Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39362e302f32342d3234203d3e2030.roa
File:                     3139332e34322e39362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          8UUKt9ZqQO/hp29k5566DdXCQ3qLFlUQgBH6clcb9ww=
Subject key identifier:   C6:83:97:6B:B0:AC:19:0C:55:B1:08:F4:7E:9D:EF:F1:DA:75:F0:B2
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       0BBE79DAB5722F34590555C315D4449225876013
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39362e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:48:54 +0000
ROA not before:           Fri 03 Mar 2023 15:43:54 +0000
ROA not after:            Fri 01 Mar 2024 15:48:54 +0000
asID:                     0
IP address blocks:        193.42.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:be:79:da:b5:72:2f:34:59:05:55:c3:15:d4:44:92:25:87:60:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Mar  3 15:43:54 2023 GMT
            Not After : Mar  1 15:48:54 2024 GMT
        Subject: CN=C683976BB0AC190C55B108F47E9DEFF1DA75F0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:75:f8:fb:cb:ed:8d:44:f2:d3:79:3d:5c:bd:
                    ee:46:29:21:a2:da:ec:eb:83:72:62:69:dd:13:fe:
                    c1:01:31:80:42:39:5e:d2:2c:ed:77:b7:ab:7a:c2:
                    2e:98:c2:81:50:bc:79:94:51:d8:a6:a5:7c:c9:71:
                    b5:35:a9:9c:9b:78:9f:c7:ad:15:b4:24:8c:0b:fe:
                    f3:13:4c:3c:52:26:d2:16:59:e7:71:f0:62:e2:92:
                    fb:47:e8:8f:b2:6e:81:8e:01:e1:94:6d:54:62:4f:
                    3c:a0:de:dc:53:ba:a9:d6:58:45:7c:40:eb:72:e4:
                    98:6e:8b:8c:95:e0:e8:19:10:0d:9e:99:69:8a:9b:
                    c6:67:b3:c4:3b:79:16:72:a0:56:b5:f7:6a:41:9c:
                    7b:1b:e8:55:e0:92:6f:95:ac:7f:ff:2c:75:1c:9b:
                    21:f8:54:93:df:a9:97:0b:f3:27:dd:bd:99:5d:30:
                    cd:1b:3a:5f:3d:ea:6e:f6:b3:57:1d:fe:62:74:c8:
                    7b:32:e2:ec:62:26:48:4e:0e:e9:e9:a6:d1:1c:f5:
                    95:bc:a6:8f:ca:09:01:68:f3:9e:db:ea:62:b2:23:
                    b1:aa:b6:d3:0f:66:47:01:49:0b:c1:ce:3d:aa:62:
                    d1:49:4c:d8:c1:5b:4d:99:66:c8:73:b7:43:15:e7:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:83:97:6B:B0:AC:19:0C:55:B1:08:F4:7E:9D:EF:F1:DA:75:F0:B2
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39362e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:1e:4f:49:52:17:6c:8f:e0:a7:a9:e4:95:25:80:88:85:61:
         db:0a:f0:85:2e:39:4f:3c:71:85:c3:65:bf:0c:c0:d4:d8:41:
         ba:12:9f:5c:3c:3f:1b:27:20:02:92:2c:4d:81:1c:c9:0d:d7:
         c8:3e:50:80:26:e2:32:41:a9:91:ec:36:5c:05:ed:12:99:03:
         b0:a5:6d:27:47:3e:99:3d:fd:d9:3c:ff:71:d2:ae:73:0d:01:
         a4:3b:ec:8c:dc:83:bf:07:37:cd:2a:15:2b:56:56:3b:cf:1c:
         a5:dc:57:06:8d:5f:27:93:a9:cb:c7:b1:ef:0d:9f:2d:49:e8:
         e8:1b:98:c3:0b:27:a9:f4:05:27:77:00:c4:86:61:b9:23:5e:
         f4:36:2a:36:ef:80:0a:b7:b9:b3:5f:61:b7:c2:16:94:52:99:
         c8:0a:f6:58:3d:f0:88:e0:6f:8a:23:82:54:e5:d5:c1:72:7e:
         30:41:66:e6:3c:c0:55:b9:46:49:a1:1f:c6:a6:9c:60:a6:25:
         48:8f:94:d5:be:9f:30:8f:60:6f:f1:3c:3a:01:ff:08:83:2c:
         47:64:6b:bb:a7:76:9b:5d:10:53:c3:79:f5:6e:ef:aa:eb:64:
         bd:49:4a:18:17:9d:70:0b:88:00:86:99:79:4f:4e:15:38:d2:
         29:37:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org