Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3134322e3230302e302f32332d3234203d3e2030.roa
File:                     3139332e3134322e3230302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          W2fUET09MfObF0EhDSf35fxMtuYrxsgigrNvU2Ub5Ps=
Subject key identifier:   40:53:F8:D7:CA:D0:8F:84:69:36:75:B9:17:F2:DE:D5:62:70:43:D8
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       2182E101B2873AF251FEA3F40C5F3FD61495E2E1
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3134322e3230302e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:45:58 +0000
ROA not before:           Fri 03 Mar 2023 15:40:58 +0000
ROA not after:            Fri 01 Mar 2024 15:45:58 +0000
asID:                     0
IP address blocks:        193.142.200.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:82:e1:01:b2:87:3a:f2:51:fe:a3:f4:0c:5f:3f:d6:14:95:e2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Mar  3 15:40:58 2023 GMT
            Not After : Mar  1 15:45:58 2024 GMT
        Subject: CN=4053F8D7CAD08F84693675B917F2DED5627043D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:2c:cc:ea:44:eb:c8:12:b2:d0:88:31:77:
                    6f:10:d5:6b:1e:49:f8:01:35:1a:9c:88:7d:fc:3e:
                    e3:81:05:a8:ce:dd:37:27:d0:9b:5a:74:5d:a6:61:
                    27:f3:9c:94:bf:cc:c6:db:50:c3:a9:59:19:c6:91:
                    c6:6b:1d:64:73:23:d4:7b:4a:55:85:95:fa:fb:28:
                    5c:30:5f:f3:50:2e:79:6f:d0:1d:ba:0f:ce:8d:b6:
                    81:41:48:b0:26:f3:3d:8e:a6:0b:54:8e:b3:80:e6:
                    32:26:43:db:3a:87:db:8b:e8:c9:20:0b:f6:f6:ac:
                    87:02:b2:a6:7d:78:22:9e:48:7e:e1:22:1c:bd:31:
                    56:42:35:a6:e5:4a:a6:45:83:ed:17:23:e1:53:3d:
                    b1:e3:c7:11:60:ee:e0:f8:6d:cd:bf:56:c7:93:2b:
                    17:82:84:a0:a3:5a:6a:a0:61:c3:0e:89:61:ad:64:
                    71:c6:03:44:75:23:e1:63:c7:a7:ab:7a:cb:53:2d:
                    57:bf:02:fe:08:2a:f8:65:b3:99:87:75:70:bf:e3:
                    81:1d:1d:75:80:64:f7:e9:ac:67:e6:13:8d:6a:43:
                    79:06:6f:5f:6f:a0:52:89:93:18:76:fa:71:46:81:
                    78:cd:88:04:10:a4:a8:15:e7:a2:9e:c7:83:97:c3:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:53:F8:D7:CA:D0:8F:84:69:36:75:B9:17:F2:DE:D5:62:70:43:D8
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3134322e3230302e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:de:e6:f0:eb:56:79:bb:90:d3:63:59:e9:05:9e:f8:71:46:
         9f:a0:ab:00:94:bd:0d:1a:9c:5a:df:0c:37:50:d1:08:b7:70:
         f3:a9:c9:6d:c9:fd:e7:95:bf:7d:18:5a:cf:3f:ee:42:0e:b6:
         db:28:66:c3:10:80:fe:2c:a1:57:ec:9b:c0:bc:be:fa:d5:df:
         16:c7:ff:63:0e:08:1b:ee:51:7a:1c:8d:c3:ef:6d:e9:9b:ab:
         cc:73:fd:1f:01:c8:02:c9:e1:5f:4a:1e:a9:27:fe:3e:b2:37:
         a4:f2:07:91:b5:f9:d3:8b:92:ec:d3:d6:fc:a5:08:eb:1e:6b:
         f8:4e:4b:40:56:e6:ec:ca:5b:64:e5:83:4b:0a:0d:eb:72:f1:
         6e:ae:86:81:44:b7:c6:3d:70:29:52:56:d7:a5:41:08:ef:0f:
         3e:da:eb:fb:51:d8:8d:c4:a0:ef:45:cb:d9:5a:2f:d6:4d:d8:
         68:a8:2e:16:88:2c:47:92:8f:2c:66:9b:02:87:e2:62:40:0c:
         e8:23:00:86:97:66:6b:33:0d:b4:4a:21:f5:61:ae:8e:e8:b6:
         8b:90:01:82:fe:81:01:75:90:f9:7b:db:84:eb:ad:a3:34:e3:
         eb:83:2a:99:8b:a9:34:ac:6c:ff:45:f5:7a:16:1f:05:0d:fa:
         50:52:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org