Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33342e302f32332d3234203d3e203132313839.roa
File:                     352e3138322e33342e302f32332d3234203d3e203132313839.roa (raw, json)
Hash identifier:          88cTh8R9golpCgHEhCC0LDe12nzt/H4hxjZGQJ3SOmY=
Subject key identifier:   05:F1:5B:87:A8:EE:7A:2D:3E:C6:06:D9:F4:99:44:DE:0A:1A:A3:4C
Certificate issuer:       /CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
Certificate serial:       288D9646817E981139E15F39A3B1BF2D5989C347
Authority key identifier: 18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33342e302f32332d3234203d3e203132313839.roa
Signing time:             Tue 01 Dec 2020 23:26:36 +0000
ROA not before:           Tue 01 Dec 2020 23:21:36 +0000
ROA not after:            Tue 30 Nov 2021 23:26:36 +0000
asID:                     12189
IP address blocks:        5.182.34.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8d:96:46:81:7e:98:11:39:e1:5f:39:a3:b1:bf:2d:59:89:c3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
        Validity
            Not Before: Dec  1 23:21:36 2020 GMT
            Not After : Nov 30 23:26:36 2021 GMT
        Subject: CN=3082010A0282010100B269CF01535D9A9169450E948BBC08C07A2B909D52604A109C0FFD52AD72E4029881BA47EC53EEBE67914E4FE6421A67922DCFB734A7031AC9ADDFC485B2834B889D86144D5C368DC16DC68D74BFF9F3AE9E316BB3DA35069FA8785F30D379B07F379E71D1C51E0CA9047E9D8BF402CB258A414D9E16FC9C397E46542B45A36AA2EC1B0E54068BE48BC78095D4C52860063956302D04B007DF3E2D057A48B770E7E2D05BF396E73E88E4130F84157376EAA1ACCD3AE1FA775054C1B48FE67DC9C3FEA79812DFB8E68C6FB88E54258BCE0F10CE0D4E124BC3EB057DA646231A84EDD0749354098AEFF18983D33173546F77EC6DDB3BBC6F5F4931170E0BC84F490203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:cf:01:53:5d:9a:91:69:45:0e:94:8b:bc:
                    08:c0:7a:2b:90:9d:52:60:4a:10:9c:0f:fd:52:ad:
                    72:e4:02:98:81:ba:47:ec:53:ee:be:67:91:4e:4f:
                    e6:42:1a:67:92:2d:cf:b7:34:a7:03:1a:c9:ad:df:
                    c4:85:b2:83:4b:88:9d:86:14:4d:5c:36:8d:c1:6d:
                    c6:8d:74:bf:f9:f3:ae:9e:31:6b:b3:da:35:06:9f:
                    a8:78:5f:30:d3:79:b0:7f:37:9e:71:d1:c5:1e:0c:
                    a9:04:7e:9d:8b:f4:02:cb:25:8a:41:4d:9e:16:fc:
                    9c:39:7e:46:54:2b:45:a3:6a:a2:ec:1b:0e:54:06:
                    8b:e4:8b:c7:80:95:d4:c5:28:60:06:39:56:30:2d:
                    04:b0:07:df:3e:2d:05:7a:48:b7:70:e7:e2:d0:5b:
                    f3:96:e7:3e:88:e4:13:0f:84:15:73:76:ea:a1:ac:
                    cd:3a:e1:fa:77:50:54:c1:b4:8f:e6:7d:c9:c3:fe:
                    a7:98:12:df:b8:e6:8c:6f:b8:8e:54:25:8b:ce:0f:
                    10:ce:0d:4e:12:4b:c3:eb:05:7d:a6:46:23:1a:84:
                    ed:d0:74:93:54:09:8a:ef:f1:89:83:d3:31:73:54:
                    6f:77:ec:6d:db:3b:bc:6f:5f:49:31:17:0e:0b:c8:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F1:5B:87:A8:EE:7A:2D:3E:C6:06:D9:F4:99:44:DE:0A:1A:A3:4C
            X509v3 Authority Key Identifier:
                keyid:18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/1897F5D19C0B1376CBBC8F96D8489F37A85FBF2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33342e302f32332d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:b5:b0:47:66:4c:a9:ed:a5:3c:b1:85:66:4f:3d:71:85:f7:
         a2:42:5c:c0:e1:4f:df:6f:fb:a7:6c:d1:66:cb:dd:51:13:8f:
         7a:4f:13:0b:07:6c:2a:d0:5b:d4:83:49:69:53:18:4c:37:53:
         bb:50:39:1f:fe:13:e6:be:55:3f:40:77:14:86:b9:e0:5c:14:
         fa:08:3d:af:bb:4b:c3:6f:60:23:c9:fa:5a:a7:ac:c9:57:dd:
         72:44:da:d9:75:ed:e2:d8:3b:fb:4f:ee:0b:78:fb:7e:2d:5d:
         ea:c3:b6:3d:d5:d6:9f:49:d3:b8:a4:92:db:ff:f5:c2:34:ae:
         d1:79:3d:4b:d1:77:bc:86:a5:69:ec:1c:71:e0:6d:d6:84:ab:
         dd:c0:22:2c:26:a2:e1:bd:34:37:65:dd:73:b8:ac:27:76:43:
         a5:b4:d4:6b:ef:39:50:c2:8b:46:b7:a1:97:a7:07:a8:a9:77:
         a9:51:2f:2b:40:e2:f7:7b:8d:42:57:5f:15:3d:97:aa:bf:03:
         10:0b:99:33:04:b8:b0:08:af:d8:11:7d:59:1a:87:ee:c3:2f:
         8a:31:80:02:7e:d0:6e:07:b1:a9:a8:e3:32:e4:50:3a:3a:91:
         1e:cc:69:b3:69:b9:78:82:b7:6a:2b:3f:53:9e:a9:11:dd:9d:
         19:a6:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----