Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139332e302f32342d3234203d3e203631333137.roa
File:                     34352e3133372e3139332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          426EwjCLqb8qp5Jw1+CVSIb0D357feGJzS/teqP/r0s=
Subject key identifier:   65:9F:66:CB:C1:81:FB:5C:01:46:77:4C:A6:EA:E4:A5:E8:99:56:E4
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       4FCFDE2FB00B2EC409BD981140A6810753E73A0F
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139332e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:26 +0000
ROA not before:           Sat 22 Oct 2022 04:28:26 +0000
ROA not after:            Sat 21 Oct 2023 04:33:26 +0000
asID:                     61317
IP address blocks:        45.137.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cf:de:2f:b0:0b:2e:c4:09:bd:98:11:40:a6:81:07:53:e7:3a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:26 2022 GMT
            Not After : Oct 21 04:33:26 2023 GMT
        Subject: CN=659F66CBC181FB5C0146774CA6EAE4A5E89956E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:98:ac:94:f1:7a:db:ab:a7:c5:f7:36:fd:
                    3a:20:41:b8:a8:7e:1d:2b:50:cc:15:89:7e:df:a8:
                    49:a9:c3:2d:c2:30:02:74:e9:c5:61:54:07:75:2f:
                    53:50:4c:8f:69:d3:cd:21:1d:ca:fe:70:20:15:49:
                    58:bc:28:06:1a:a5:7e:ed:9e:97:0e:80:9f:a3:a0:
                    99:30:50:41:57:2a:4f:72:35:f5:b6:69:e8:af:99:
                    cb:60:de:52:4e:af:1d:8e:84:23:43:9d:81:b1:5d:
                    dd:4c:7a:c0:61:ae:88:27:fb:3d:85:7c:c6:e5:49:
                    6b:bb:18:42:db:3f:b5:58:93:dc:2b:02:52:7b:ba:
                    7f:66:48:c5:e6:3c:03:07:2d:47:0d:67:59:d4:72:
                    a7:e3:cc:36:75:eb:da:a1:c0:8c:65:76:13:c0:8d:
                    58:94:31:21:cb:cb:e6:78:11:04:89:9b:8d:af:c4:
                    da:da:12:3b:60:38:1f:39:e9:5e:82:2f:e2:aa:12:
                    80:ab:0b:3c:f2:74:dd:cc:f0:13:44:2b:7f:a7:8c:
                    5e:f4:a3:cd:34:c8:40:54:78:45:3a:90:b5:0c:07:
                    0f:f2:7d:df:89:eb:6f:6e:52:e1:f9:80:40:69:f8:
                    e0:9e:c7:26:ec:be:db:43:b8:02:c9:a2:d0:e5:40:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9F:66:CB:C1:81:FB:5C:01:46:77:4C:A6:EA:E4:A5:E8:99:56:E4
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:17:8e:34:01:fe:7c:eb:35:9a:1a:36:93:93:ba:cf:97:
         ae:0d:6c:4e:5a:7b:46:cf:3e:4c:37:30:9d:6e:0a:19:43:f4:
         0f:b2:45:fe:ab:a3:98:a0:37:da:78:ac:b7:c5:13:d2:5d:ba:
         0e:04:a4:be:25:e7:b6:2e:96:c7:e7:32:c3:ec:af:f4:e0:da:
         85:a4:d7:77:f4:ea:ca:21:84:f6:d0:b4:49:b1:80:fb:6b:63:
         f4:37:9a:a5:ef:94:ef:b9:c8:21:32:b5:47:8d:1c:18:e4:ee:
         f2:c0:50:14:ab:67:a1:ed:ee:7f:1c:a1:43:c0:b8:03:eb:34:
         35:39:25:3f:f5:97:ed:f6:2c:b4:53:ac:eb:55:fd:76:26:66:
         2f:23:8d:6e:69:10:15:c2:6d:9a:75:11:4f:10:ae:0a:d8:4a:
         dc:67:c0:58:e6:71:ae:3e:05:cb:3f:c7:2c:5a:cd:07:27:40:
         b4:da:32:3e:b0:cc:50:11:f0:f4:dd:6d:be:f3:c5:fc:39:87:
         f5:4f:4d:48:9c:4c:34:ad:f7:91:db:29:08:e2:a2:9b:2f:d6:
         3d:bb:8b:a2:95:6e:9c:3d:67:04:0d:3a:11:9d:8a:4f:73:f6:
         db:5e:6a:5b:a5:6d:12:7a:44:ab:e9:7b:27:67:2d:03:cf:9a:
         e4:df:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org