Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230312e302f32342d3234203d3e20323033303631.roa
File:                     38332e3137312e3230312e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          XimAbP9bnHlVGeqjxEjEj0uSPVxE9SQqBB8hcwq8OrE=
Subject key identifier:   CB:F7:A7:5E:4C:34:58:F4:97:C7:43:41:B9:2E:F6:CC:9A:2F:E7:44
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       723E1AE5650E5DCA0719C742FBF426D3FFDA0AC3
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230312e302f32342d3234203d3e20323033303631.roa
Signing time:             Sat 22 Oct 2022 04:33:33 +0000
ROA not before:           Sat 22 Oct 2022 04:28:33 +0000
ROA not after:            Sat 21 Oct 2023 04:33:33 +0000
asID:                     203061
IP address blocks:        83.171.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3e:1a:e5:65:0e:5d:ca:07:19:c7:42:fb:f4:26:d3:ff:da:0a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:33 2022 GMT
            Not After : Oct 21 04:33:33 2023 GMT
        Subject: CN=CBF7A75E4C3458F497C74341B92EF6CC9A2FE744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:13:53:f1:2a:67:8a:b3:61:ef:39:0d:56:
                    14:55:08:9c:3d:08:1f:59:ac:90:e2:f5:3b:fb:55:
                    59:44:25:48:50:dc:fc:f6:cf:c6:f7:6a:0c:2b:6e:
                    d7:e5:e1:a5:a2:2a:df:a8:fb:e7:92:7e:66:26:e2:
                    30:1a:bd:fa:2e:0e:d7:1a:cb:53:08:11:9f:cf:35:
                    8c:0f:c6:d0:8b:01:4e:8b:d5:a2:0d:53:9e:b7:9b:
                    27:7e:c8:33:39:80:0f:2b:09:f0:d3:e8:e4:04:85:
                    2a:30:6e:36:90:d4:2e:b8:cf:21:88:5b:45:b1:b0:
                    a3:b9:68:43:1e:c9:04:78:6f:92:3b:d3:e6:35:97:
                    87:4d:e3:19:e9:af:88:58:54:86:bd:14:4a:7e:67:
                    0d:bf:08:ed:b3:75:bc:76:c1:09:e2:f7:6b:cb:b3:
                    3b:bf:cd:e9:f4:75:cf:c8:92:40:32:a5:f4:8a:57:
                    e8:0c:00:09:58:80:83:45:68:3e:f1:ba:f1:0c:e2:
                    c6:05:7d:e0:93:4b:86:8b:cf:85:ff:18:b2:0a:f1:
                    b0:fc:6b:bb:fb:1e:7d:50:cc:bb:da:a2:1a:0e:10:
                    06:fc:2a:a9:ff:32:96:0f:17:73:12:05:bc:0d:be:
                    33:06:ba:ff:83:e5:74:cb:8e:5d:67:0c:0d:db:7b:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F7:A7:5E:4C:34:58:F4:97:C7:43:41:B9:2E:F6:CC:9A:2F:E7:44
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230312e302f32342d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ea:77:89:fb:34:a1:d1:a6:72:80:2c:b4:1b:2b:99:8c:8b:
         60:50:87:ef:cf:e9:3c:ca:09:6c:7b:0c:70:5e:22:2e:91:47:
         39:c5:66:97:fa:35:e8:e4:24:e0:d4:e8:57:02:87:5d:54:7f:
         9b:3e:6d:9a:b1:69:ad:ab:52:dd:9f:77:a7:0a:69:f8:e7:b4:
         92:2f:51:28:70:8c:ac:a5:8f:cc:a0:85:63:76:d6:7b:35:4b:
         7e:bf:4c:f2:be:3d:ce:6d:d8:8e:04:26:91:c7:ec:8b:49:ef:
         b5:c7:5e:36:bb:17:9f:4b:c1:76:94:65:07:39:8f:24:19:8b:
         66:5c:06:08:36:3f:ab:f0:77:ca:b7:e0:40:e3:58:52:68:29:
         b4:23:0a:29:39:ae:5a:1c:e2:c1:e3:a7:5c:9d:93:6b:37:81:
         36:66:db:9e:2c:8b:f5:0e:b4:d6:f1:3e:41:57:07:1c:b3:e8:
         05:f4:cb:ea:9c:9d:24:6e:15:8e:e7:a6:2f:0a:a7:a8:aa:61:
         7a:44:b0:4a:95:96:4b:2d:18:49:f9:cf:79:b7:1f:60:4f:40:
         5f:bf:be:9d:c4:96:38:4c:f5:5a:9a:00:62:ad:e0:c1:fa:44:
         7a:c1:be:6f:8a:62:20:ee:2c:0f:39:07:d5:1e:71:17:0c:fa:
         d5:cb:7f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org