Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32342d3234203d3e2037383537.roa
File:                     34352e382e3134382e302f32342d3234203d3e2037383537.roa (raw, json)
Hash identifier:          B1iu8elLi8FiwWFsIQbY7ufiPGh85KyAWx1noC6tJ7M=
Subject key identifier:   CE:C4:79:B4:C5:5D:D9:EE:C0:03:A9:63:C4:10:04:4B:C2:28:DF:71
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       4031363DDEE94CF45EB05A184333BC06EF6AF7D7
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32342d3234203d3e2037383537.roa
Signing time:             Tue 28 Jun 2022 04:41:14 +0000
ROA not before:           Tue 28 Jun 2022 04:36:14 +0000
ROA not after:            Tue 27 Jun 2023 04:41:14 +0000
asID:                     7857
IP address blocks:        45.8.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:31:36:3d:de:e9:4c:f4:5e:b0:5a:18:43:33:bc:06:ef:6a:f7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:14 2022 GMT
            Not After : Jun 27 04:41:14 2023 GMT
        Subject: CN=CEC479B4C55DD9EEC003A963C410044BC228DF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:2f:d4:13:5f:9b:50:e7:4f:f8:d2:d3:09:
                    d9:8a:7e:0b:5e:94:cb:94:5a:83:5c:25:41:0f:7e:
                    b6:09:c1:0f:0c:0f:e0:cf:5f:b0:cb:d3:bc:c4:43:
                    59:ab:21:6b:34:ab:e7:bb:ab:2e:b9:f9:b4:c2:1e:
                    2a:b6:95:e6:8e:20:9b:28:8b:c3:d0:e3:b4:ea:40:
                    c6:5a:91:48:9f:a0:63:72:9f:92:59:c7:98:4c:7f:
                    98:bd:ac:87:0c:96:06:c8:78:64:28:01:32:66:f3:
                    1d:47:58:4b:d5:38:ac:3c:c0:cf:73:97:64:60:38:
                    26:70:51:1a:5b:a3:f7:3f:1d:ff:69:ea:16:66:e3:
                    18:8b:28:ab:09:63:ba:8b:87:e9:a6:9b:2d:aa:67:
                    1d:e0:ee:c1:19:54:47:5e:16:32:e6:97:da:89:81:
                    d0:db:bc:2f:ce:1e:0a:66:ee:cc:b2:3b:b6:98:35:
                    1a:4b:2c:c8:ed:75:87:cf:08:f2:f4:b4:ce:20:ca:
                    a7:c2:49:2d:74:21:3c:df:75:de:f3:94:5d:d7:c9:
                    cd:1f:97:36:3e:4b:b8:c7:69:a2:e3:10:ec:d0:41:
                    bc:62:63:9c:c6:97:b3:0c:ad:f2:75:f2:03:ed:e0:
                    14:da:ab:66:3e:cc:3b:99:d6:9f:6e:c6:c9:23:82:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C4:79:B4:C5:5D:D9:EE:C0:03:A9:63:C4:10:04:4B:C2:28:DF:71
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32342d3234203d3e2037383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:bd:69:3d:00:9b:3b:43:cf:39:db:a7:16:be:34:ce:c8:ee:
         22:cd:ed:b5:b9:b4:08:7f:55:74:cd:af:27:50:d0:b4:8f:16:
         0d:02:4d:36:7a:78:57:54:a8:2b:0a:93:8c:e5:cf:9f:16:d6:
         78:12:ac:85:7b:28:0a:17:77:4a:88:4a:9c:ac:ee:e1:26:db:
         2d:ac:30:e6:9b:11:1a:0f:84:81:40:c1:ff:29:e4:9f:51:e2:
         5a:90:8c:e0:01:e1:d1:9d:a8:9e:c9:d9:92:66:b1:10:6a:bb:
         b3:60:0e:17:cb:50:4a:51:41:92:9d:f2:65:e4:1c:f7:73:67:
         30:c6:9b:d9:e0:11:f1:21:12:dc:6e:d8:27:65:5c:13:5b:d9:
         d7:12:37:62:f1:a6:41:74:cc:b4:27:c6:84:0f:a9:5b:e0:df:
         d6:21:1a:a5:0d:98:6f:e4:c9:d8:77:09:5d:d3:88:1d:93:03:
         0b:87:34:3a:c3:69:42:4f:c2:5e:24:f3:06:ba:f2:0b:ee:47:
         b3:84:c1:20:45:5c:25:8d:f6:e6:d0:a2:ab:4f:26:f9:65:0e:
         3f:1d:17:88:ca:ef:f3:62:4b:b9:bf:77:63:f1:da:7a:8d:c9:
         4c:56:e7:62:99:44:83:af:70:26:e1:ab:6d:84:c1:31:ef:0f:
         e5:fc:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org