Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3131302e38342e302f32342d3234203d3e20323037313337.roa
File:                     3139342e3131302e38342e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier:          NbwaaRlNljtglqhYptnn9REH52XkwhlV8asAMSipk88=
Subject key identifier:   A8:3F:25:1F:B4:38:0A:75:A7:7D:B2:3B:35:43:04:34:64:7F:0B:B1
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       56050916A589E31AC1D2A4043BEE3114A24DFED0
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3131302e38342e302f32342d3234203d3e20323037313337.roa
Signing time:             Fri 09 Dec 2022 09:08:11 +0000
ROA not before:           Fri 09 Dec 2022 09:03:11 +0000
ROA not after:            Fri 08 Dec 2023 09:08:11 +0000
asID:                     207137
IP address blocks:        194.110.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:05:09:16:a5:89:e3:1a:c1:d2:a4:04:3b:ee:31:14:a2:4d:fe:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec  9 09:03:11 2022 GMT
            Not After : Dec  8 09:08:11 2023 GMT
        Subject: CN=A83F251FB4380A75A77DB23B35430434647F0BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:70:0b:0f:fc:0c:12:f2:3f:67:13:5d:bb:
                    9a:07:7c:57:8e:62:33:9c:0f:7a:de:97:3e:e1:0a:
                    ec:18:60:9c:82:88:8e:66:71:69:b2:ab:6e:d1:b3:
                    e5:99:24:dd:1c:a8:af:9f:37:1f:d6:e5:f4:0f:e4:
                    b9:7f:82:4a:f1:3c:d9:72:36:2b:6c:20:eb:95:e4:
                    81:a2:52:3c:6b:f0:12:5c:ba:fe:30:99:c8:b3:5b:
                    65:2b:4e:dc:a2:78:1c:86:d8:04:35:3d:94:2e:55:
                    e2:5f:80:56:b6:97:70:ef:4b:19:b9:3b:24:e7:6c:
                    48:84:dd:be:bc:ee:7e:f6:2e:37:00:e9:40:70:f3:
                    3a:44:9d:40:3f:31:03:61:81:25:2c:5a:7a:2f:a5:
                    85:c3:49:2a:c1:9e:01:de:b3:4b:d5:33:5c:4f:91:
                    2a:e1:32:ad:e6:d9:56:68:14:2f:d9:7e:61:17:16:
                    fe:40:13:35:97:39:47:0b:57:39:44:64:bf:41:fb:
                    c4:7b:62:a7:6b:f4:48:82:32:3e:19:f5:06:16:d4:
                    27:26:1f:62:ad:b0:e3:a2:0b:5b:a0:d8:db:89:e5:
                    b2:e2:3f:e2:86:97:74:5b:eb:32:50:4f:d1:a1:1e:
                    d8:75:4d:96:83:f7:10:58:f4:0f:0b:39:10:af:0f:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3F:25:1F:B4:38:0A:75:A7:7D:B2:3B:35:43:04:34:64:7F:0B:B1
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3131302e38342e302f32342d3234203d3e20323037313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:1c:01:26:4e:7b:b1:ad:d5:42:5a:f4:5e:d2:0d:4f:c7:
         72:35:08:34:b8:9a:9e:42:d0:30:44:0a:e2:da:c7:be:35:43:
         f1:d8:55:31:7b:87:cf:df:64:23:32:84:25:2a:bb:21:41:23:
         a1:a2:43:ed:ec:7a:3d:ca:ce:c6:e2:9b:84:fc:32:cc:a9:ca:
         6b:b5:68:b6:56:06:e7:83:52:ac:69:be:91:34:db:8a:30:bc:
         92:3e:a2:fa:bd:ee:ea:b5:99:7e:74:c3:53:7c:f4:8a:5a:4e:
         4a:6b:00:96:2d:69:2b:d1:f4:38:96:8b:27:8a:9b:a2:2f:74:
         9e:c9:33:8d:8f:16:fb:af:63:8e:d1:94:4f:91:46:ec:81:89:
         b8:98:a6:b4:ab:1e:d8:89:2a:73:e9:51:9e:40:be:c8:e4:40:
         0f:71:0c:2b:b5:eb:9e:99:7c:c2:bc:87:c9:62:01:e2:13:8e:
         6a:db:b4:e0:fb:ef:e2:26:c9:16:18:bf:1a:ee:c2:0c:63:e3:
         90:7e:9e:8c:b6:da:88:91:dc:f6:50:15:8e:32:6b:81:e4:06:
         ac:1b:73:d0:64:36:15:2d:67:c2:d0:78:8f:2b:5e:05:d3:f6:
         c1:f5:1d:ab:16:5a:a0:eb:22:1d:e7:21:3a:ae:79:99:51:3f:
         94:66:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org