Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235302e3231352e302f32342d3234203d3e2030.roa
File:                     3138352e3235302e3231352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          TGtrXZL50ZGtuRo0dO/ZJlPUm9CQh1/oWGAZ1I8H+Go=
Subject key identifier:   7E:A0:59:9E:4E:AF:D7:B3:56:9F:61:0D:C5:01:1C:F4:A1:17:89:66
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       50BAB740D2FBF2ECE2EB2D73BFD6E3C371D03E82
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235302e3231352e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:44:30 +0000
ROA not before:           Fri 03 Mar 2023 15:39:30 +0000
ROA not after:            Fri 01 Mar 2024 15:44:30 +0000
asID:                     0
IP address blocks:        185.250.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ba:b7:40:d2:fb:f2:ec:e2:eb:2d:73:bf:d6:e3:c3:71:d0:3e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Mar  3 15:39:30 2023 GMT
            Not After : Mar  1 15:44:30 2024 GMT
        Subject: CN=7EA0599E4EAFD7B3569F610DC5011CF4A1178966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:c5:1c:ba:06:16:48:c5:ed:ab:78:f4:d4:
                    7e:9d:e0:d8:8e:d1:ec:e8:ac:20:fe:04:c0:29:90:
                    19:b9:b1:7d:5b:71:95:19:b5:9a:d8:66:ab:6c:b0:
                    00:3e:7b:72:01:01:70:f1:74:52:26:db:fb:ac:e1:
                    fe:1d:39:82:da:96:9c:81:d7:09:79:43:3b:d2:e6:
                    dd:0f:b6:98:31:5d:e1:24:45:0b:74:cd:1a:10:35:
                    12:67:32:36:82:49:9e:77:80:97:6c:03:4d:67:00:
                    e9:51:b1:71:b0:14:d4:47:01:28:a6:04:f3:a9:19:
                    b6:6c:2b:fb:ea:9a:d9:df:ed:11:cb:b5:06:12:1c:
                    4c:63:4f:0a:b4:f9:25:19:69:4e:f5:88:18:7a:a0:
                    7b:87:56:6e:b2:f7:06:b5:15:b2:08:c4:6e:66:3b:
                    42:c3:7b:bf:eb:4b:6e:7c:77:eb:02:01:1f:a6:0c:
                    a2:08:ad:99:e1:be:66:b2:e2:02:1b:0b:46:7d:29:
                    32:4d:ce:ac:65:27:37:31:86:7b:75:aa:b5:a3:87:
                    50:19:1f:04:db:15:3d:a2:5d:a0:7a:c0:02:61:dd:
                    f6:fd:10:8b:8d:0a:35:14:58:7f:de:f0:54:26:7f:
                    c6:ea:86:0e:12:30:94:a3:fa:14:43:52:5e:30:ae:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A0:59:9E:4E:AF:D7:B3:56:9F:61:0D:C5:01:1C:F4:A1:17:89:66
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235302e3231352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:54:b3:3e:4c:d7:27:7c:0e:9e:89:40:17:ef:59:a2:02:c7:
         80:30:5b:4a:61:aa:94:a3:b3:72:89:22:95:16:ae:5b:be:35:
         30:8a:ed:0e:94:a0:72:ba:87:93:5f:a4:11:84:c9:1b:0f:0b:
         34:e5:d1:15:93:68:c6:7a:45:a2:61:43:f8:e8:95:41:40:f0:
         7c:18:92:3e:37:61:79:7e:e9:e7:56:0e:52:46:ee:be:62:b9:
         d4:ba:65:ad:4e:28:93:f5:e1:93:ff:4f:c6:17:06:92:cb:0f:
         78:a3:a8:7e:8e:a1:d6:f8:30:78:87:e4:79:ae:f6:9a:b7:17:
         10:fe:7d:f6:96:d8:79:0a:5e:cb:eb:66:d4:de:0e:69:e7:fd:
         9b:ba:de:1a:60:27:8b:df:db:f7:f1:15:d8:80:0f:f7:fb:2b:
         54:06:a0:85:ff:74:ae:7d:64:0b:6c:25:7b:7d:e9:1a:18:a0:
         c8:46:4f:54:92:9f:ef:c3:d5:cb:94:52:01:75:8b:11:01:50:
         cc:0d:c5:b4:eb:fe:55:37:4e:a2:b6:c3:87:38:94:95:b9:b5:
         8d:2c:cb:79:31:87:6a:df:e0:37:fe:79:86:f3:fe:90:46:09:
         fc:8d:70:c7:78:b8:83:89:c6:de:c3:13:82:aa:62:c6:b1:c3:
         bb:1e:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org