Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3135302e302f32332d3234203d3e203631333137.roa
File:                     34352e382e3135302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          COb+yWm1I7Tvc0cGM+XbXWOL5gD1oTHiyMFtezG7s9k=
Subject key identifier:   A3:7C:FE:61:09:DF:A8:1D:98:EC:ED:AE:02:22:68:E3:C3:95:01:E2
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       182A335BC88C19F7FAFDC1FFB9445CBCD0C4426D
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3135302e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:38 +0000
ROA not before:           Sat 22 Oct 2022 04:28:38 +0000
ROA not after:            Sat 21 Oct 2023 04:33:38 +0000
asID:                     61317
IP address blocks:        45.8.150.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2a:33:5b:c8:8c:19:f7:fa:fd:c1:ff:b9:44:5c:bc:d0:c4:42:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:38 2022 GMT
            Not After : Oct 21 04:33:38 2023 GMT
        Subject: CN=A37CFE6109DFA81D98ECEDAE022268E3C39501E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:42:8b:97:d2:55:05:91:5c:e1:39:57:de:72:
                    ee:02:9a:f1:bc:9d:bc:bd:8f:80:3f:94:cc:8c:f7:
                    c2:c9:a9:14:fc:b9:ed:11:54:a5:df:a9:29:c0:36:
                    33:05:5e:8b:ac:4f:e3:2e:a5:0b:c3:b4:10:14:42:
                    00:17:5c:45:06:fa:fa:a7:a3:04:14:c0:3e:0d:9f:
                    97:7e:fa:69:b2:4c:7c:67:1c:cb:d3:b2:9d:fa:a7:
                    60:ab:f3:39:47:74:d0:fb:d8:a1:88:21:92:c0:50:
                    17:ec:3d:bf:c1:9a:3c:5e:95:43:25:ce:3f:05:b3:
                    b1:87:b6:f9:59:c0:b3:1e:f5:aa:08:c4:3c:51:f9:
                    81:fc:f3:8c:ff:22:b6:6b:75:3d:d4:30:4c:30:eb:
                    5c:10:31:11:84:6d:8d:54:8f:48:21:73:de:48:04:
                    83:c1:f7:f5:87:e9:ae:84:3e:7e:91:37:9b:d7:ec:
                    09:0f:2f:ac:0f:8f:06:2d:0e:91:d8:91:0a:7d:8d:
                    f7:9e:d9:05:00:94:94:7f:ed:88:e7:21:35:be:48:
                    43:e4:4b:05:74:93:4f:30:9b:76:10:aa:08:97:2c:
                    59:5c:cd:7b:64:a3:54:8f:b8:6a:2a:7d:2e:8d:dc:
                    73:98:8a:5c:c3:99:b7:ab:28:3e:d2:5c:ec:8d:44:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7C:FE:61:09:DF:A8:1D:98:EC:ED:AE:02:22:68:E3:C3:95:01:E2
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3135302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:6e:65:f8:75:a6:a1:bb:cc:2f:bb:ea:76:ba:a3:05:25:e8:
         4c:07:df:c2:47:d3:e8:7f:18:0c:17:29:90:3b:15:9e:13:6b:
         49:e0:19:b3:5a:47:e1:9d:b1:6a:13:80:99:f9:5f:d6:57:79:
         be:b0:7e:2a:47:97:dd:95:7c:03:67:df:cc:ac:fc:61:27:16:
         92:de:18:ec:aa:78:de:02:b6:9c:86:34:f3:3f:92:f2:47:0a:
         bc:6b:df:b0:31:16:48:45:df:6f:d0:04:a5:bd:c8:6b:d9:b6:
         16:b8:b1:24:7e:90:6f:10:52:d6:12:44:85:5a:a5:8f:22:46:
         b9:7a:87:52:6a:4e:c3:30:f5:bc:fd:25:cc:47:a8:ee:a5:9d:
         b0:67:92:26:f4:53:f6:d8:00:91:87:5a:4b:e7:a0:7e:d8:67:
         37:7f:06:88:6e:92:78:93:39:c1:8b:15:a0:86:d8:a1:c0:76:
         17:3b:6c:62:06:71:53:21:55:2d:d3:10:48:d6:0e:8a:cb:2a:
         6e:7a:c4:e3:96:f5:8a:a8:63:05:52:4a:de:ac:1f:8f:fa:f2:
         a8:41:91:64:c2:86:60:d4:40:be:46:52:e2:f3:9d:ae:09:21:
         c7:8f:7b:0a:35:85:5e:0b:b3:52:b7:8d:f4:ae:83:67:71:b3:
         ef:11:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org