Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232322e302f32342d3234203d3e203630373831.roa
File:                     34352e36372e3232322e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier:          gyVuLSZs6R3tjBraZXKoFHBnC7GffPBX3lxLJxUJPsQ=
Subject key identifier:   24:AC:D2:4D:52:2A:07:FA:E8:20:22:D7:48:A1:A0:C7:0E:28:22:F2
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       428A20956BA615BECA5752C181B235323BE8231A
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232322e302f32342d3234203d3e203630373831.roa
Signing time:             Sat 22 Oct 2022 04:33:25 +0000
ROA not before:           Sat 22 Oct 2022 04:28:25 +0000
ROA not after:            Sat 21 Oct 2023 04:33:25 +0000
asID:                     60781
IP address blocks:        45.67.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8a:20:95:6b:a6:15:be:ca:57:52:c1:81:b2:35:32:3b:e8:23:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:25 2022 GMT
            Not After : Oct 21 04:33:25 2023 GMT
        Subject: CN=24ACD24D522A07FAE82022D748A1A0C70E2822F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cc:57:87:da:b0:78:4e:2f:86:ad:2d:28:72:
                    f6:73:3a:2f:47:6b:17:9c:5f:8f:66:a9:14:a6:3a:
                    07:c1:c1:a2:2f:d9:7c:9c:a3:98:87:b0:54:f7:16:
                    39:28:f4:63:19:5e:65:19:26:36:14:b6:9f:e9:92:
                    7e:52:df:1a:a3:06:a0:f5:8e:a0:05:81:e3:4d:85:
                    ff:58:07:ba:a2:aa:50:70:b5:12:c8:e7:f6:14:3e:
                    84:bb:b2:07:b5:1f:42:7a:16:c7:79:46:dc:e1:56:
                    84:9c:67:93:e2:59:7c:66:8f:01:7d:3a:2e:34:c5:
                    41:2e:1a:57:35:29:20:9d:45:4f:0b:b0:ba:d3:ef:
                    09:a2:17:ab:38:86:7a:f0:28:ed:3e:a7:51:16:54:
                    8f:50:35:46:4b:90:46:60:a9:03:a0:2e:24:ca:26:
                    5f:02:53:cf:61:f0:01:32:75:17:02:c3:9d:33:0d:
                    f0:7a:ab:4c:c7:46:e7:2f:b8:d8:39:21:c3:64:f6:
                    2a:7d:08:01:df:13:56:8e:df:f6:ff:d1:9a:50:7a:
                    21:8e:92:64:4c:58:4d:41:59:b6:ad:61:66:a8:63:
                    fc:a2:8a:99:b1:09:c9:c5:23:06:94:d3:65:48:19:
                    ca:13:13:96:71:9d:b4:89:80:06:6b:7a:dd:b8:a5:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AC:D2:4D:52:2A:07:FA:E8:20:22:D7:48:A1:A0:C7:0E:28:22:F2
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232322e302f32342d3234203d3e203630373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:59:95:f1:2e:4e:41:05:68:0f:b8:67:c2:21:6f:60:47:ca:
         99:7b:2e:df:da:a2:82:5e:ef:7b:68:2e:bc:21:88:ff:85:c4:
         83:45:ab:9b:1c:b8:00:8c:7c:4f:5e:f5:0f:c5:72:51:88:5b:
         f1:68:f9:e5:27:d1:51:aa:8d:91:8e:84:c9:8a:f1:b8:fd:a5:
         c8:87:49:40:3e:b8:5b:79:8e:fb:94:37:66:83:98:31:5d:6d:
         d5:b4:74:f1:40:97:8c:42:69:9c:9e:b8:5e:f6:14:2a:9c:d1:
         ef:6b:7f:a4:0e:17:da:8c:8c:f2:66:cf:bd:b4:16:aa:78:d0:
         5f:f2:0e:cb:df:00:7e:28:7e:ea:93:87:29:b7:48:3b:cb:10:
         64:b4:8b:5f:d1:19:cc:83:0c:3c:c2:69:95:fb:bf:ba:3f:90:
         6d:f3:f3:72:88:0b:61:bd:1d:bf:39:19:ab:01:7c:92:8e:2b:
         c7:73:fb:02:69:a1:af:73:62:d0:d6:33:f5:79:c4:78:e7:e8:
         41:f4:43:17:cf:d7:b6:a6:92:4a:1b:e2:37:24:0d:d0:d2:d2:
         ad:90:9a:c8:f0:70:86:ba:e8:d5:c7:98:3b:75:0f:ad:de:08:
         42:1b:48:60:c0:f1:80:08:e3:1a:d0:79:4a:94:ff:17:fc:05:
         b6:8c:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org