Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3134392e302f32342d3234203d3e203330383233.roa
File:                     352e3138302e3134392e302f32342d3234203d3e203330383233.roa (raw, json)
Hash identifier:          86qRJSGRV2/G6QCCiu5/wXsL3HuOKkWyW8qFOFtqu4w=
Subject key identifier:   E2:E3:00:91:1A:76:37:28:03:53:5F:8F:25:DE:11:70:FF:44:DB:8E
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       20663EB15561CD9419D77E5E9DEAAA85D275E112
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3134392e302f32342d3234203d3e203330383233.roa
Signing time:             Sat 22 Oct 2022 04:33:26 +0000
ROA not before:           Sat 22 Oct 2022 04:28:26 +0000
ROA not after:            Sat 21 Oct 2023 04:33:26 +0000
asID:                     30823
IP address blocks:        5.180.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:66:3e:b1:55:61:cd:94:19:d7:7e:5e:9d:ea:aa:85:d2:75:e1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:26 2022 GMT
            Not After : Oct 21 04:33:26 2023 GMT
        Subject: CN=E2E300911A76372803535F8F25DE1170FF44DB8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fd:02:28:fe:34:aa:67:93:ee:70:60:03:6e:
                    14:4f:52:4c:a1:b3:6b:d1:1a:a4:23:d1:2c:d0:00:
                    f1:0f:64:75:21:da:e5:ab:cc:a7:5b:1c:1e:f7:b4:
                    61:7c:75:20:b1:09:2f:f3:c3:3b:f9:08:6e:a1:d5:
                    01:88:38:a4:65:9d:63:95:b2:f6:4a:85:9a:67:4d:
                    4d:18:70:d2:0b:c8:79:5f:e9:b2:b8:e3:a4:d0:65:
                    80:a8:d4:07:c0:6e:57:6a:6d:00:0c:b5:c9:7f:fd:
                    9c:da:7e:1d:f1:2f:29:35:93:3f:88:db:48:04:2d:
                    e1:b5:7c:1d:87:ab:44:85:93:0f:d2:ac:af:61:ac:
                    05:ea:b2:aa:f9:50:e9:8c:d8:dd:1f:2d:60:d2:4e:
                    01:2c:ae:04:e3:62:41:c2:5f:80:27:ba:5f:a2:c9:
                    71:6b:b0:dc:c8:6e:31:c9:4d:d8:ca:ae:7b:90:55:
                    b6:2f:1d:ad:c9:9c:58:2c:a9:29:c0:85:b0:cd:2b:
                    83:0c:ed:17:eb:f0:2c:54:b3:0a:70:e3:54:9d:77:
                    47:7b:4a:fa:83:11:f0:d2:f2:92:33:fc:10:ea:4f:
                    22:8d:e6:a1:5e:8a:f0:d2:13:23:a5:9c:aa:07:67:
                    9b:8c:11:a8:73:a0:ab:5d:be:c3:50:49:cb:f6:f4:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E3:00:91:1A:76:37:28:03:53:5F:8F:25:DE:11:70:FF:44:DB:8E
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3134392e302f32342d3234203d3e203330383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:41:45:b7:0f:07:0f:6f:2b:fd:bb:f4:67:91:ef:25:54:e6:
         4c:ad:73:49:c6:43:38:37:c2:50:5b:d8:57:6d:4b:92:16:19:
         dd:66:dc:c6:b3:2f:50:26:3e:dd:0a:b9:ab:88:e2:24:c6:88:
         76:43:a4:4b:bb:9c:45:68:d9:45:16:70:e3:57:a4:e2:5f:4a:
         14:cd:25:58:5a:ca:22:c3:7c:13:5c:ab:2f:3d:12:4c:1e:06:
         66:5e:18:d4:d6:f8:ee:6f:ce:c2:a1:c4:9b:c2:f6:24:13:99:
         7c:0d:e1:e2:2d:5d:2f:66:d9:17:64:2f:e6:83:13:f1:01:8e:
         fc:9c:c8:cc:23:ea:34:6d:fd:96:b0:50:6a:90:d9:e9:13:82:
         23:83:a2:e0:d3:ea:80:5e:da:9a:ab:33:e2:8d:7e:0e:07:e4:
         17:b4:f6:57:59:13:49:fd:e9:b0:41:c4:9d:35:11:14:0b:a6:
         2a:b1:01:06:ef:3f:63:ae:b3:1e:b0:87:b3:10:6f:ac:75:7e:
         1a:4c:b3:fd:a3:89:78:1f:66:4d:9c:61:91:4a:3d:38:21:0f:
         02:bd:4e:01:d3:05:53:35:ce:c2:00:ee:32:54:9a:71:3e:4f:
         06:52:8a:63:8e:64:a5:2d:6f:d8:64:11:3e:b7:61:0c:c0:6f:
         41:8b:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org