Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135372e302f32342d3234203d3e20323132323938.roa
File:                     34352e31302e3135372e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier:          mVi9ed/F7jH1a9v3IAFRW2oAYLUuIgG+zYn8kQpwD1Q=
Subject key identifier:   F4:07:88:DA:33:88:8A:FA:81:7D:F3:26:82:D8:66:EA:E0:4B:CD:AF
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       66F7A97F20FC061064E6ABF911D64D17D0648BAD
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135372e302f32342d3234203d3e20323132323938.roa
Signing time:             Sat 22 Oct 2022 04:33:26 +0000
ROA not before:           Sat 22 Oct 2022 04:28:26 +0000
ROA not after:            Sat 21 Oct 2023 04:33:26 +0000
asID:                     212298
IP address blocks:        45.10.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f7:a9:7f:20:fc:06:10:64:e6:ab:f9:11:d6:4d:17:d0:64:8b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:26 2022 GMT
            Not After : Oct 21 04:33:26 2023 GMT
        Subject: CN=F40788DA33888AFA817DF32682D866EAE04BCDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:f4:7c:da:0c:95:64:3a:53:ec:f0:4d:09:
                    e7:93:e5:36:83:d6:3f:41:d1:77:2b:68:22:bb:be:
                    f4:f2:81:42:0c:2e:5c:a8:68:eb:a5:d3:dd:ca:21:
                    37:0c:05:6b:76:1d:28:cc:ad:c6:8e:41:d3:e4:36:
                    d2:09:5f:9c:f8:fa:ed:cf:17:d9:b9:d4:b2:3b:78:
                    9d:6d:e6:6d:b0:b4:4f:e2:58:2a:96:8b:13:f0:91:
                    49:22:bc:d5:b5:29:b9:0a:c7:14:1c:45:ef:59:3e:
                    9a:1b:4b:45:66:00:1e:56:b3:06:68:45:8f:a4:08:
                    ef:54:bf:b1:a6:9e:9d:ba:30:8a:22:e2:38:4d:23:
                    9f:6b:3c:7e:3f:fc:f4:f5:d1:38:71:c1:7b:a7:88:
                    b1:b6:66:13:83:b0:4e:2d:18:1b:b2:a3:1b:f6:95:
                    2e:7d:23:5c:72:c5:3e:7d:28:3a:7b:a7:bd:ba:38:
                    23:42:2c:f0:95:e8:09:4e:07:18:a2:d1:13:6a:ed:
                    9a:ba:db:2f:66:d9:fb:fe:b8:53:bf:db:46:70:87:
                    55:2a:8c:f4:46:80:bd:ce:d4:e7:a0:de:2b:15:eb:
                    08:f1:a8:fb:57:7b:3a:de:0e:fb:3f:5d:06:59:3a:
                    69:0a:e6:0b:91:03:81:38:31:14:22:05:74:72:20:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:07:88:DA:33:88:8A:FA:81:7D:F3:26:82:D8:66:EA:E0:4B:CD:AF
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135372e302f32342d3234203d3e20323132323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:fb:79:23:4b:7f:e6:f4:e9:d7:62:40:c8:50:fb:22:f0:81:
         f9:22:b3:04:31:65:2c:7b:ae:0d:17:54:fe:ff:6d:36:1d:47:
         7a:ea:f0:4b:de:58:71:98:b8:78:ae:af:5e:21:41:c5:c6:6d:
         06:82:d2:c0:ee:00:d2:2c:b2:36:bc:0f:70:59:4f:bf:0e:62:
         71:d7:d0:11:e7:f2:9f:c9:60:56:11:ec:86:7c:3c:94:83:56:
         40:3a:c5:f1:b5:b8:71:82:8b:21:0a:50:d9:73:3d:09:62:2a:
         81:a1:6b:3c:22:58:33:79:42:68:cd:9c:7b:5a:81:22:6e:ef:
         ba:db:9c:ff:a8:82:51:24:a7:b4:06:8d:61:33:16:8f:3a:04:
         c1:d9:df:a3:a5:d6:d3:4d:7a:f1:b1:d7:29:f5:05:3d:49:d5:
         b5:66:d6:d4:25:06:aa:88:bc:f6:84:a9:2b:6b:42:1e:17:ac:
         cf:41:61:53:1f:30:a6:e2:48:ba:a8:5d:a1:50:16:1d:48:08:
         62:8b:9d:7a:03:e4:ea:88:e9:e5:ed:c5:76:c8:60:12:36:06:
         ba:d3:14:4d:11:3f:66:bb:c8:b0:26:4d:bb:f7:5b:ca:86:57:
         02:a3:0e:20:d4:ff:ba:64:07:be:d8:88:51:ac:89:5d:21:50:
         ca:39:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org