Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232302e302f32342d3234203d3e203437353833.roa
File:                     34352e39302e3232302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          0+IG9P45GAlKtAVXsZTJSK9cvCeCd94p/gB4JKTcuoE=
Subject key identifier:   E0:E9:51:EB:BC:15:74:37:E9:11:9B:D0:42:B9:B8:98:64:73:52:5E
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       07AC33A6E0AB08FAFF8182F5B7E6238656178C6F
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232302e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:33 +0000
ROA not before:           Sat 22 Oct 2022 04:28:33 +0000
ROA not after:            Sat 21 Oct 2023 04:33:33 +0000
asID:                     47583
IP address blocks:        45.90.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ac:33:a6:e0:ab:08:fa:ff:81:82:f5:b7:e6:23:86:56:17:8c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:33 2022 GMT
            Not After : Oct 21 04:33:33 2023 GMT
        Subject: CN=E0E951EBBC157437E9119BD042B9B8986473525E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:a5:b9:89:d2:35:73:24:b7:f9:d7:99:4a:
                    40:f2:a5:5f:69:47:e6:94:46:00:a5:a4:e2:cb:aa:
                    a0:2f:6d:d9:3d:29:82:61:0e:c5:c6:d7:1d:3e:1b:
                    29:97:c8:2a:d8:8c:dc:e9:77:1c:68:bf:30:94:0e:
                    c7:49:f1:1f:46:7a:13:ff:b9:5d:78:80:9e:0d:2f:
                    07:b3:6e:35:a6:20:08:cb:03:d2:29:d1:d9:28:26:
                    6e:51:55:0e:83:0f:50:ca:97:28:8e:dc:5f:6b:bc:
                    52:de:aa:be:f1:af:5d:1a:1f:b1:a3:97:e3:54:8e:
                    49:34:2f:86:ca:ea:0f:f4:73:97:b1:b2:54:df:c8:
                    8c:2e:1d:1b:08:44:c3:2c:77:be:4d:aa:a7:43:3a:
                    58:85:5d:46:d2:8e:44:35:5e:2c:c7:47:10:2a:c0:
                    1d:91:b5:47:71:6d:17:90:30:31:dd:46:b8:0a:2f:
                    30:00:88:58:63:9a:58:fe:22:84:60:26:3d:cf:a5:
                    e5:2f:ad:4a:d6:f9:ea:f3:52:ac:c1:ff:ba:ee:1f:
                    94:70:bc:bd:0f:b2:99:86:49:92:16:97:2d:69:7f:
                    10:6b:bb:5b:04:4d:d4:1a:70:13:fa:29:f6:5b:09:
                    db:ab:ea:4d:59:a4:ee:00:7f:d2:0d:93:fb:6d:d0:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E9:51:EB:BC:15:74:37:E9:11:9B:D0:42:B9:B8:98:64:73:52:5E
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232302e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c1:ad:fe:2e:2c:12:37:45:25:68:68:43:16:16:ec:9e:83:
         68:fc:06:ed:11:53:5a:fc:47:7c:73:1f:80:10:80:4f:04:78:
         b5:b8:54:95:70:db:fc:0d:09:0a:db:bd:52:22:8a:83:d9:05:
         6a:65:9b:0a:58:93:11:b8:09:c2:7a:a2:56:04:92:1a:9c:99:
         6e:3b:79:d4:53:84:55:be:ea:4d:49:d5:a6:49:ae:3a:88:be:
         03:9e:f0:27:dc:91:96:78:20:3f:2c:9c:27:bb:df:e2:0e:3f:
         8f:2d:4d:c0:ab:03:ca:e0:7f:c5:8e:41:c0:3e:1a:e2:a6:0e:
         a6:7b:28:f1:72:d5:60:1b:6d:6b:44:fe:1d:f2:cb:4b:e3:99:
         d7:05:95:25:5d:5d:9e:7c:f9:25:9a:45:45:f0:6f:d3:c9:b4:
         74:3a:a6:45:42:64:fd:ca:06:97:4a:9c:31:0b:de:dc:61:52:
         55:a0:d8:ac:63:5b:eb:30:e6:14:fd:dd:df:ea:83:cb:09:b8:
         cc:5e:47:54:a4:e6:e6:a0:38:9f:63:32:59:e2:62:1f:62:a9:
         07:04:0d:67:cb:4a:b3:2b:a5:20:0d:73:35:6d:bb:10:7e:ae:
         6c:6d:ab:b8:50:e7:dd:54:c2:24:8d:2f:6a:15:ae:a0:ca:e6:
         0f:8d:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org