Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa
File:                     38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          3sfhlxEmOEmmBwSA0ZW6uXt1bNQxrVNR3dw88AKaLs4=
Subject key identifier:   28:50:9C:B6:9D:C8:DF:B6:FC:CE:91:22:12:3C:24:4F:FB:3B:4E:0A
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       55D5B04B351C3704BA549C5A5D4BE252D57E1657
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa
Signing time:             Sat 22 Oct 2022 04:33:33 +0000
ROA not before:           Sat 22 Oct 2022 04:28:33 +0000
ROA not after:            Sat 21 Oct 2023 04:33:33 +0000
asID:                     203061
IP address blocks:        83.171.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d5:b0:4b:35:1c:37:04:ba:54:9c:5a:5d:4b:e2:52:d5:7e:16:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:33 2022 GMT
            Not After : Oct 21 04:33:33 2023 GMT
        Subject: CN=28509CB69DC8DFB6FCCE9122123C244FFB3B4E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:14:fa:73:c6:9f:67:b7:4e:eb:45:e3:a8:
                    6c:c6:9b:92:fa:32:a8:bd:6e:d1:e8:0f:ec:d1:38:
                    e7:a0:2e:28:45:35:20:43:c9:26:9b:84:30:dc:df:
                    b5:c3:49:c9:97:9b:b6:20:7f:51:e7:4f:15:db:21:
                    a0:61:42:64:84:86:ed:4f:80:af:c5:89:7c:f1:c1:
                    85:9d:d1:ce:2c:3c:37:6b:46:56:e5:9a:e8:8e:80:
                    79:ca:b6:3a:7b:df:28:73:6d:23:23:27:51:50:60:
                    12:6d:6b:97:73:99:7c:dc:59:8b:f1:c5:00:b9:41:
                    4d:f8:8a:88:79:c3:ce:4d:33:94:00:25:5a:80:08:
                    3c:8c:f0:72:9e:c4:e2:f5:98:10:8f:46:85:d1:eb:
                    3e:18:88:ca:e0:21:96:1a:bb:ba:25:b1:41:d0:51:
                    33:be:ce:63:9d:18:7c:63:c2:dc:64:33:ce:bf:f4:
                    01:0a:df:6d:e2:2b:0a:22:ed:a3:8a:e4:2b:ea:8b:
                    18:fe:f6:d3:69:dc:21:bc:a8:19:b5:99:60:9f:2f:
                    7d:cc:a2:e0:d0:43:64:03:65:cc:01:1b:45:c4:06:
                    ce:a4:36:0f:2b:02:84:c2:16:98:39:c0:bd:f5:7a:
                    d9:5f:f1:14:7b:55:62:fd:c8:20:8a:38:6e:94:b3:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:50:9C:B6:9D:C8:DF:B6:FC:CE:91:22:12:3C:24:4F:FB:3B:4E:0A
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:71:3d:8e:b2:cc:b7:d7:60:6a:b7:05:d1:b0:cc:09:43:58:
         45:2f:40:3f:80:a8:74:ce:13:b0:2a:0c:95:37:98:37:88:ce:
         d5:2b:18:73:95:11:4b:43:91:cf:5a:13:b4:66:6b:00:70:d6:
         56:7b:b1:83:8a:df:93:e7:16:51:65:8c:5a:88:00:ed:d3:1f:
         c3:8f:65:2f:81:cb:75:3c:87:7d:38:e2:ca:c1:49:4c:15:b3:
         ee:c0:9e:3e:e3:6c:8d:77:c3:bc:d9:83:bc:c9:0b:33:4d:83:
         ed:f6:ee:db:66:e9:0b:eb:94:4c:77:26:3a:1c:34:c5:f8:d8:
         c0:32:2a:e3:91:60:6a:4f:80:2d:2e:98:3e:8d:64:78:62:5d:
         1e:56:8d:97:b5:45:31:ed:0d:7f:38:19:86:94:44:f5:a1:dc:
         dc:b2:d1:ac:05:79:e1:08:a2:0e:de:50:d3:9f:90:05:9d:ed:
         1e:8d:ec:59:b3:b2:c3:c7:a2:25:82:c8:95:2b:12:2b:79:61:
         91:cd:9d:22:b6:98:e1:98:ec:10:54:71:ba:9b:ec:8f:fd:dc:
         16:02:ff:6a:6c:5f:27:91:59:00:01:27:ad:89:36:34:6f:0b:
         10:4d:d1:63:7a:df:11:59:62:c2:41:62:ba:22:48:1e:e4:20:
         c8:9a:16:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org