Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e203431393434.roa
File:                     33312e34302e3231322e302f32342d3234203d3e203431393434.roa (raw, json)
Hash identifier:          +Aa4VfWweJDKIqgxjnPCj99UkUyr5xWJDKVUJoYg4fo=
Subject key identifier:   13:4B:1A:C3:32:FA:9A:37:CC:3D:D7:80:54:4B:62:A9:11:A7:42:F9
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       7A4A8C5E4A79D8E91A2F53D637468EFCA2A48D27
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e203431393434.roa
Signing time:             Sat 22 Oct 2022 04:33:30 +0000
ROA not before:           Sat 22 Oct 2022 04:28:30 +0000
ROA not after:            Sat 21 Oct 2023 04:33:30 +0000
asID:                     41944
IP address blocks:        31.40.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4a:8c:5e:4a:79:d8:e9:1a:2f:53:d6:37:46:8e:fc:a2:a4:8d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:30 2022 GMT
            Not After : Oct 21 04:33:30 2023 GMT
        Subject: CN=134B1AC332FA9A37CC3DD780544B62A911A742F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:c4:a9:0c:65:ab:d5:59:a6:ab:83:a8:1b:
                    6c:c4:7b:62:e3:cb:8f:4b:af:e5:b6:ac:67:17:31:
                    3a:35:00:03:49:18:ac:a9:3f:6a:11:e0:72:39:8b:
                    e4:85:41:b2:94:7c:f6:4e:7a:86:5f:2f:98:56:67:
                    ba:44:51:44:05:d6:bc:86:84:39:99:e2:30:77:e2:
                    c3:41:23:22:17:9f:66:50:f4:3c:16:88:f9:ae:9a:
                    6b:ab:37:ba:29:f4:3c:8b:9e:49:7e:36:4f:3e:c9:
                    73:dd:4c:9f:09:b0:31:5b:57:92:3f:fc:f7:63:c3:
                    ce:77:6f:e9:be:76:39:75:0a:4d:c8:ed:b7:e3:ac:
                    1f:e7:9c:35:92:1e:c3:1e:33:2b:27:3e:da:85:b5:
                    72:c1:bc:7b:72:98:08:38:20:33:42:24:30:e6:53:
                    f4:81:8e:c3:4c:e8:d5:13:9f:0f:ab:56:e7:74:39:
                    ae:0a:e2:af:0a:25:37:52:f6:f4:cc:07:70:ce:19:
                    1e:c6:da:39:b6:c8:fd:32:2e:ba:03:e7:73:d7:d5:
                    ea:11:2a:c3:38:59:79:7a:70:48:b4:02:7b:40:2c:
                    0c:0c:38:8a:21:1a:85:db:39:88:48:5a:9d:a1:a8:
                    33:33:9b:59:ad:0b:ba:a6:e0:3a:f9:29:d6:74:ae:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4B:1A:C3:32:FA:9A:37:CC:3D:D7:80:54:4B:62:A9:11:A7:42:F9
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e203431393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.40.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:24:9e:7b:1e:54:ab:41:ed:6d:ee:95:dc:dd:5c:8f:33:65:
         e1:40:f7:60:7a:8b:b9:cc:bd:0f:96:ca:66:f6:b1:fb:05:56:
         af:71:a0:12:25:1a:d8:bd:6d:40:38:17:cd:14:7c:62:50:fd:
         0d:09:62:f3:60:4e:8e:d1:cb:8f:d6:fc:4d:c1:a9:8d:df:c4:
         fb:f7:7d:c5:e6:e1:87:eb:85:22:76:c8:97:bb:18:ba:11:fb:
         4c:8e:74:50:fd:60:ba:85:1c:21:92:62:20:7e:dd:e9:65:3a:
         18:5a:e1:18:83:55:20:a8:80:96:62:59:09:2b:62:43:58:00:
         39:9c:47:b2:ec:2a:94:03:7c:35:69:9d:d7:e7:7b:e1:4f:69:
         ab:25:c3:d8:39:8a:d4:77:bc:62:f8:38:e2:a7:05:ec:ac:89:
         0e:83:e3:14:5e:b0:be:4e:88:ad:cd:b3:35:64:54:aa:40:d8:
         21:c1:b1:88:41:02:55:88:30:21:8f:19:9f:51:41:62:dc:d9:
         5d:a7:e8:ae:6f:ea:54:85:a8:7b:74:12:84:0b:bd:ca:ff:8e:
         19:a8:98:63:0f:3f:0b:7d:ab:ab:2b:d4:fd:bd:30:c0:30:10:
         0a:7d:eb:f9:e4:76:e3:47:ff:3b:47:6f:7c:5b:78:b6:37:43:
         40:ae:f5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org