Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139332e302f32342d3234203d3e20323132323938.roa
File:                     34352e3133372e3139332e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier:          TsX8yCwwcar5K3wcBelvSj3rljGsmt4jOKqOtTSS9Bg=
Subject key identifier:   96:C8:32:D5:11:6D:A1:63:4A:7D:C1:FD:FB:FE:1D:C4:2F:D0:E5:FC
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       015FAF7BAA09E0FC7F37C6CBE0BC98D776F20BA3
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139332e302f32342d3234203d3e20323132323938.roa
Signing time:             Sat 22 Oct 2022 04:33:30 +0000
ROA not before:           Sat 22 Oct 2022 04:28:30 +0000
ROA not after:            Sat 21 Oct 2023 04:33:30 +0000
asID:                     212298
IP address blocks:        45.137.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5f:af:7b:aa:09:e0:fc:7f:37:c6:cb:e0:bc:98:d7:76:f2:0b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:30 2022 GMT
            Not After : Oct 21 04:33:30 2023 GMT
        Subject: CN=96C832D5116DA1634A7DC1FDFBFE1DC42FD0E5FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:5c:86:d3:2f:ac:b4:43:3a:99:2b:ab:00:
                    13:b9:df:d8:97:e2:e7:ef:69:41:a3:9d:30:3e:ef:
                    2f:38:22:01:7e:0f:b0:80:59:ce:35:ca:6b:de:55:
                    2d:20:02:f9:3c:d0:97:d4:39:9c:65:7e:ad:07:2f:
                    38:e4:e0:36:7d:e0:d6:64:a6:ef:f8:bf:7e:96:e5:
                    fe:ba:72:55:38:b0:26:07:a3:48:0e:fc:30:e4:9f:
                    e3:92:d2:99:93:64:53:b7:d9:57:fd:15:19:78:2d:
                    a1:c2:0f:18:8b:44:3e:21:12:4c:2a:62:36:ff:c2:
                    1c:8c:37:95:07:a1:f2:2d:3b:d9:d5:d6:a1:53:0e:
                    fc:86:65:cb:42:bf:6b:52:1e:5b:f8:4f:e1:10:1e:
                    dc:e2:76:1a:15:4a:39:73:70:a2:29:55:6f:26:55:
                    ae:17:ed:2c:02:19:aa:39:27:eb:bd:11:02:56:76:
                    89:62:01:dd:a0:0d:42:ae:fc:8a:0b:b0:1f:e6:9b:
                    55:eb:c9:86:dc:4b:39:be:d4:47:b9:5c:5e:a9:60:
                    53:dd:9f:36:43:35:d3:7d:6a:dc:ad:34:17:36:52:
                    7b:7e:95:56:e1:e8:f6:82:96:1d:ec:b3:b5:f4:9c:
                    cd:4f:1d:38:ab:3a:02:c1:4d:82:af:a0:54:c3:5e:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C8:32:D5:11:6D:A1:63:4A:7D:C1:FD:FB:FE:1D:C4:2F:D0:E5:FC
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139332e302f32342d3234203d3e20323132323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:40:0d:c5:86:57:38:85:0f:a3:cb:74:bb:83:ad:a8:5e:43:
         70:c7:64:69:b5:54:c6:45:54:2d:88:80:3c:d9:ed:e7:cd:69:
         da:e8:99:3d:45:b7:c0:ec:53:0e:c8:d6:e0:99:f0:b3:d2:a5:
         f2:31:91:3d:78:b4:83:95:69:70:85:41:6e:2d:3d:a7:31:a6:
         af:dd:5a:af:a7:78:e6:23:a6:88:7a:4b:2c:d1:bd:13:42:84:
         1d:ac:68:46:21:d4:c6:61:11:f1:ce:c5:84:ee:51:f9:ad:1f:
         54:7e:03:8f:7b:01:06:c8:65:ec:85:39:98:f6:d3:9b:ad:27:
         d4:c9:b3:7a:93:49:3f:0d:25:56:c3:95:c5:e8:51:15:85:53:
         99:60:c9:3e:70:e8:a5:ce:82:40:94:b7:95:a4:9e:92:ae:7d:
         b8:11:5c:56:07:f7:b3:bf:5a:e4:bf:67:e3:2d:9f:1c:af:be:
         94:0c:ae:32:32:5e:05:95:68:5a:66:63:71:45:8f:50:cb:c5:
         be:1e:9f:b7:62:ed:f5:44:03:91:d3:14:ec:10:b0:08:c5:fa:
         b1:41:b0:d7:a5:ec:1b:fd:c8:8b:45:f3:05:f0:1f:78:f8:db:
         e4:ce:f6:a5:71:8f:c8:83:9a:aa:6f:e1:63:56:5a:f0:da:ac:
         f2:6d:9f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org