Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa
File:                     3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          o5UuNrtBLtGtLUGr67zySlE5DUKdOb5I0aJOqPk/eIs=
Subject key identifier:   73:9E:D0:F3:A0:A1:19:0D:C9:75:A1:AC:0D:20:64:9E:C5:9A:3C:52
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6411ADB94AC8C266BC6AA142C868F8FC1827BC1F
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa
Signing time:             Sat 22 Oct 2022 04:33:38 +0000
ROA not before:           Sat 22 Oct 2022 04:28:38 +0000
ROA not after:            Sat 21 Oct 2023 04:33:38 +0000
asID:                     147049
IP address blocks:        192.166.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:11:ad:b9:4a:c8:c2:66:bc:6a:a1:42:c8:68:f8:fc:18:27:bc:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:38 2022 GMT
            Not After : Oct 21 04:33:38 2023 GMT
        Subject: CN=739ED0F3A0A1190DC975A1AC0D20649EC59A3C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:52:23:0b:1e:0a:e6:3b:ba:c8:69:fa:c0:ed:
                    50:46:fd:1d:5a:aa:59:c9:0e:51:c2:58:49:da:da:
                    87:ae:58:53:5c:a4:72:91:d6:27:7f:c0:d2:51:aa:
                    f6:0f:c5:d0:19:2c:e5:22:be:c3:6d:08:4e:c4:8c:
                    24:b3:14:e0:5e:d6:cc:ef:de:bb:1f:18:13:a8:03:
                    3f:4a:73:b1:2f:44:7c:cd:ad:41:d8:53:04:2b:43:
                    71:f8:e3:52:92:29:f2:67:e4:cd:dd:55:7a:95:69:
                    8e:3b:60:7f:41:7a:6b:ae:13:ea:ca:96:df:bb:36:
                    68:d4:06:ca:94:7f:34:13:8d:48:9d:3a:53:6a:e8:
                    d0:24:fa:ec:78:e4:66:47:f3:78:1f:7f:51:5b:ce:
                    47:5d:a4:c1:b9:91:8c:08:b3:8e:02:ff:5f:b8:76:
                    60:5c:20:4c:8f:67:40:f7:be:2d:4a:f3:71:dc:67:
                    01:a4:1c:a4:c0:85:8e:d3:4b:45:d2:0c:50:43:bc:
                    c3:e4:01:85:31:5a:82:49:94:a2:fb:af:9e:c9:97:
                    cd:c8:7c:21:5e:5b:cf:6b:fe:ce:f2:9e:ad:5e:85:
                    e7:01:46:36:1e:52:e0:53:de:69:c7:fa:99:36:38:
                    7f:63:18:04:74:54:bd:dc:aa:9a:d8:f3:ac:b5:ca:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9E:D0:F3:A0:A1:19:0D:C9:75:A1:AC:0D:20:64:9E:C5:9A:3C:52
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:35:22:84:2d:e7:55:51:49:45:97:b8:1c:29:76:a6:e9:28:
         fb:4b:9b:bc:12:9d:1e:d8:41:c7:77:9b:bc:c8:40:da:b3:56:
         e0:35:db:9a:ad:cf:68:9e:4b:ac:e1:0d:bb:59:90:14:cf:f0:
         7e:a3:7e:14:bc:a6:33:63:c7:37:41:9f:77:9c:5a:61:bf:97:
         ed:ca:33:e3:d7:ad:9f:9a:5a:c9:c7:01:45:bd:f2:bd:81:b1:
         96:b7:7c:c8:8a:b6:74:e0:41:7c:e1:cc:3a:ed:e4:d3:48:b4:
         ab:0e:6d:4f:f3:8b:07:bc:0b:e1:95:be:cd:4b:40:56:78:27:
         da:eb:a6:3a:fe:9b:c6:5c:4f:f5:b1:ed:aa:c7:6a:8d:90:33:
         13:37:2c:83:51:58:2f:ff:82:4d:7f:44:41:5f:f2:d1:60:af:
         c8:ab:4b:0e:ea:c1:e3:7d:b7:85:c5:70:5f:6d:48:a0:f9:58:
         29:b3:63:23:1f:44:53:fd:5e:27:d7:37:29:a2:a0:df:51:64:
         ba:01:b1:2f:f6:d9:c1:30:43:9d:87:d1:8f:53:89:f7:f2:bf:
         84:9a:bf:67:f5:3a:0a:ea:5e:82:10:95:84:e2:89:66:8c:8f:
         70:e8:42:3d:b0:03:b0:0b:8d:52:17:3f:2f:cf:c5:a6:32:4e:
         20:a5:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org