Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138372e302f32342d3234203d3e203630373231.roa
File:                     34352e3134302e3138372e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          fwfEvsSnAcPtIu70ejPiWst3dYHXjCvqjegBkdLXeF4=
Subject key identifier:   A7:70:09:BA:56:30:D3:B6:96:35:31:40:B2:53:FE:60:E2:61:38:C0
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       643138501755CD4CE6A222BC9A663FF0CE6750C7
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138372e302f32342d3234203d3e203630373231.roa
Signing time:             Sat 22 Oct 2022 04:33:28 +0000
ROA not before:           Sat 22 Oct 2022 04:28:28 +0000
ROA not after:            Sat 21 Oct 2023 04:33:28 +0000
asID:                     60721
IP address blocks:        45.140.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:31:38:50:17:55:cd:4c:e6:a2:22:bc:9a:66:3f:f0:ce:67:50:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:28 2022 GMT
            Not After : Oct 21 04:33:28 2023 GMT
        Subject: CN=A77009BA5630D3B696353140B253FE60E26138C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9c:6b:17:53:e3:cc:d8:8a:7b:97:a5:1a:8a:
                    81:37:85:e7:d4:a9:12:d2:f2:06:34:44:21:ac:87:
                    de:ad:96:49:6e:64:d4:5c:00:56:f1:dd:31:f1:73:
                    9f:f2:d9:de:51:29:49:bf:44:f4:07:8f:2d:18:41:
                    00:88:87:a0:51:dc:b0:f0:94:bc:5a:95:2b:68:ba:
                    32:9b:b4:70:fa:9e:75:62:ef:c5:8c:33:24:c0:1e:
                    70:4b:61:fb:ef:76:ea:c7:e5:40:a6:24:ab:bb:a0:
                    b3:2f:8d:89:6f:f0:f9:b2:94:ab:8e:10:30:df:ef:
                    ee:5d:93:5f:ae:3f:52:56:b0:74:cb:5d:41:50:84:
                    0a:f6:75:2f:9f:ae:bf:70:90:80:77:3a:29:6e:9b:
                    cf:79:69:6f:3a:48:d1:0d:c0:85:f2:6f:92:35:fb:
                    ef:e0:a4:b6:34:fa:f9:18:82:81:17:9a:0f:22:fd:
                    1b:8e:66:ff:7c:e4:59:19:30:c9:ab:c0:d4:31:5f:
                    39:be:33:ad:34:a5:48:7c:8c:6e:b5:b3:69:97:59:
                    d1:b5:76:a1:08:f7:08:bb:53:fa:28:b5:5e:be:95:
                    b8:10:f5:c0:d9:0b:cc:99:87:49:d9:0a:a4:a5:75:
                    62:af:99:b1:0b:49:6e:a0:ac:2e:24:dd:b3:f3:8e:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:70:09:BA:56:30:D3:B6:96:35:31:40:B2:53:FE:60:E2:61:38:C0
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138372e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:9d:f6:85:53:fc:c5:4e:ad:a6:32:2e:ea:55:6a:f4:f5:da:
         09:59:fc:4e:6c:75:a1:8a:78:88:06:70:d3:30:94:42:7d:cb:
         38:6d:22:5e:18:12:94:67:80:10:65:e5:4e:da:7a:62:9b:5a:
         e9:ef:d8:74:f5:42:bd:9b:24:28:15:c0:f7:16:1d:38:f2:0a:
         2c:d0:d5:9f:fa:c4:1f:f0:3c:26:4f:3a:f0:31:3c:14:a4:3c:
         1b:1e:88:a5:e7:dc:81:d7:63:70:38:1f:ef:0b:13:d7:07:24:
         15:06:8a:da:af:06:bc:40:91:88:16:36:6e:54:6f:f1:f7:c1:
         6e:5e:58:6b:6c:06:78:ce:43:88:24:6b:bd:54:c6:06:0a:e2:
         ce:94:9b:4a:36:ae:12:53:9c:16:41:6f:42:c4:a2:6f:60:9a:
         00:ac:f8:5e:fc:9a:ac:b0:a0:75:0d:f9:4f:aa:6c:47:71:ea:
         4b:bc:a0:3f:e2:78:a1:5a:99:30:d3:56:45:d1:51:1d:f0:2d:
         80:35:12:50:24:fc:91:9d:03:5c:50:b9:5a:67:b4:30:d9:11:
         09:61:05:99:6d:76:80:ca:c1:22:3d:35:76:95:3d:2f:ad:26:
         e2:80:fd:62:44:84:9c:a6:79:f9:f4:97:91:47:34:b1:c9:c5:
         15:8c:af:44
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUZDE4UBdVzUzmoiK8mmY/8M5nUMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MjhaFw0yMzEwMjEwNDMzMjhaMDMxMTAvBgNV
BAMTKEE3NzAwOUJBNTYzMEQzQjY5NjM1MzE0MEIyNTNGRTYwRTI2MTM4QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnGsXU+PM2Ip7l6UaioE3hefU
qRLS8gY0RCGsh96tlkluZNRcAFbx3THxc5/y2d5RKUm/RPQHjy0YQQCIh6BR3LDw
lLxalStoujKbtHD6nnVi78WMMyTAHnBLYfvvdurH5UCmJKu7oLMvjYlv8PmylKuO
EDDf7+5dk1+uP1JWsHTLXUFQhAr2dS+frr9wkIB3Oilum895aW86SNENwIXyb5I1
++/gpLY0+vkYgoEXmg8i/RuOZv985FkZMMmrwNQxXzm+M600pUh8jG61s2mXWdG1
dqEI9wi7U/ootV6+lbgQ9cDZC8yZh0nZCqSldWKvmbELSW6grC4k3bPzjncVAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUp3AJulYw07aWNTFAslP+YOJhOMAwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNDM1MmUzMTM0MzAyZTMxMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzAzNzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtjLswDQYJKoZIhvcNAQELBQADggEBAMGd9oVT
/MVOraYyLupVavT12glZ/E5sdaGKeIgGcNMwlEJ9yzhtIl4YEpRngBBl5U7aemKb
Wunv2HT1Qr2bJCgVwPcWHTjyCizQ1Z/6xB/wPCZPOvAxPBSkPBseiKXn3IHXY3A4
H+8LE9cHJBUGitqvBrxAkYgWNm5Ub/H3wW5eWGtsBnjOQ4gka71UxgYK4s6Um0o2
rhJTnBZBb0LEom9gmgCs+F78mqywoHUN+U+qbEdx6ku8oD/ieKFamTDTVkXRUR3w
LYA1ElAk/JGdA1xQuVpntDDZEQlhBZltdoDKwSI9NXaVPS+tJuKA/WJEhJymefn0
l5FHNLHJxRWMr0Q=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org