Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323131383330.roa
File:                     3139332e34322e39372e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          Xi7I2h9RrTnK4QO5NKKuJf2CBFLkd0i/zvbGFynf2TA=
Subject key identifier:   EB:7B:75:31:BF:9B:BC:B0:51:D5:64:57:8E:57:48:89:0C:43:89:AB
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       73A5130813D5901F003DB11ABA52FFBB1ECEC8C4
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323131383330.roa
Signing time:             Sat 22 Oct 2022 04:33:29 +0000
ROA not before:           Sat 22 Oct 2022 04:28:29 +0000
ROA not after:            Sat 21 Oct 2023 04:33:29 +0000
asID:                     211830
IP address blocks:        193.42.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a5:13:08:13:d5:90:1f:00:3d:b1:1a:ba:52:ff:bb:1e:ce:c8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:29 2022 GMT
            Not After : Oct 21 04:33:29 2023 GMT
        Subject: CN=EB7B7531BF9BBCB051D564578E5748890C4389AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3a:f7:98:1e:ba:97:9c:28:ad:75:68:fe:11:
                    88:46:3e:0d:84:f4:f9:1c:e5:38:e7:a4:1f:6a:58:
                    47:7d:a3:08:51:ba:15:4e:6a:bc:8a:56:71:be:0e:
                    e3:ff:79:72:6e:f9:f6:b8:13:3c:9e:8f:02:01:fc:
                    2f:5f:c5:27:f5:c0:23:24:56:12:7f:35:95:b3:48:
                    06:f2:1e:20:86:33:ae:af:1e:7c:3f:e9:51:ab:e8:
                    9c:51:e5:b1:a2:39:60:8d:55:d7:29:51:af:d9:85:
                    0b:fd:99:6a:48:ec:1c:db:d6:0d:54:cf:a8:24:d3:
                    a5:9a:1d:2b:5b:9d:1c:4f:7a:dc:4c:92:c4:a8:00:
                    a9:4d:f6:d7:5c:9a:d4:15:da:3d:80:23:d0:70:09:
                    ce:11:29:c9:b3:ed:6a:60:14:9a:2a:47:9d:11:bf:
                    3b:00:a2:12:5d:53:37:56:75:bb:df:4b:56:d4:64:
                    a4:e9:88:b5:0e:c2:3c:7c:e6:4b:16:85:00:7a:0c:
                    13:e3:81:13:6c:40:cc:56:ae:47:d3:24:44:c7:87:
                    39:47:35:b1:97:a6:fc:a8:bc:4d:89:56:8d:fd:89:
                    14:67:f3:df:fe:69:ad:05:05:63:2e:79:08:a1:0b:
                    c3:7f:28:22:70:ac:9a:c1:2c:94:54:d9:e6:8f:e4:
                    e9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7B:75:31:BF:9B:BC:B0:51:D5:64:57:8E:57:48:89:0C:43:89:AB
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:be:3d:ec:9b:42:a5:66:7c:31:d8:2e:f5:19:8b:e7:c2:7d:
         06:54:61:79:f5:2c:69:59:61:b3:d2:56:7d:54:b1:cb:9c:52:
         7e:75:03:4d:09:32:69:e0:f6:5f:0e:4a:ce:96:ab:c4:a1:e7:
         eb:eb:59:c4:d5:59:3c:49:92:24:99:63:15:7d:a1:91:80:c5:
         02:b2:67:2c:52:4f:6f:c7:fe:b6:84:6a:7b:86:d8:8b:32:2e:
         a6:11:42:e8:18:1d:d4:f3:b3:1a:eb:7c:0c:e7:8a:71:30:3a:
         c0:90:27:b5:99:26:5e:26:c4:c1:40:32:49:b1:9a:81:0d:4c:
         b0:94:e0:23:7b:69:7c:b5:75:3c:70:16:21:d8:a0:6d:00:6c:
         7c:ae:dc:2c:c0:33:16:cb:85:ed:aa:48:8e:a6:b7:57:91:0d:
         10:81:75:77:f8:e6:ba:c4:35:63:93:49:2c:48:e7:d7:2f:cb:
         72:01:b2:f3:ed:be:b8:82:a4:53:d6:4f:9c:23:e4:68:ce:c5:
         19:08:78:6f:f0:c2:b9:6d:53:ed:48:3b:60:7f:1d:84:4d:71:
         b1:0c:54:fc:52:6d:b2:5a:f5:a4:7a:cd:2d:57:26:4b:36:a1:
         c0:a9:f5:d5:cf:93:a7:bf:54:65:48:5e:28:ab:82:0a:cd:ad:
         16:9d:06:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org