Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135392e302f32342d3234203d3e20323039333731.roa
File:                     34352e31302e3135392e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          jXsvBkQnrwYCaNHUvkxxp0t/ODIm+RR3D7ZOPg5SWNw=
Subject key identifier:   FF:CE:08:72:78:12:23:43:45:09:91:AE:FE:87:B8:14:C4:09:D1:FF
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       54F9E567BA9A14F4606BEAACC0D20B0FED3A8E0E
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135392e302f32342d3234203d3e20323039333731.roa
Signing time:             Sat 22 Oct 2022 04:33:35 +0000
ROA not before:           Sat 22 Oct 2022 04:28:35 +0000
ROA not after:            Sat 21 Oct 2023 04:33:35 +0000
asID:                     209371
IP address blocks:        45.10.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f9:e5:67:ba:9a:14:f4:60:6b:ea:ac:c0:d2:0b:0f:ed:3a:8e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:35 2022 GMT
            Not After : Oct 21 04:33:35 2023 GMT
        Subject: CN=FFCE087278122343450991AEFE87B814C409D1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:c2:cc:fc:dc:f5:ad:9e:49:62:08:df:5a:
                    b2:be:42:4f:58:04:37:c7:68:55:30:c5:a5:e6:cc:
                    30:19:d3:1b:9b:73:22:47:ca:a7:fb:b2:5a:79:c9:
                    f2:2a:d8:2b:58:3c:60:a2:82:8d:72:ad:f5:14:d4:
                    3d:fc:72:53:96:35:bf:93:5f:e0:ab:1a:48:e0:65:
                    dc:14:42:39:f8:2b:59:5f:12:18:7e:e6:54:52:09:
                    e5:0f:9c:a5:74:d1:ad:69:6a:aa:85:85:c7:6f:13:
                    47:c7:c4:a8:51:98:6f:e7:ab:50:37:2d:2c:16:55:
                    a2:4e:f2:98:1b:34:d8:6a:0a:ab:96:ea:3f:12:05:
                    37:9b:60:40:c7:1d:38:c1:8a:e7:9c:62:9c:b3:bb:
                    ba:4e:ac:83:6b:91:21:d9:68:a1:2a:48:77:2c:3a:
                    71:48:c8:43:6e:e3:55:f4:d5:76:a9:8c:fd:29:06:
                    35:fe:67:43:37:6a:38:28:5a:88:24:a5:d1:d0:87:
                    eb:47:4e:15:da:c3:e0:07:04:2e:7d:c1:34:32:59:
                    b0:d9:04:80:7c:f1:db:b6:13:e4:9c:1a:ca:d2:61:
                    00:11:b1:96:95:69:5c:b6:9e:76:30:81:fe:a3:53:
                    cc:cd:63:4c:e4:85:1a:9d:28:fc:56:db:4a:87:f0:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CE:08:72:78:12:23:43:45:09:91:AE:FE:87:B8:14:C4:09:D1:FF
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135392e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:b4:b0:19:10:44:f7:91:13:f2:58:a4:ad:2a:5e:0c:c1:90:
         6d:39:f1:17:0c:2a:d1:42:85:aa:7c:34:ae:e0:64:4f:ff:77:
         2b:23:58:6e:90:a5:d2:95:4a:7d:d4:4e:a7:c9:13:ef:ef:8c:
         a4:b7:9b:00:5e:80:03:77:cd:11:45:c1:c3:78:e2:ed:d7:16:
         fc:d1:48:d8:82:d8:03:88:5c:dd:ba:96:25:24:80:da:25:5d:
         45:6d:b0:40:d2:8e:9f:d8:79:c2:bc:71:a4:43:34:5f:09:1a:
         e2:d5:15:c3:90:0e:86:4a:2a:fd:53:5b:a9:ea:1a:69:d9:30:
         84:1f:f9:fc:d9:d2:2f:a7:3e:b7:b7:56:11:a5:6e:16:26:1f:
         a1:16:d1:48:a8:cd:da:5a:20:59:b7:24:24:ea:22:55:77:32:
         ad:db:9e:b0:b3:b4:6a:81:82:bd:f9:f5:21:42:46:58:c4:b8:
         77:4a:e8:86:61:d4:2b:9d:ee:57:9c:63:98:96:de:f6:2c:b0:
         58:c8:bb:ba:bf:7e:35:88:62:5f:ef:09:d6:01:1e:34:9d:9b:
         99:af:f8:40:7d:af:d8:84:1e:59:be:70:5b:08:98:a9:76:8f:
         64:15:ff:8c:4f:07:ac:26:0b:12:81:eb:18:97:33:ae:d4:d3:
         b9:9e:86:28
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUVPnlZ7qaFPRga+qswNILD+06jg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MzVaFw0yMzEwMjEwNDMzMzVaMDMxMTAvBgNV
BAMTKEZGQ0UwODcyNzgxMjIzNDM0NTA5OTFBRUZFODdCODE0QzQwOUQxRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoMLM/Nz1rZ5JYgjfWrK+Qk9Y
BDfHaFUwxaXmzDAZ0xubcyJHyqf7slp5yfIq2CtYPGCigo1yrfUU1D38clOWNb+T
X+CrGkjgZdwUQjn4K1lfEhh+5lRSCeUPnKV00a1paqqFhcdvE0fHxKhRmG/nq1A3
LSwWVaJO8pgbNNhqCquW6j8SBTebYEDHHTjBiuecYpyzu7pOrINrkSHZaKEqSHcs
OnFIyENu41X01XapjP0pBjX+Z0M3ajgoWogkpdHQh+tHThXaw+AHBC59wTQyWbDZ
BIB88du2E+ScGsrSYQARsZaVaVy2nnYwgf6jU8zNY0zkhRqdKPxW20qH8PvVAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQU/84IcngSI0NFCZGu/oe4FMQJ0f8wHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNDM1MmUzMTMwMmUzMTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMw
MzkzMzM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtCp8wDQYJKoZIhvcNAQELBQADggEBAJa0sBkQ
RPeRE/JYpK0qXgzBkG058RcMKtFChap8NK7gZE//dysjWG6QpdKVSn3UTqfJE+/v
jKS3mwBegAN3zRFFwcN44u3XFvzRSNiC2AOIXN26liUkgNolXUVtsEDSjp/YecK8
caRDNF8JGuLVFcOQDoZKKv1TW6nqGmnZMIQf+fzZ0i+nPre3VhGlbhYmH6EW0Uio
zdpaIFm3JCTqIlV3Mq3bnrCztGqBgr359SFCRljEuHdK6IZh1Cud7lecY5iW3vYs
sFjIu7q/fjWIYl/vCdYBHjSdm5mv+EB9r9iEHlm+cFsImKl2j2QV/4xPB6wmCxKB
6xiXM67U07mehig=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org