2e:2f:e3:c0:f7:ff:55:02:33:
         91:7b:78:24:1c:c7:bc:36:7f:9d:24:75:19:c8:6f:9b:b9:60:
         70:a9:f1:e8:b1:17:2c:7b:b3:16:1b:6d:d1:b5:aa:62:f2:0a:
         10:37:54:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org