Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135382e302f32332d3234203d3e203631333137.roa
File:                     34352e31302e3135382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          rLPo/2UFXVJcn25qAGdx4wyzo7fkoHoWQAr0m0J01kY=
Subject key identifier:   92:7D:C6:D1:AF:CD:AF:BF:79:D2:A9:48:53:91:E6:18:2C:B1:DE:21
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       5EEA06A8944308A85E6868B559D13D0FB2AE1506
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135382e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:32 +0000
ROA not before:           Sat 22 Oct 2022 04:28:32 +0000
ROA not after:            Sat 21 Oct 2023 04:33:32 +0000
asID:                     61317
IP address blocks:        45.10.158.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ea:06:a8:94:43:08:a8:5e:68:68:b5:59:d1:3d:0f:b2:ae:15:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:32 2022 GMT
            Not After : Oct 21 04:33:32 2023 GMT
        Subject: CN=927DC6D1AFCDAFBF79D2A9485391E6182CB1DE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:46:cb:24:28:06:ff:c4:67:3f:59:d1:17:
                    17:ab:6c:84:bf:b8:3b:b9:cf:29:20:82:30:eb:70:
                    92:bb:13:a6:c5:fd:94:02:ee:07:dc:d5:df:56:df:
                    21:be:21:35:5a:ac:9e:c9:dc:3a:46:aa:35:e5:ac:
                    0e:af:79:04:cc:e6:d8:79:5a:a7:30:d7:21:69:2e:
                    5b:f7:ba:6b:2a:b6:f6:6a:6b:d1:6d:b9:ba:b4:f3:
                    ae:b1:5d:73:c9:dc:80:fc:a7:4d:eb:24:74:f0:8e:
                    d6:d2:10:22:f8:6b:0b:90:01:2a:79:35:0f:24:54:
                    e8:36:6d:a5:12:2e:d6:4e:9f:45:8f:d6:90:6c:5a:
                    da:62:f3:e0:a2:9d:54:d4:10:f5:e9:85:2c:ba:aa:
                    1f:77:e4:b0:64:be:81:35:66:40:66:ed:cf:a1:4e:
                    b1:51:6d:3f:f4:a8:d4:87:87:c6:02:79:6f:bd:f1:
                    e8:e3:71:71:2f:10:45:a4:39:3b:58:66:d7:21:e1:
                    20:02:12:f9:ea:3c:a8:56:0f:45:70:ae:ce:b2:34:
                    79:74:a8:72:17:6a:b7:70:fd:db:81:49:b2:4a:44:
                    de:26:e9:87:aa:47:a7:01:5d:10:40:1f:fc:13:39:
                    40:9b:b8:c3:d5:68:b6:f4:b1:5e:dd:d3:b6:da:e0:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7D:C6:D1:AF:CD:AF:BF:79:D2:A9:48:53:91:E6:18:2C:B1:DE:21
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:4d:14:04:cd:eb:8f:5e:63:81:22:0a:d4:11:15:77:e7:b4:
         21:a8:ab:65:b2:33:ec:88:98:ab:67:30:24:2c:fe:56:a0:ee:
         d1:23:61:46:7f:75:ee:0c:e4:0f:e7:bc:36:4e:b6:bf:71:0d:
         64:43:15:00:13:ee:a9:cb:bf:db:60:5a:d9:5d:51:85:f1:93:
         ab:d8:6b:04:a2:57:c2:b7:10:76:25:c8:cd:3b:41:71:36:4a:
         9a:d8:a8:01:21:18:34:0d:04:52:30:76:70:88:be:82:a3:6d:
         69:13:1d:98:79:e6:39:c6:0b:31:93:da:79:cf:84:ef:10:72:
         8d:24:1e:c8:41:cf:e9:3e:08:df:3a:a2:0c:f0:76:47:e2:8a:
         18:be:73:00:35:00:ff:df:f9:3a:2f:94:8a:5e:4b:23:2a:68:
         32:31:8d:b5:cb:72:4a:d3:2e:5d:88:9a:5c:a9:2b:67:50:be:
         a6:cd:f2:30:73:1d:71:d8:f8:77:d0:47:39:bf:d7:ec:c6:a6:
         67:8a:cc:de:ba:06:88:3e:fa:09:88:1b:73:be:a4:d4:4c:50:
         8b:30:af:e3:e2:79:4c:91:01:7b:1c:12:8c:49:84:01:f5:4a:
         df:01:24:57:6b:6d:5c:59:34:3f:d0:06:eb:55:09:60:f5:4c:
         d0:7f:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org