Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135392e302f32342d3234203d3e20323132363639.roa
File:                     34352e31302e3135392e302f32342d3234203d3e20323132363639.roa (raw, json)
Hash identifier:          vP74ZOFdzdEjusb2JV4hXSyMaTQqoh9jWrjYoMTVmCk=
Subject key identifier:   CD:A2:C7:89:33:D2:DA:66:E6:E4:C9:21:9E:EE:E7:B4:C6:3B:72:DE
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       290581DF3B3D3A4ADDCEE201978A1DA47FB09615
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135392e302f32342d3234203d3e20323132363639.roa
Signing time:             Wed 14 Dec 2022 09:25:37 +0000
ROA not before:           Wed 14 Dec 2022 09:20:37 +0000
ROA not after:            Wed 13 Dec 2023 09:25:37 +0000
asID:                     212669
IP address blocks:        45.10.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:05:81:df:3b:3d:3a:4a:dd:ce:e2:01:97:8a:1d:a4:7f:b0:96:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec 14 09:20:37 2022 GMT
            Not After : Dec 13 09:25:37 2023 GMT
        Subject: CN=CDA2C78933D2DA66E6E4C9219EEEE7B4C63B72DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:fe:59:fd:7a:fa:5f:89:3b:ad:f8:c8:81:
                    81:2e:74:2b:56:83:ab:0a:92:01:ef:49:6a:b2:14:
                    9e:41:b4:ce:a8:5d:2e:b8:fa:d7:0c:ef:b8:3e:d7:
                    69:bc:2d:2b:04:01:98:89:4c:b5:f4:e9:86:7a:61:
                    ce:52:8d:67:78:f1:da:a3:90:da:f8:cb:b8:4a:2d:
                    8a:80:aa:78:71:80:5f:02:6c:85:24:41:46:9f:9a:
                    ff:63:c1:69:dc:1a:9f:a4:a2:8c:53:b9:62:fe:b1:
                    1c:c0:c9:f3:1c:9f:11:e5:83:ff:24:40:61:a5:d9:
                    49:51:57:5a:b5:52:e5:54:2f:ac:40:48:f5:3d:41:
                    ce:e8:3d:84:34:b5:1b:40:c8:f2:7e:f3:f2:30:10:
                    74:cc:59:27:7c:9a:39:9b:df:7a:9f:f9:f8:f9:b3:
                    eb:40:29:b0:6e:ae:b2:8c:52:a7:65:f5:55:dd:9f:
                    b2:54:26:0f:33:cf:ce:aa:d8:38:bf:b6:4e:9e:78:
                    41:62:3b:82:b7:c3:88:0c:8f:49:03:3f:f8:f3:73:
                    df:03:be:3b:7c:9c:38:e3:09:dd:9e:4c:a1:99:78:
                    cf:08:d3:5d:57:f9:ae:2e:8d:a8:9b:43:9a:f5:2f:
                    2f:57:86:7e:e8:cd:5a:99:fa:4f:ff:a2:bb:bb:93:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A2:C7:89:33:D2:DA:66:E6:E4:C9:21:9E:EE:E7:B4:C6:3B:72:DE
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135392e302f32342d3234203d3e20323132363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:64:2d:56:d2:88:2c:7e:7d:1f:46:1a:1d:1d:a0:a6:98:
         75:18:7d:c9:71:0d:5c:4a:a9:47:1f:65:c7:97:3e:18:36:99:
         91:47:30:8d:84:6c:8c:03:e4:c8:8f:d2:ae:84:00:51:29:03:
         7a:40:5d:58:dc:ef:df:5e:98:67:9d:21:fa:e9:b5:d5:fc:df:
         a9:62:04:5e:9e:b6:db:98:eb:50:18:31:1a:a6:e2:ae:37:5b:
         08:46:3e:49:89:00:82:13:5f:31:1d:82:86:30:fd:7c:7b:bc:
         0f:87:53:3c:5f:6f:7b:9b:3d:4e:74:c2:a8:d6:5f:9c:28:af:
         f2:d5:42:30:2d:94:d4:b7:e8:a5:2d:3a:a2:60:a1:91:c7:9d:
         1b:0f:4f:74:ec:79:93:13:80:ee:3b:2c:1c:b9:85:45:fd:60:
         9e:7e:7c:6a:7a:2e:5f:75:ad:d9:37:e1:15:d1:ea:b1:91:ae:
         34:86:b1:70:d1:6e:f6:19:1f:30:dc:79:7d:7d:20:12:e0:c2:
         07:dc:73:a5:0f:da:6f:ba:63:67:e6:85:a5:38:fd:f3:85:17:
         9a:d1:47:bb:12:91:27:f4:d4:52:95:9c:5a:06:23:2c:6c:63:
         17:9f:2a:d7:64:18:6c:d5:67:33:28:21:43:1a:33:b2:d5:c0:
         64:20:4a:cc
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUKQWB3zs9OkrdzuIBl4odpH+wlhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEyMTQwOTIwMzdaFw0yMzEyMTMwOTI1MzdaMDMxMTAvBgNV
BAMTKENEQTJDNzg5MzNEMkRBNjZFNkU0QzkyMTlFRUVFN0I0QzYzQjcyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUP5Z/Xr6X4k7rfjIgYEudCtW
g6sKkgHvSWqyFJ5BtM6oXS64+tcM77g+12m8LSsEAZiJTLX06YZ6Yc5SjWd48dqj
kNr4y7hKLYqAqnhxgF8CbIUkQUafmv9jwWncGp+kooxTuWL+sRzAyfMcnxHlg/8k
QGGl2UlRV1q1UuVUL6xASPU9Qc7oPYQ0tRtAyPJ+8/IwEHTMWSd8mjmb33qf+fj5
s+tAKbBurrKMUqdl9VXdn7JUJg8zz86q2Di/tk6eeEFiO4K3w4gMj0kDP/jzc98D
vjt8nDjjCd2eTKGZeM8I011X+a4ujaibQ5r1Ly9Xhn7ozVqZ+k//oru7k+qbAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUzaLHiTPS2mbm5Mkhnu7ntMY7ct4wHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNDM1MmUzMTMwMmUzMTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMx
MzIzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtCp8wDQYJKoZIhvcNAQELBQADggEBAGLYZC1W
0ogsfn0fRhodHaCmmHUYfclxDVxKqUcfZceXPhg2mZFHMI2EbIwD5MiP0q6EAFEp
A3pAXVjc799emGedIfrptdX836liBF6ettuY61AYMRqm4q43WwhGPkmJAIITXzEd
goYw/Xx7vA+HUzxfb3ubPU50wqjWX5wor/LVQjAtlNS36KUtOqJgoZHHnRsPT3Ts
eZMTgO47LBy5hUX9YJ5+fGp6Ll91rdk34RXR6rGRrjSGsXDRbvYZHzDceX19IBLg
wgfcc6UP2m+6Y2fmhaU4/fOFF5rRR7sSkSf01FKVnFoGIyxsYxefKtdkGGzVZzMo
IUMaM7LVwGQgSsw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org