Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139352e302f32342d3234203d3e203631333137.roa
File:                     34352e3133372e3139352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          KhVdNx3x9TfRtwFT9fWnYMtiTtrKT9AXGBrzXCPCvTA=
Subject key identifier:   0A:9B:F2:03:01:95:91:06:4C:3B:67:2D:1D:E0:9E:2A:5E:91:B4:F7
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       189B7E629650513D1D86CCE384364D2A433781D9
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139352e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:25 +0000
ROA not before:           Sat 22 Oct 2022 04:28:25 +0000
ROA not after:            Sat 21 Oct 2023 04:33:25 +0000
asID:                     61317
IP address blocks:        45.137.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9b:7e:62:96:50:51:3d:1d:86:cc:e3:84:36:4d:2a:43:37:81:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:25 2022 GMT
            Not After : Oct 21 04:33:25 2023 GMT
        Subject: CN=0A9BF203019591064C3B672D1DE09E2A5E91B4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:6d:2e:ce:7c:32:63:99:d4:50:44:63:71:
                    f8:bc:c6:a2:58:a1:40:60:d1:b8:b4:58:63:d2:1a:
                    41:70:a8:91:12:d5:3e:97:fa:64:77:dd:98:73:24:
                    ee:87:d7:a4:ae:d6:cf:43:c2:4f:1b:d9:c9:d5:b9:
                    19:a9:c4:3b:99:35:1e:2b:39:91:14:f8:92:a2:ad:
                    38:75:4d:f0:0e:e1:50:75:2e:cd:0c:b2:9c:cd:39:
                    71:54:b9:85:b0:3f:25:1d:69:ea:89:42:8d:5e:4e:
                    e3:c9:21:3d:d2:69:ca:36:83:27:77:6a:ec:95:10:
                    61:fb:46:a0:15:c4:bf:f4:cb:1b:f6:bb:a2:2f:59:
                    0d:11:76:e1:38:f3:63:ac:c2:36:e7:15:14:ae:52:
                    ef:a7:00:40:58:08:78:4d:0e:48:c0:fa:a0:ba:5b:
                    1d:47:62:ef:d2:62:33:0e:25:02:5c:68:b6:3d:91:
                    73:54:b1:1a:8c:8a:2c:50:79:f7:97:cc:34:4a:b3:
                    76:e2:76:26:a5:53:70:5c:ea:2d:e2:8c:f2:49:dc:
                    56:e6:29:17:77:55:ab:d0:d8:c4:dc:dc:93:50:39:
                    8b:2b:84:09:6a:a8:1c:69:fd:c8:f5:d0:c1:01:07:
                    43:2e:64:49:55:f1:b5:d9:9e:e2:46:c6:44:4d:b1:
                    2f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9B:F2:03:01:95:91:06:4C:3B:67:2D:1D:E0:9E:2A:5E:91:B4:F7
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:16:47:f5:67:4c:b7:fa:b2:30:49:89:06:74:d0:2b:06:7a:
         c8:b8:3c:ce:23:d7:e1:a2:ee:f9:47:1a:34:9d:ea:64:d2:65:
         ea:3e:de:e8:2b:5e:a3:04:d6:86:83:9c:db:ca:55:3b:93:5c:
         47:13:b6:81:44:88:1c:12:ef:5b:28:61:5a:57:87:13:f9:35:
         12:77:e8:1a:71:6c:bf:a6:b8:11:5b:0b:36:76:d7:97:84:51:
         4b:d7:a6:34:6d:58:90:47:eb:ab:72:63:62:32:4e:54:24:5f:
         ac:b9:f2:34:b7:c5:4a:1e:1f:44:ed:16:af:3d:43:88:1b:3b:
         62:1e:1e:a2:3e:a7:96:ef:2f:72:0a:2d:de:76:32:a7:cb:a2:
         7f:5c:96:9e:99:75:c9:7e:3f:42:81:c6:ce:48:a4:af:77:6f:
         5b:ba:ca:a1:ea:f9:be:0c:f2:46:e9:c6:48:7c:2f:0f:e7:bd:
         58:ab:35:4a:4f:1d:2b:77:2c:c3:66:5b:58:eb:70:f6:35:fc:
         98:06:3d:22:a5:cd:5d:f5:5b:91:7e:60:9c:e8:38:fa:31:24:
         72:d6:67:6c:60:f2:63:21:a7:f3:31:4d:1f:f2:5c:7e:9e:1e:
         46:32:8c:fb:03:ed:77:0e:a4:77:a0:3f:55:95:d7:63:ab:cd:
         7a:41:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org