Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa
File:                     3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          mmPT3/yugiTbCTYAalhY86w5NQnFsOY8r5DoIsgt4co=
Subject key identifier:   12:3A:84:11:52:DF:08:72:33:F1:86:34:F6:93:C7:87:BE:F7:E9:AA
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       073CF418C50A3E63757BB31BDA0C6A0344F762D7
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa
Signing time:             Mon 21 Nov 2022 16:32:20 +0000
ROA not before:           Mon 21 Nov 2022 16:27:20 +0000
ROA not after:            Mon 20 Nov 2023 16:32:20 +0000
asID:                     147049
IP address blocks:        185.255.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3c:f4:18:c5:0a:3e:63:75:7b:b3:1b:da:0c:6a:03:44:f7:62:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 21 16:27:20 2022 GMT
            Not After : Nov 20 16:32:20 2023 GMT
        Subject: CN=123A841152DF087233F18634F693C787BEF7E9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:09:54:f3:ae:d3:cb:c1:76:3e:4f:7d:a1:
                    c5:f0:1f:9f:27:dc:a3:40:44:37:d2:e4:5e:74:cd:
                    40:f6:23:b8:af:8f:ff:b1:0b:cc:96:38:c3:b7:7b:
                    0e:e2:ee:a5:37:0d:fb:5b:60:ee:ec:8e:4c:e2:c3:
                    46:33:d7:f0:72:d6:ad:23:e2:9f:4c:31:a6:d8:0d:
                    7d:9d:21:07:79:c9:0a:22:c9:12:0b:3a:0e:46:b7:
                    15:f9:6c:f8:dd:57:57:2b:76:e7:01:b0:1c:9f:f8:
                    6d:35:59:8e:e7:d4:6c:63:d2:b7:46:55:53:98:ad:
                    1e:49:c4:5e:16:bf:2b:2e:97:8d:0d:67:3f:7d:c6:
                    15:7c:bc:64:cb:7f:3a:cc:6c:04:0d:2c:41:c2:10:
                    50:0e:e7:50:94:2f:35:cf:8f:67:40:17:f1:20:28:
                    05:70:91:e7:12:08:64:a4:84:cd:f6:2a:fd:55:85:
                    be:69:59:ec:2d:28:ab:32:8e:b3:78:54:c9:fc:30:
                    d9:97:26:23:31:ed:6b:96:e9:86:a9:39:e4:6a:3a:
                    56:06:45:db:26:31:37:4b:1b:a1:a7:28:eb:34:a7:
                    34:d9:4e:0b:15:7c:46:db:a6:89:58:f1:58:32:bc:
                    51:c7:0e:d5:ab:48:0a:76:02:c2:7e:2a:db:6d:d2:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3A:84:11:52:DF:08:72:33:F1:86:34:F6:93:C7:87:BE:F7:E9:AA
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:c4:b7:f8:93:b8:a0:2d:c6:17:6a:2c:a3:3d:1b:d2:37:e9:
         34:bc:29:bc:dd:e2:5a:ea:63:e9:db:1a:e8:0c:da:4a:db:3a:
         b8:a9:fb:92:58:99:d8:81:03:a9:7e:3a:e6:7c:31:de:50:03:
         91:ac:97:3f:6c:b1:93:64:f5:96:81:24:49:1b:b2:1a:7c:90:
         96:ab:85:75:00:16:f4:fa:03:23:68:8b:e2:60:ef:09:7b:c6:
         5b:fd:b2:79:60:bb:bf:80:2c:b4:7c:7f:0e:31:15:5d:3f:ba:
         e8:b7:b7:cd:9a:2c:52:9f:f3:7e:0b:a2:d7:de:fc:17:20:7f:
         5c:a9:c2:c5:76:ce:66:9e:93:1f:8b:e2:45:8f:3b:15:00:f5:
         7d:d2:55:01:f7:6b:9b:de:a0:f7:7d:4e:f7:e5:a2:6e:ba:f5:
         14:2b:f3:91:08:9a:f2:59:6e:43:a4:f1:3f:98:09:9b:f5:8d:
         84:65:8d:a4:eb:16:c2:23:05:e4:f9:c3:ba:c8:67:e8:46:b1:
         f4:dd:36:a3:b9:ba:0b:81:e8:27:76:de:64:d9:22:ba:b3:03:
         9b:32:28:d2:22:5a:dc:ff:2b:4e:3c:d3:5a:2a:8f:38:a6:03:
         70:e2:b5:a0:72:f8:00:5e:e5:47:62:3e:5b:00:9c:2e:03:ee:
         65:5e:cb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org