Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33342e302f32342d3234203d3e203631333137.roa
File:                     34352e3132392e33342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          8LI/vdgos5U59R/vcKbMNwoZsvvmUFdpZkybpGl95HA=
Subject key identifier:   7D:94:A4:96:89:12:29:F4:95:D1:17:B9:FD:DE:29:86:B2:F5:93:84
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       727329B80A870D29322AD29725F8BF057567CD2A
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33342e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:29 +0000
ROA not before:           Sat 22 Oct 2022 04:28:29 +0000
ROA not after:            Sat 21 Oct 2023 04:33:29 +0000
asID:                     61317
IP address blocks:        45.129.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:73:29:b8:0a:87:0d:29:32:2a:d2:97:25:f8:bf:05:75:67:cd:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:29 2022 GMT
            Not After : Oct 21 04:33:29 2023 GMT
        Subject: CN=7D94A496891229F495D117B9FDDE2986B2F59384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:ea:9e:13:20:61:92:02:a3:2f:21:d4:4b:
                    63:c5:a1:97:3c:47:b8:b3:8c:de:39:5e:01:ac:d1:
                    1e:84:12:21:6c:66:7d:4e:f3:ea:30:6f:e6:5f:7d:
                    df:13:f9:85:46:5c:ca:b3:d1:d3:be:76:d5:30:2a:
                    b1:85:28:0f:71:d1:b1:6c:5a:a0:65:ba:c8:3e:02:
                    ae:d4:5d:00:71:50:5c:49:3a:f8:15:bb:94:14:85:
                    4c:79:a5:15:b7:a2:0e:bc:50:3e:0b:e2:8b:17:58:
                    c6:51:a2:4b:2b:82:7f:d4:7b:80:d0:f6:f7:e1:a1:
                    9c:fb:94:7d:61:28:48:9d:18:84:5d:3c:4c:a2:64:
                    42:cc:a5:21:b5:ed:3b:ca:4c:bd:a1:29:82:40:9d:
                    27:6f:96:42:b6:f0:d5:23:dc:6d:76:ed:3c:5c:f0:
                    d0:59:0e:86:22:07:e8:24:3d:02:ce:a4:12:80:25:
                    d6:04:a8:c1:58:a7:fa:cf:9e:b8:34:2d:49:ad:e7:
                    d0:69:05:9b:fb:76:ea:02:a9:08:46:f9:ed:83:93:
                    a5:e5:f4:7f:b1:e4:4d:22:4d:a8:02:c5:0e:0a:91:
                    0d:71:ba:19:70:0c:3d:bc:df:83:6e:cf:3e:34:cd:
                    48:d1:99:2b:74:9d:1e:f6:08:61:92:5e:57:10:e9:
                    f7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:94:A4:96:89:12:29:F4:95:D1:17:B9:FD:DE:29:86:B2:F5:93:84
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:b7:b5:b0:18:95:ec:c7:31:5c:ad:32:2f:fc:56:ff:bd:53:
         42:ab:1f:2b:58:37:f6:b3:5d:b4:ab:e4:ef:76:9f:6a:f7:1f:
         b4:02:80:c5:d7:83:da:94:8c:5b:1e:cf:fa:a6:e8:98:ba:42:
         07:c9:20:bb:e3:89:b4:a0:75:c6:50:8f:2e:f7:5e:5d:8c:d4:
         43:5a:25:9e:64:60:87:da:31:9e:6b:13:61:0c:5d:cd:ce:f3:
         77:5c:cf:63:dd:03:d4:99:4c:41:b3:a4:c4:3c:c5:6b:2d:42:
         2a:cc:e1:b9:49:4d:3b:26:7b:cd:4a:e2:a4:50:27:ea:08:7f:
         19:d1:ce:fe:e1:ef:54:e8:c0:78:09:bb:cf:be:b0:a3:e1:22:
         79:db:76:9a:8f:df:61:b1:d0:27:c2:56:4f:c4:85:a9:25:f8:
         69:ea:19:e6:e5:61:ac:50:36:c6:ba:63:2d:b9:97:c4:c4:91:
         7c:c8:60:07:97:39:45:af:05:24:8d:5d:b7:91:af:49:58:5e:
         df:32:60:74:20:34:80:c6:e2:c7:e2:80:9c:c6:fe:ef:58:26:
         80:db:e1:6c:9f:f0:1a:2a:51:ec:a5:77:b8:2a:f7:41:13:43:
         c2:0a:89:3f:90:7e:67:d2:4d:df:bf:46:ba:1b:ee:96:e5:e7:
         57:b6:6e:36
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUcnMpuAqHDSkyKtKXJfi/BXVnzSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MjlaFw0yMzEwMjEwNDMzMjlaMDMxMTAvBgNV
BAMTKDdEOTRBNDk2ODkxMjI5RjQ5NUQxMTdCOUZEREUyOTg2QjJGNTkzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfRuqeEyBhkgKjLyHUS2PFoZc8
R7izjN45XgGs0R6EEiFsZn1O8+owb+Zffd8T+YVGXMqz0dO+dtUwKrGFKA9x0bFs
WqBlusg+Aq7UXQBxUFxJOvgVu5QUhUx5pRW3og68UD4L4osXWMZRoksrgn/Ue4DQ
9vfhoZz7lH1hKEidGIRdPEyiZELMpSG17TvKTL2hKYJAnSdvlkK28NUj3G127Txc
8NBZDoYiB+gkPQLOpBKAJdYEqMFYp/rPnrg0LUmt59BpBZv7duoCqQhG+e2Dk6Xl
9H+x5E0iTagCxQ4KkQ1xuhlwDD2834Nuzz40zUjRmSt0nR72CGGSXlcQ6fd3AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUfZSklokSKfSV0Re5/d4phrL1k4QwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNDM1MmUzMTMyMzkyZTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALYEiMA0GCSqGSIb3DQEBCwUAA4IBAQCnt7WwGJXs
xzFcrTIv/Fb/vVNCqx8rWDf2s120q+Tvdp9q9x+0AoDF14PalIxbHs/6puiYukIH
ySC744m0oHXGUI8u915djNRDWiWeZGCH2jGeaxNhDF3NzvN3XM9j3QPUmUxBs6TE
PMVrLUIqzOG5SU07JnvNSuKkUCfqCH8Z0c7+4e9U6MB4CbvPvrCj4SJ523aaj99h
sdAnwlZPxIWpJfhp6hnm5WGsUDbGumMtuZfExJF8yGAHlzlFrwUkjV23ka9JWF7f
MmB0IDSAxuLH4oCcxv7vWCaA2+Fsn/AaKlHspXe4KvdBE0PCCok/kH5n0k3fv0a6
G+6W5edXtm42
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org