Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/39312e3231342e36372e302f32342d3234203d3e2030.roa
File:                     39312e3231342e36372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          s6muGcZ1vspEiojpSvcmRzgb1FWIuC/AMR/Jm64khYM=
Subject key identifier:   E9:1A:9A:13:EF:F0:7B:63:D4:36:35:26:1D:98:F1:AD:7B:AC:CC:64
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       20EC28E670187CBD3809F433283622A4201FA665
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/39312e3231342e36372e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:45:41 +0000
ROA not before:           Fri 03 Mar 2023 15:40:41 +0000
ROA not after:            Fri 01 Mar 2024 15:45:41 +0000
asID:                     0
IP address blocks:        91.214.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ec:28:e6:70:18:7c:bd:38:09:f4:33:28:36:22:a4:20:1f:a6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Mar  3 15:40:41 2023 GMT
            Not After : Mar  1 15:45:41 2024 GMT
        Subject: CN=E91A9A13EFF07B63D43635261D98F1AD7BACCC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:78:62:33:76:30:07:61:2e:4e:dd:0d:da:
                    93:ab:76:43:31:5f:af:08:2a:d6:78:4e:3f:ce:45:
                    b5:02:82:a3:ec:2c:40:35:22:4c:d6:51:96:be:d3:
                    e9:2f:94:1b:b1:0b:40:35:69:60:58:63:53:c3:35:
                    97:ff:9c:d5:f6:a5:9f:cf:f3:25:9e:81:49:d7:0b:
                    54:86:67:80:8c:cb:b8:43:9e:23:ed:64:0f:7c:f0:
                    69:f7:db:48:3e:0f:e5:91:b7:d7:5a:76:7f:b1:12:
                    b2:f2:b3:d0:b6:16:9f:04:3f:a5:a6:97:b0:24:48:
                    0b:b8:11:59:3e:a4:1f:5b:96:87:a9:c3:90:9b:22:
                    02:00:06:3c:d2:c9:4a:4b:0b:88:81:48:06:3d:48:
                    68:e0:e8:70:38:38:43:79:65:65:6b:82:06:0a:06:
                    72:07:9b:8c:18:0b:09:bb:2c:12:ba:df:ee:c3:69:
                    4a:e5:e8:a7:a6:4b:5c:7f:75:a0:c2:7f:c9:6f:fd:
                    a4:94:82:df:24:d0:2b:30:47:b8:0b:81:fc:77:21:
                    da:c2:6d:df:12:05:bc:34:fe:f7:1f:60:f3:70:0b:
                    3d:ec:31:79:9e:e2:87:b6:48:1e:bc:5a:7d:3b:19:
                    aa:4c:18:a2:9c:e8:5a:61:bb:76:6c:8b:40:38:0d:
                    75:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1A:9A:13:EF:F0:7B:63:D4:36:35:26:1D:98:F1:AD:7B:AC:CC:64
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/39312e3231342e36372e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.214.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:01:b3:31:44:9b:bd:80:2b:2e:fc:0c:0d:5f:72:a6:9f:8e:
         8a:95:e3:22:b7:7b:9e:a4:87:3a:f0:94:e7:b6:e3:1a:c5:0c:
         4c:99:7e:44:62:4f:6b:f2:ba:be:8b:ee:90:dd:d0:3b:ec:d2:
         66:4e:d2:8c:68:e8:76:e8:a2:07:f3:4a:16:44:ea:cc:bc:af:
         fb:e1:ad:74:87:b4:1e:04:11:20:99:6f:7f:a3:da:37:58:91:
         86:0a:19:72:ad:dd:87:3f:7a:d9:d6:6b:38:ba:8b:5e:a1:e0:
         a9:a7:45:a0:3e:83:f4:fa:fe:e8:2a:d8:98:54:6f:0a:fc:64:
         2f:a9:52:54:64:46:58:e5:c5:18:07:04:5c:41:b4:44:de:c4:
         de:9a:ca:1d:f2:35:06:aa:fc:9c:a5:93:0e:2f:56:1e:60:8e:
         15:da:79:82:9f:6b:c5:af:23:24:da:90:2d:cf:40:13:b2:54:
         48:16:4b:94:8f:fd:76:bd:77:0c:60:b2:19:31:a1:22:c3:25:
         cb:c3:71:3c:be:29:ce:e8:65:b2:da:ff:98:f9:24:6d:b3:a8:
         f4:ba:cd:f8:7b:e3:d3:c4:2f:ee:68:69:71:a2:16:a8:0e:e7:
         ce:db:ea:4c:66:f2:53:7e:4b:84:88:0c:47:bc:9b:56:7c:e9:
         e1:dc:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org