Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33372e302f32342d3234203d3e203437353833.roa
File:                     3134392e36322e33372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          ZPBYEeyU9of/jjTBBhnA9Et6qsWz7q65WPP4vj9vUqM=
Subject key identifier:   A4:F2:68:5D:0E:5F:9F:DD:BF:83:DE:28:B8:27:50:56:DE:85:1D:A0
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       3F9F8469C703D652ADA39A6A6F1645F9A248B248
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33372e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:35 +0000
ROA not before:           Sat 22 Oct 2022 04:28:35 +0000
ROA not after:            Sat 21 Oct 2023 04:33:35 +0000
asID:                     47583
IP address blocks:        149.62.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9f:84:69:c7:03:d6:52:ad:a3:9a:6a:6f:16:45:f9:a2:48:b2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:35 2022 GMT
            Not After : Oct 21 04:33:35 2023 GMT
        Subject: CN=A4F2685D0E5F9FDDBF83DE28B8275056DE851DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:5e:b6:1e:17:4f:c4:f6:6c:42:e5:95:54:
                    f6:06:08:bd:8e:f1:fc:8c:fc:7a:47:1a:81:12:0b:
                    4d:f1:f8:f5:b3:9b:7c:27:b7:97:28:03:e7:00:1d:
                    f8:11:29:ef:ed:1e:83:4a:20:18:ac:91:4a:ac:a8:
                    68:4d:4d:ad:6f:0b:b8:ad:80:db:72:ea:c3:18:94:
                    b1:fd:d9:b4:89:55:78:05:08:b3:15:b7:53:9c:91:
                    f8:06:7c:b3:29:a0:ec:a3:7c:34:25:05:f1:fa:b7:
                    f9:11:53:db:1d:5a:65:4d:6c:ba:ad:31:eb:04:d2:
                    a0:8f:4e:68:0d:f2:d0:53:da:98:93:b9:d9:42:35:
                    31:34:80:04:94:30:6d:8c:1b:2b:60:c7:d1:c9:fd:
                    99:5f:3c:c7:de:e8:13:9b:a2:40:4f:03:33:71:fd:
                    f3:9d:46:b8:fa:0d:db:c2:c4:8c:08:2d:d6:33:e9:
                    19:8b:19:08:92:c3:36:ac:20:f5:99:89:0b:d7:46:
                    c4:1c:4d:3b:c5:7b:1b:ba:e6:63:88:08:d4:0b:75:
                    f7:3c:1f:de:28:e3:cc:a0:50:ae:0c:41:6d:e2:20:
                    03:ef:ff:0f:a9:24:e1:8f:5c:bc:dc:fa:ae:d8:a7:
                    62:02:60:5a:43:ea:55:71:c6:5a:57:69:c6:de:25:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:68:5D:0E:5F:9F:DD:BF:83:DE:28:B8:27:50:56:DE:85:1D:A0
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33372e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:71:4b:8a:ad:8b:7f:21:29:43:36:fd:b0:0a:5e:c8:1a:09:
         c5:4f:a6:6b:30:6e:21:8f:a8:e0:72:a6:a8:8a:d5:ca:4f:f1:
         4d:d1:0f:43:20:0d:eb:1a:a1:7d:42:38:81:39:11:e7:de:3c:
         36:72:b3:dd:a2:1a:a2:15:82:5a:85:48:0a:d4:38:4d:da:c4:
         23:b8:ee:83:24:f8:3d:78:57:5a:34:5d:e1:b0:be:d6:82:dc:
         a9:7c:b7:21:2e:44:e8:f1:6f:61:70:4b:3d:cc:93:6e:4a:06:
         ce:2b:bd:c2:e3:35:ec:ca:7b:b0:49:22:17:bf:14:1d:c5:1a:
         d5:16:f8:fb:9e:9f:c9:9a:a0:60:83:45:c7:cd:bd:67:e4:31:
         b2:89:7c:8a:b0:48:e7:09:c6:18:4b:80:47:fd:6a:51:0e:64:
         a0:21:13:11:a9:b7:83:e0:74:5d:78:b2:f0:02:81:d5:35:4c:
         33:3e:11:c4:7c:7e:05:0f:51:57:72:8b:c0:0a:dd:5d:97:3d:
         5d:ae:68:e8:4b:5e:e4:ef:c1:31:73:e1:07:ee:01:d0:59:df:
         ec:8a:c1:d8:2a:75:69:b9:71:f2:57:07:33:97:11:17:eb:a6:
         1f:9b:0f:83:a5:c4:0b:89:91:50:66:a5:29:31:56:63:a1:a6:
         94:ad:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org