Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa
File:                     3139342e35392e3136362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          yg40fhORcTrHI1c6U699iKsyikQioI/H/Kk+0y6b8kk=
Subject key identifier:   3D:D3:0D:0D:C0:2C:32:15:1B:58:D7:46:15:61:D4:ED:EA:84:5A:16
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       7C10503D701E6C5B38F483BCCB8C4A6CC24ED738
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:30 +0000
ROA not before:           Sat 22 Oct 2022 04:28:30 +0000
ROA not after:            Sat 21 Oct 2023 04:33:30 +0000
asID:                     47583
IP address blocks:        194.59.166.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:10:50:3d:70:1e:6c:5b:38:f4:83:bc:cb:8c:4a:6c:c2:4e:d7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:30 2022 GMT
            Not After : Oct 21 04:33:30 2023 GMT
        Subject: CN=3DD30D0DC02C32151B58D7461561D4EDEA845A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:e0:df:02:d6:14:a3:51:4c:03:e0:0a:4c:
                    44:34:87:c5:63:bf:16:91:84:b5:76:6e:4f:6f:82:
                    1d:09:d8:db:4a:2e:42:f2:f1:23:70:a6:5c:11:fd:
                    ee:8b:a4:32:27:ed:bf:a5:36:89:8b:f7:bb:0d:b5:
                    59:30:06:6b:32:1b:7a:b9:9e:c5:2f:7d:f2:58:7b:
                    f1:81:ce:5d:f2:83:50:00:da:51:d8:50:0e:81:11:
                    fd:b0:6a:46:de:45:d2:85:43:9e:3b:74:4e:d9:8c:
                    cd:d4:cf:97:92:6b:e2:28:5b:03:f5:86:c6:b3:8b:
                    a8:77:a6:1d:77:09:ed:72:24:6e:74:77:de:de:30:
                    ab:7d:ea:22:de:08:c3:5f:f0:0a:58:ee:51:b9:0e:
                    31:66:44:c6:ad:b8:00:d6:77:c9:0c:aa:7e:59:32:
                    54:3a:6b:9c:65:22:a6:ca:7f:66:1d:5e:d7:62:87:
                    b4:03:a3:8f:6c:4e:bf:c3:1e:b0:1f:81:23:f7:8a:
                    86:85:bc:59:3e:c5:1b:46:d5:13:3e:01:bf:be:ca:
                    5e:c4:9c:8e:4c:29:1f:d5:a5:04:af:fc:ae:2a:07:
                    b7:83:80:fa:d8:78:f4:1f:b3:e9:ff:83:66:1f:00:
                    4c:ce:7a:1f:90:f2:39:fa:e9:72:32:81:69:0f:f3:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D3:0D:0D:C0:2C:32:15:1B:58:D7:46:15:61:D4:ED:EA:84:5A:16
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:3d:24:8c:31:1b:8e:92:cc:e1:7b:26:23:4d:be:f7:fe:77:
         e1:8f:4f:00:0b:b1:f9:a3:83:af:fb:32:e7:4c:48:c0:12:fc:
         9a:46:e0:b8:ab:48:3e:5d:54:90:38:94:c6:0c:a5:0b:54:ff:
         0d:1e:9b:7f:22:96:3b:a5:cc:fc:9e:05:b7:da:03:33:ad:a2:
         a2:20:3a:22:fe:4d:8f:94:67:da:21:ec:ea:04:2f:b1:bd:a0:
         b0:5b:2d:84:75:2c:45:5d:fb:1e:e3:38:c8:41:b2:01:d5:c7:
         94:27:d9:7c:dd:a8:be:7a:b5:cf:48:39:8e:fc:30:00:98:a3:
         25:58:6c:ba:5d:b4:16:fc:c9:27:d9:66:d2:ea:07:71:87:f1:
         a6:15:ef:d7:c5:56:c1:e2:57:dc:81:9b:a7:d2:26:74:37:49:
         3f:2e:2f:bd:95:82:59:85:39:55:69:b3:6c:c5:0c:2c:9c:0f:
         20:1c:cd:b8:62:3e:c7:d4:9e:3f:d2:8b:34:a8:e6:09:26:44:
         d0:42:3b:52:f5:51:47:93:e4:f3:c3:46:2f:09:94:17:db:53:
         95:7c:87:1f:ca:2a:6a:9f:1b:7d:f5:3e:3a:ba:88:ac:61:dd:
         55:fc:4d:6a:44:58:84:49:aa:b4:eb:db:ac:9a:bc:3b:38:22:
         bf:1a:23:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org