Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/352e3138322e31382e302f32342d3234203d3e203437353833.roa
File:                     352e3138322e31382e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          U6KlSAMhRdXzPRe4xv3j4kYb6vxzkjTEEM1fqdOyFto=
Subject key identifier:   28:21:13:3C:63:69:4F:09:C5:AE:2C:F8:37:4F:D5:BB:68:A0:88:17
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       040FBA0D9F3534BA1D116E3B8D869353AB7D0C1D
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138322e31382e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:29 +0000
ROA not before:           Sat 22 Oct 2022 04:28:29 +0000
ROA not after:            Sat 21 Oct 2023 04:33:29 +0000
asID:                     47583
IP address blocks:        5.182.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0f:ba:0d:9f:35:34:ba:1d:11:6e:3b:8d:86:93:53:ab:7d:0c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:29 2022 GMT
            Not After : Oct 21 04:33:29 2023 GMT
        Subject: CN=2821133C63694F09C5AE2CF8374FD5BB68A08817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:73:3e:44:b8:5d:06:a4:b6:6c:42:0e:5e:
                    c8:23:52:70:12:56:0f:88:3a:24:3a:ca:dd:46:a8:
                    58:61:f5:47:20:37:11:26:a8:a6:6d:6c:4a:43:76:
                    18:00:fa:2d:44:c9:8e:e0:13:03:26:f3:80:20:33:
                    e1:c0:7e:21:14:1c:d0:fa:18:cc:d6:1d:61:91:f7:
                    42:96:6f:c0:7d:6b:ac:fa:31:02:11:72:33:2e:ed:
                    2e:db:d3:7a:db:c6:d1:52:22:19:31:2d:da:30:c0:
                    e6:ac:26:62:3f:6a:c9:7c:cb:24:75:af:dc:ef:4a:
                    47:77:05:2b:ad:30:a2:50:32:3a:02:84:ac:f8:f9:
                    df:64:74:3b:5f:4f:08:38:12:2f:85:05:6a:bd:ab:
                    b6:6a:bd:ac:ae:cf:e5:3e:76:19:1e:a6:58:20:fe:
                    92:34:87:15:78:fd:6f:41:8a:c8:50:bf:a8:5d:6d:
                    79:4a:bf:a9:84:33:0e:0b:f5:6e:22:42:e3:87:ec:
                    60:f8:7f:35:a0:eb:6f:c8:e1:6d:b4:b0:9c:a4:9d:
                    4c:ba:b0:5f:52:2e:65:c4:05:02:7c:6d:43:a5:a7:
                    ad:ee:08:ea:fd:c9:fd:a6:e1:71:a1:74:21:f5:68:
                    e0:d7:70:e8:fb:d5:ba:ab:6a:6d:9f:0c:f2:90:34:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:21:13:3C:63:69:4F:09:C5:AE:2C:F8:37:4F:D5:BB:68:A0:88:17
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138322e31382e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:a7:54:cf:a8:f8:c2:75:98:80:f7:84:5e:62:e8:24:06:f4:
         0d:4b:e2:59:f2:98:f4:00:76:85:bb:33:f4:73:d3:79:50:90:
         87:78:68:ca:1b:4a:8d:47:8f:be:66:5c:e3:73:13:4f:7f:a4:
         c0:98:6b:2a:c2:04:86:e5:b0:aa:45:e8:04:ea:ec:ab:7e:63:
         e5:08:b8:b1:de:55:87:e5:ba:1f:af:54:fc:16:42:b8:d4:18:
         a0:48:5b:ef:73:06:90:83:6d:64:cc:9c:c5:1d:50:fb:bb:e2:
         95:e9:d5:8a:b4:18:78:44:18:8e:d2:18:47:32:1c:30:2a:02:
         96:f8:ee:55:f0:61:da:c4:99:bf:36:4f:5a:44:45:f2:3c:4f:
         6c:ca:9a:6f:e7:3e:1d:81:c1:d2:34:f2:1e:96:d0:48:1a:62:
         89:91:d6:7d:97:8c:72:d1:ba:aa:9d:13:e7:76:34:2c:8a:9d:
         5e:30:a9:4a:1d:04:d2:4d:b1:c0:e0:b6:16:0a:19:d3:54:6f:
         d0:1e:64:57:76:e4:80:f6:30:d5:e9:9d:af:12:2b:24:d0:8e:
         01:8e:b2:33:c6:8d:d1:6e:31:d2:5f:83:25:a3:eb:22:2f:99:
         55:21:a1:c0:66:02:e0:ba:ad:bc:f5:ba:64:31:11:0a:30:ea:
         a8:b9:5b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org