Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31352e32342e302f32322d3234203d3e203437353833.roa
File:                     34352e31352e32342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          GxcBZLFow0V15rCS1raqv4u3G/9K5YNISnlHKZBcWdM=
Subject key identifier:   04:59:96:05:3F:64:24:03:F4:A4:4B:E0:AB:43:2B:DE:24:8D:E6:19
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6BF6213089FFF7192594AD891D39FC0D0693C7AE
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31352e32342e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:34 +0000
ROA not before:           Sat 22 Oct 2022 04:28:34 +0000
ROA not after:            Sat 21 Oct 2023 04:33:34 +0000
asID:                     47583
IP address blocks:        45.15.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f6:21:30:89:ff:f7:19:25:94:ad:89:1d:39:fc:0d:06:93:c7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:34 2022 GMT
            Not After : Oct 21 04:33:34 2023 GMT
        Subject: CN=045996053F642403F4A44BE0AB432BDE248DE619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:71:32:c8:7e:93:aa:b8:d9:f0:9f:39:76:
                    9f:eb:70:ca:5c:76:35:13:17:94:e5:3d:f7:2f:eb:
                    67:6f:b3:de:53:15:1e:0c:d2:a7:d8:9c:d5:d2:17:
                    a6:c8:08:0b:19:c7:80:ca:df:3e:d1:59:e2:2d:d6:
                    29:32:6e:75:a0:fc:c8:e3:93:20:d2:f9:bf:7d:dd:
                    61:75:a0:0d:0d:ef:bd:81:21:92:45:86:e8:83:cb:
                    96:dc:3d:4a:32:d0:b8:64:89:8f:f3:28:90:bb:57:
                    84:6c:f4:75:13:ad:4c:00:ca:84:9d:78:e2:6c:23:
                    f6:cb:04:35:9a:28:f5:41:ea:88:7f:98:8e:b2:37:
                    fb:cb:a4:92:f5:79:ad:5a:74:68:00:4a:10:46:e5:
                    59:1b:62:5b:7e:60:61:25:cf:77:e3:7e:99:68:57:
                    c0:72:43:b1:23:d9:19:13:5e:87:8c:e4:ac:a4:35:
                    f6:a3:34:00:88:fe:fa:bf:78:d1:65:b2:01:14:3c:
                    0d:81:7e:0f:f7:06:b9:5f:ba:4d:03:f1:3a:4c:3b:
                    77:5d:43:46:a0:5f:12:57:4b:c7:82:c8:c0:10:a5:
                    93:23:d8:0f:9e:51:d9:61:3f:a0:97:06:19:da:d6:
                    75:0e:e7:6c:7d:cc:69:84:0c:6a:6e:21:aa:e1:5c:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:59:96:05:3F:64:24:03:F4:A4:4B:E0:AB:43:2B:DE:24:8D:E6:19
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31352e32342e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:e3:42:da:0a:73:d4:84:0b:7f:47:74:d7:c7:ee:39:7c:
         a8:c9:7e:d9:14:d3:08:0c:8b:d6:93:b9:3e:0c:f4:b7:c8:7f:
         85:3d:2d:70:c3:24:a4:f1:f4:70:d5:ad:8d:18:0b:af:28:46:
         14:ce:29:ae:70:7d:12:78:a2:6a:51:e5:97:cc:1c:58:4e:97:
         16:4a:26:ac:0c:b5:24:c1:dc:21:cc:73:9a:81:a9:ae:d2:b6:
         b0:87:2d:33:6e:75:fe:3e:ff:5d:02:3e:2d:24:f3:14:f2:2b:
         52:8f:ed:06:b2:2c:f7:2e:a0:ba:e1:d3:78:cb:64:a0:56:8c:
         46:cc:d5:7e:4f:d2:6d:45:20:5c:85:7d:51:e2:b7:94:2d:20:
         77:de:26:78:51:4a:51:5b:c8:4f:be:17:df:93:5f:df:f4:e6:
         d2:52:e7:a2:91:b5:89:a7:b8:db:5f:c7:3e:07:a1:46:59:38:
         19:da:f4:0f:a4:8d:c0:65:88:39:d9:ae:57:75:1f:21:db:6f:
         3d:93:33:52:4c:0c:e6:4d:44:b7:75:c3:4c:97:48:db:1d:45:
         01:6e:6e:94:be:f9:a9:3e:bf:b1:95:9d:46:28:a1:3c:96:6b:
         5d:78:95:d3:f7:c1:9d:e4:65:99:0a:a4:af:b0:c7:ba:4f:94:
         50:04:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org