Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234342e302f32342d3234203d3e20313437303439.roa
File:                     3139322e3136362e3234342e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          ext2wSuhBUBEQ4RRFn5JAIKKmsJWxBLPuRAJuFrGrYY=
Subject key identifier:   F7:F9:B2:B9:84:D5:5A:15:F3:6C:D4:72:32:28:90:5C:25:2F:9D:EF
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       2260420C1A20B0C06115BFAD670030B05741346A
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234342e302f32342d3234203d3e20313437303439.roa
Signing time:             Sat 22 Oct 2022 04:33:38 +0000
ROA not before:           Sat 22 Oct 2022 04:28:38 +0000
ROA not after:            Sat 21 Oct 2023 04:33:38 +0000
asID:                     147049
IP address blocks:        192.166.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:60:42:0c:1a:20:b0:c0:61:15:bf:ad:67:00:30:b0:57:41:34:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:38 2022 GMT
            Not After : Oct 21 04:33:38 2023 GMT
        Subject: CN=F7F9B2B984D55A15F36CD4723228905C252F9DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:13:b3:04:46:24:6a:91:6e:4c:31:3d:65:
                    f5:fc:2a:69:21:e3:f5:15:74:69:dc:62:7b:29:ca:
                    57:29:2f:68:0d:0f:33:d4:a3:ba:b8:a7:63:0e:f0:
                    c2:4b:6a:29:36:87:19:7e:b6:2a:d9:b7:74:75:a9:
                    53:6e:bb:4c:e8:bb:df:52:3c:f8:c7:ee:b9:a0:f6:
                    52:8f:a8:95:7a:dc:0d:73:6e:7f:83:10:55:d2:88:
                    86:12:82:2a:c1:0b:74:e9:1f:f7:d2:63:80:1f:c9:
                    81:99:5e:98:c9:d1:13:02:43:b4:42:b9:9b:e5:76:
                    79:21:82:03:f4:b4:a7:8e:92:37:e1:61:42:a7:7a:
                    af:80:d7:bf:24:04:11:0f:81:4f:8e:1a:2b:bd:76:
                    8a:42:05:d1:89:ba:78:d4:cf:f3:f1:85:8d:f1:87:
                    18:e0:15:ab:b0:a6:98:04:02:00:01:87:c8:1d:d9:
                    2f:28:45:03:b3:d2:4f:54:30:0d:e9:58:25:1d:fd:
                    98:a4:f2:50:fe:21:0b:a6:91:8b:a7:09:98:7d:77:
                    62:69:fb:68:ef:7f:60:d3:31:72:30:b8:af:a5:c9:
                    f4:4b:8e:be:96:0d:f5:76:ca:51:c6:1c:8f:99:d0:
                    72:08:8f:7d:55:dc:6d:fb:38:40:25:4e:31:67:61:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F9:B2:B9:84:D5:5A:15:F3:6C:D4:72:32:28:90:5C:25:2F:9D:EF
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234342e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:08:eb:c3:04:c0:50:2c:10:62:f9:20:09:a0:9b:0e:ac:a4:
         9a:2b:56:19:76:ac:d7:22:37:4e:f8:be:83:06:27:0c:f0:41:
         96:8e:7a:f6:3c:99:cf:82:d8:68:aa:5c:92:5d:b7:be:9c:c9:
         d9:98:41:08:99:70:44:e0:9e:2e:d3:b7:7d:cf:80:bb:70:6c:
         26:c5:5f:36:98:41:3c:6f:8e:d2:57:22:f7:80:3d:fe:9b:91:
         d1:3d:ee:cc:4b:34:24:ae:bc:88:75:fb:7a:de:cb:fb:9e:d9:
         2e:cb:66:bb:10:01:74:9f:ae:5f:b0:e0:a9:04:d5:d2:e7:00:
         f9:c8:ed:84:67:5b:99:f0:bd:f5:9b:fa:f6:28:79:0b:94:25:
         58:dc:af:e1:24:ea:6d:30:01:37:a9:fb:2d:f8:64:1c:e2:a5:
         05:92:33:b5:08:35:12:d9:68:9d:05:40:3e:34:35:67:92:21:
         a2:0c:27:bb:46:c9:ec:ff:4c:87:d8:8c:9a:c9:0e:6f:4f:db:
         7c:20:69:12:ea:ef:f8:39:b6:5e:af:a6:d2:0c:ca:22:74:60:
         a8:bf:d3:13:9c:4a:b6:ca:dc:c2:06:30:1b:f4:72:c6:22:80:
         01:88:7d:97:89:6a:07:4f:27:61:1f:19:81:66:1a:5c:75:43:
         17:1b:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org