Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa
File:                     34352e3134302e3138362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          1iLla6GZZOSbfpuaxlDTXAi9F8PZ+UFE7WGvtLfzkgo=
Subject key identifier:   B8:75:33:63:18:5C:58:92:44:A7:1D:B7:DE:D5:D3:41:97:8E:CF:19
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       3EA717E40CD93D91CDF95512D12673D2847D8FFE
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:33 +0000
ROA not before:           Sat 22 Oct 2022 04:28:33 +0000
ROA not after:            Sat 21 Oct 2023 04:33:33 +0000
asID:                     61317
IP address blocks:        45.140.186.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a7:17:e4:0c:d9:3d:91:cd:f9:55:12:d1:26:73:d2:84:7d:8f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:33 2022 GMT
            Not After : Oct 21 04:33:33 2023 GMT
        Subject: CN=B8753363185C589244A71DB7DED5D341978ECF19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:16:c8:02:61:72:c6:36:8b:57:3b:d1:4c:
                    cd:b3:ef:9f:1a:47:18:f2:42:50:ff:7a:90:7e:99:
                    03:ff:83:55:d7:dc:6a:1c:93:61:12:36:f2:04:09:
                    5c:72:15:3f:dc:76:6d:19:43:c4:4b:a6:ec:94:b1:
                    36:71:8d:56:51:a1:21:7c:26:8a:b1:55:bf:d9:6d:
                    b0:fd:70:6a:2a:91:77:12:32:f5:b6:2a:45:ae:a4:
                    c0:ee:64:0f:b7:de:41:58:1f:be:be:83:53:c0:54:
                    69:84:c5:2f:b0:75:b1:0c:94:78:67:b5:0d:e8:d6:
                    28:d8:16:5d:8e:8f:8a:be:d5:43:26:a4:44:cb:30:
                    a9:d0:cb:57:aa:ac:af:30:e1:a7:ff:46:b7:f7:02:
                    0b:06:5f:1b:4d:4e:9a:3a:f2:2d:99:fe:62:75:1b:
                    23:3c:6d:f8:67:af:0e:7c:58:c0:49:46:66:d3:a7:
                    85:78:85:e3:5e:73:43:0c:3c:1d:8b:09:87:61:73:
                    51:f1:a9:c5:a2:f0:80:ec:5f:f2:cb:ee:16:f4:b1:
                    45:d1:4f:43:79:23:3e:7b:62:9d:38:dc:3a:5a:eb:
                    4f:0e:a0:0a:31:f1:cf:76:21:ed:68:ab:02:29:4e:
                    04:93:45:51:89:af:05:98:06:59:be:76:94:71:8d:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:75:33:63:18:5C:58:92:44:A7:1D:B7:DE:D5:D3:41:97:8E:CF:19
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:01:01:dc:3c:01:30:04:bc:7f:d1:35:1b:d8:49:22:ac:de:
         ae:28:06:1b:9b:74:2c:7b:ac:67:44:89:34:1b:37:15:15:a9:
         bc:c7:c6:ba:60:30:30:59:0f:d2:64:1b:64:b7:c5:e6:a4:08:
         81:0c:ef:36:f3:d7:d8:c6:99:08:0c:0d:85:bd:ea:9c:78:34:
         e8:c2:e9:d8:9e:2b:78:30:ae:0c:c1:5e:68:9d:50:d0:3b:b4:
         43:97:67:41:21:9a:8a:4f:b6:3f:e3:d4:ed:63:08:1d:2e:4b:
         a8:0b:38:a5:65:ce:97:92:cf:f4:4b:03:c5:a0:72:f4:18:b4:
         24:17:0c:79:09:ca:6e:e6:b6:89:eb:22:b8:cd:86:1c:11:f1:
         3c:80:6b:9c:05:28:ff:79:4e:18:69:59:1c:b2:6d:05:f7:2e:
         7f:00:53:04:9b:79:a4:47:19:e5:4f:38:95:fa:30:97:5a:8a:
         d9:73:b9:32:7d:d3:29:68:b4:14:29:7c:2e:66:91:f6:9e:3c:
         ca:67:30:e1:e7:c7:b2:c3:71:54:18:cf:3d:2f:14:62:f3:34:
         5f:68:50:0a:63:7c:bf:9c:0f:19:b6:21:e4:61:7c:f6:06:da:
         6b:56:6b:78:00:0a:c0:cc:f1:bc:de:8e:b7:6c:19:53:68:a5:
         d8:67:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org