Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135362e302f32342d3234203d3e203631333137.roa
File:                     34352e31302e3135362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          PeIGxWVBRH3aj1NMwafcUbFYgAaDmg8wbwS3pXoPxOc=
Subject key identifier:   7E:C7:63:E2:C7:1B:D2:10:79:52:A7:63:C7:F1:F5:58:DF:6B:D7:65
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       52217A6736BEB896E47F2771603D666ED4A50E79
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135362e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:31 +0000
ROA not before:           Sat 22 Oct 2022 04:28:31 +0000
ROA not after:            Sat 21 Oct 2023 04:33:31 +0000
asID:                     61317
IP address blocks:        45.10.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:21:7a:67:36:be:b8:96:e4:7f:27:71:60:3d:66:6e:d4:a5:0e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:31 2022 GMT
            Not After : Oct 21 04:33:31 2023 GMT
        Subject: CN=7EC763E2C71BD2107952A763C7F1F558DF6BD765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:ee:75:1e:2a:b5:29:2b:da:ac:e9:b7:53:
                    0b:74:be:19:62:73:1e:75:ba:d2:7e:b8:e0:6d:6e:
                    4d:fa:99:5b:a2:9a:56:8f:f1:36:21:45:e5:95:e1:
                    8c:06:9d:80:8a:9e:aa:6d:2d:e4:8e:e1:0e:51:fc:
                    9a:17:07:9f:9f:7e:4f:52:99:c3:3e:1e:67:3c:54:
                    03:83:e1:b5:a2:04:2a:cc:ff:f1:ce:f1:d1:3d:e7:
                    57:e8:d2:07:99:50:98:6a:48:be:f8:77:88:b7:8a:
                    95:16:9c:08:af:f8:5e:8a:04:2d:32:1e:82:e2:19:
                    9e:a1:03:9e:d3:d3:b0:28:69:9c:18:89:40:e8:b2:
                    a9:5e:a1:5f:39:35:53:d1:70:fd:07:a4:a5:5e:5b:
                    15:ea:4f:92:31:80:b6:b0:f6:64:cf:41:72:0e:f8:
                    1b:bd:6f:d7:98:38:b0:21:9a:62:f2:be:93:ea:1b:
                    38:2a:06:0f:69:a0:1b:8b:2b:0d:04:ab:77:d6:3e:
                    6d:a8:98:a5:04:c5:6a:81:99:42:24:4d:51:de:7d:
                    f6:16:cd:5a:3d:3f:6d:29:b2:21:03:1c:c8:66:c8:
                    40:01:09:17:c2:8a:fc:f6:a5:ec:f2:0c:de:0a:3c:
                    e9:de:a1:9e:99:5c:dc:0b:ff:49:54:a1:dc:41:44:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C7:63:E2:C7:1B:D2:10:79:52:A7:63:C7:F1:F5:58:DF:6B:D7:65
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ce:18:64:ee:d5:ca:31:2c:08:46:98:30:98:1e:3a:9a:e0:
         b4:21:73:ef:b9:bc:2d:6f:7b:c5:3f:a8:45:04:d4:8c:d6:33:
         e1:6f:6d:be:47:9c:7f:e5:d5:37:94:97:3e:ee:cb:df:4a:79:
         dc:eb:4e:27:70:5b:64:e1:d0:58:a3:7f:17:68:74:c6:4b:fe:
         bf:2d:db:4e:0d:9c:b7:36:ea:2f:88:a1:81:8c:92:fb:47:90:
         c1:12:2c:f8:06:66:9a:10:a2:9a:13:a0:7a:57:34:c2:6e:be:
         d9:d7:c9:b7:92:d3:cd:82:7a:18:24:ea:1e:29:7b:9b:44:52:
         6e:9c:24:31:96:a8:7e:c3:1b:59:4c:d5:85:a9:48:c7:60:78:
         88:6e:7c:38:0c:f3:c7:b8:9a:da:e9:76:af:3c:c8:02:c2:a3:
         95:36:8d:4a:e4:a5:72:a6:62:0b:ea:7d:ad:b6:63:f5:7b:25:
         7f:0d:c2:42:12:48:0a:95:7d:bf:96:91:6d:39:99:85:40:1a:
         43:d2:75:32:bf:65:d9:14:a5:32:e0:ee:97:06:51:b9:7b:0c:
         f9:7e:48:d7:c1:bb:d8:36:7e:fb:c5:96:f2:bc:0d:ab:6b:61:
         76:d4:77:68:3d:f5:d9:f9:4f:bd:95:83:74:1b:17:ef:20:bf:
         98:fd:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org