Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e35392e3136342e302f32332d3234203d3e203437353833.roa
File:                     3139342e35392e3136342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          dkOWnIkBYjkzFscN4x+/O6pbOfPxBXl/g/OsAypx704=
Subject key identifier:   64:51:C8:25:E0:66:5B:1D:9C:81:1A:98:D7:33:68:1A:F4:5D:9B:26
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       087213F119B3BE4FD4132E9CD0242B969B5EE662
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e35392e3136342e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:36 +0000
ROA not before:           Sat 22 Oct 2022 04:28:36 +0000
ROA not after:            Sat 21 Oct 2023 04:33:36 +0000
asID:                     47583
IP address blocks:        194.59.164.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:72:13:f1:19:b3:be:4f:d4:13:2e:9c:d0:24:2b:96:9b:5e:e6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:36 2022 GMT
            Not After : Oct 21 04:33:36 2023 GMT
        Subject: CN=6451C825E0665B1D9C811A98D733681AF45D9B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:30:9f:9d:aa:fe:93:2d:1d:f6:cc:61:c6:
                    93:6c:07:43:17:e7:32:39:ee:d1:28:6b:43:29:d0:
                    d4:af:2f:11:83:36:cc:7a:d6:8f:49:d3:f9:20:24:
                    30:22:84:72:d7:f2:34:a6:8c:07:b6:49:b9:c0:f2:
                    a6:33:33:bb:aa:2b:8d:10:ef:29:95:75:dc:2c:e7:
                    4a:ed:45:25:57:00:64:a1:31:9b:6f:6d:66:8b:01:
                    15:a3:e4:da:6d:49:47:31:48:52:de:a9:6a:86:fc:
                    16:98:b8:bd:1a:54:a1:06:35:c7:a7:09:2d:40:e4:
                    36:72:75:49:06:49:93:2f:78:b1:b9:e0:af:e7:ac:
                    88:6a:ba:76:bb:68:e8:34:a2:73:38:3a:d0:07:2d:
                    07:01:b7:25:cc:22:80:1d:b4:98:45:65:06:0d:6c:
                    65:c7:2f:54:1a:1e:e6:76:09:f9:80:92:9f:4b:41:
                    bd:47:d2:80:41:47:37:85:dd:d6:5f:34:d1:1e:8d:
                    cb:a9:93:66:10:02:05:d4:6e:6c:0d:34:74:a1:d8:
                    4d:b0:ca:8e:c9:1a:17:93:c2:8b:83:15:30:9a:dc:
                    4c:a0:77:52:75:da:83:c2:10:29:40:c1:a9:53:80:
                    e8:08:04:83:9c:be:59:ab:e4:27:1e:b7:7f:aa:7b:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:51:C8:25:E0:66:5B:1D:9C:81:1A:98:D7:33:68:1A:F4:5D:9B:26
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e35392e3136342e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:57:93:f4:51:1b:96:5a:b0:e6:51:64:63:f2:23:87:05:7f:
         23:39:69:44:bb:09:d4:f4:44:72:11:73:97:1f:9f:bc:95:c5:
         29:65:b3:74:16:a6:ef:e4:29:42:4c:71:1f:65:55:33:ab:50:
         55:9e:38:05:24:37:cc:f2:dc:28:e8:9e:16:3a:24:83:bf:70:
         31:22:57:8b:4e:07:b9:a0:b8:ac:6a:9e:b9:32:23:19:8b:60:
         c2:be:f0:01:16:0d:8a:ed:4f:32:a3:31:b0:09:25:55:ce:c7:
         bd:c0:22:43:3e:a5:45:11:fa:7c:eb:99:bc:dc:b9:a0:dd:fa:
         53:77:23:53:43:f3:2c:be:51:92:89:4f:f5:f1:57:e7:6d:22:
         50:6f:56:ed:ca:d0:fe:8b:ee:e7:1f:2f:c1:ef:4f:bf:9a:6f:
         b0:52:e0:2b:fa:c9:e1:19:45:24:2d:e9:c7:fd:67:d4:be:cf:
         d0:14:d6:fd:0f:eb:5c:69:b5:bb:d4:55:94:a2:ba:60:fa:02:
         79:53:8b:80:9d:fa:2e:a4:50:93:6d:44:67:f1:7e:52:1d:9b:
         4f:04:1a:dc:cf:a7:82:54:91:c1:7d:e8:1a:94:08:84:68:29:
         77:13:cc:0c:82:e9:29:4d:5f:18:f8:85:a5:72:4d:10:9e:82:
         8f:b9:24:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org