Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa
File:                     3139342e3234322e35362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          2B0e5exZiI3ryjemUqg7bw/iRScbQ9bYOsnQX2PEqxA=
Subject key identifier:   B9:90:3C:8B:A7:5D:5F:EC:58:FF:51:8B:8D:1A:F9:27:A8:B3:ED:A4
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       14890A3EAAD542C8818C9E216059084C172C0054
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:26 +0000
ROA not before:           Sat 22 Oct 2022 04:28:26 +0000
ROA not after:            Sat 21 Oct 2023 04:33:26 +0000
asID:                     51167
IP address blocks:        194.242.56.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:89:0a:3e:aa:d5:42:c8:81:8c:9e:21:60:59:08:4c:17:2c:00:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:26 2022 GMT
            Not After : Oct 21 04:33:26 2023 GMT
        Subject: CN=B9903C8BA75D5FEC58FF518B8D1AF927A8B3EDA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:b2:3a:52:79:1f:9e:12:dd:04:79:91:00:
                    f8:0b:ac:8f:b6:a4:e2:37:c5:1c:f7:a2:4d:40:15:
                    ac:94:40:1c:8b:53:65:52:c5:0d:b2:a9:85:73:4e:
                    8f:fa:a1:30:f7:4c:a9:a8:5a:cf:39:4a:b2:7d:d7:
                    bf:f6:53:15:f2:fb:aa:c9:cd:d2:a8:ec:0d:8c:11:
                    3a:f7:e7:4b:58:81:48:41:a9:b7:13:67:0c:67:9f:
                    b0:00:ab:24:49:09:7c:ed:bb:1d:06:2e:a8:ec:bc:
                    3d:b6:38:de:99:89:a9:aa:47:30:fd:c8:46:a4:85:
                    e4:26:f9:c8:1f:16:1d:3a:a0:9f:e4:1b:7d:7b:f3:
                    bd:44:bf:a7:71:41:f6:64:b9:5f:12:21:50:60:3d:
                    06:82:37:c0:13:34:77:c6:cd:39:09:24:30:f7:2a:
                    d8:75:3c:cb:4a:38:6f:f6:66:9a:ba:5b:0f:fb:fb:
                    27:f6:5e:33:54:9a:d2:1c:d9:46:3a:57:7f:a0:dd:
                    8e:3c:f2:6e:06:3f:39:8e:1f:a6:c0:8b:e6:cd:bc:
                    7b:9b:f9:41:c5:20:18:07:93:85:e7:9b:8e:1e:41:
                    2c:c5:14:c1:16:88:a7:51:a4:60:d5:b6:ba:0d:40:
                    02:02:27:15:57:49:00:3c:d8:81:54:41:9f:95:14:
                    6a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:90:3C:8B:A7:5D:5F:EC:58:FF:51:8B:8D:1A:F9:27:A8:B3:ED:A4
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.242.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:72:26:45:84:0e:95:00:ba:80:75:a1:36:1b:02:2c:5c:4b:
         34:4a:d3:fe:fc:0f:c9:74:24:3b:b0:d7:0a:8f:3d:35:f1:be:
         2b:21:f0:a5:21:77:36:dc:f9:78:eb:a0:eb:ab:50:6c:59:13:
         16:20:c3:b1:17:f9:e1:b8:a7:75:ce:06:52:34:c2:d6:60:3d:
         40:9e:be:ad:78:ef:c5:f5:58:5e:ee:4d:54:46:73:37:dc:05:
         6c:bd:47:dd:9d:79:d2:e3:93:cf:50:47:64:ad:e2:60:93:ee:
         db:23:fd:e7:14:40:2b:c7:3d:fc:34:83:3d:19:f3:0b:f9:aa:
         35:2c:f9:7e:69:ed:d2:84:90:8a:73:16:37:bb:eb:f3:dc:1a:
         7d:27:eb:f7:e5:db:da:c4:28:36:4a:55:47:37:e0:61:fe:89:
         b6:6a:64:50:42:02:8f:15:48:48:06:94:0f:59:0e:8e:c1:ee:
         c1:bf:fa:84:38:93:87:12:92:fe:c0:0a:17:d1:2e:19:05:f6:
         1f:22:ec:d3:1c:30:83:5a:c4:b3:e7:1a:41:eb:72:80:9d:95:
         bb:64:4f:d7:4f:d0:c9:bb:bf:d3:2c:64:8d:a6:ab:48:25:bc:
         49:b0:03:ae:b6:ae:5c:af:bc:d8:82:e8:f4:9f:56:af:e5:69:
         79:fb:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org