Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235312e302f32342d3234203d3e2037373234.roa
File:                     38332e3137312e3235312e302f32342d3234203d3e2037373234.roa (raw, json)
Hash identifier:          gX9Dfg4S1LqwEAkDcHjqJ1k8V+ijyIfb0jbsfOBnTUM=
Subject key identifier:   85:CC:8F:F9:97:2D:BB:68:85:4A:3E:F0:06:FE:E6:35:44:BB:96:F4
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       374E66EE12901547FAB03D535A22FCCF9F7E8BDC
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235312e302f32342d3234203d3e2037373234.roa
Signing time:             Sat 22 Oct 2022 04:34:01 +0000
ROA not before:           Sat 22 Oct 2022 04:29:01 +0000
ROA not after:            Sat 21 Oct 2023 04:34:01 +0000
asID:                     7724
IP address blocks:        83.171.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4e:66:ee:12:90:15:47:fa:b0:3d:53:5a:22:fc:cf:9f:7e:8b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:01 2022 GMT
            Not After : Oct 21 04:34:01 2023 GMT
        Subject: CN=85CC8FF9972DBB68854A3EF006FEE63544BB96F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:fc:48:d7:71:57:bb:ca:be:22:46:7b:be:
                    0c:59:f2:de:0a:dd:7a:f2:1d:de:1f:7f:6a:a4:a7:
                    ce:b9:f1:77:d9:2d:56:ca:6a:59:90:1e:2e:3c:0b:
                    31:d4:ff:ed:f7:7a:69:f4:45:dd:63:b0:41:c3:9e:
                    ee:0a:57:94:52:f1:f7:67:e9:53:7d:1a:ca:38:7e:
                    40:93:50:79:4d:a7:fe:a5:57:94:eb:cd:b0:3f:ae:
                    a2:5c:c7:14:d7:e3:46:98:c7:16:8d:bf:31:93:80:
                    41:04:2a:ae:6c:ae:7c:7e:26:bf:f7:13:47:8a:f3:
                    dd:55:6e:04:fd:0e:e9:29:13:05:0e:de:66:f2:6d:
                    d4:f1:7a:50:29:de:6d:95:89:2a:d7:91:13:0f:1a:
                    5c:fb:e4:b0:66:d8:8e:1d:f0:a4:2e:2b:a0:d2:f1:
                    e3:cc:43:28:b6:2b:5c:6c:f5:33:d8:37:e8:d4:6a:
                    4e:14:80:85:1a:41:b3:75:92:2d:e3:12:db:be:b1:
                    77:89:52:13:cf:31:fa:67:f6:ae:28:65:75:8b:d7:
                    04:58:17:13:fe:9e:54:ac:d1:2b:c2:47:70:6e:8b:
                    39:61:63:49:78:94:98:f8:47:ea:32:3b:65:7d:ae:
                    6d:2a:5b:38:e3:0a:22:95:d1:81:b7:09:f7:70:8a:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CC:8F:F9:97:2D:BB:68:85:4A:3E:F0:06:FE:E6:35:44:BB:96:F4
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235312e302f32342d3234203d3e2037373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:7e:07:48:a6:2d:63:3d:b8:16:da:25:3e:34:8b:3f:4c:61:
         86:7d:14:39:5d:14:a5:2a:7a:3f:8f:70:d2:e9:1a:fb:58:04:
         1d:fa:6e:82:ff:06:b2:3a:05:e5:c7:43:76:b3:ae:73:8f:25:
         d1:46:cf:a1:3b:a5:f5:d1:a5:29:e7:35:44:d7:6f:4d:37:b6:
         46:a2:04:df:4e:f0:72:0f:fd:83:4f:73:b3:ed:20:97:03:51:
         47:2d:33:fa:0f:e9:b5:2d:6f:60:e5:a4:ad:8b:ea:21:0e:9c:
         51:42:60:45:58:88:fd:4d:0d:66:69:d9:a0:8c:fc:c6:78:a3:
         a1:7f:12:ff:6c:c6:5b:f0:38:f3:b8:87:70:46:b7:44:23:4a:
         f6:dc:3a:ea:63:2b:1a:18:c2:f8:5f:28:d5:9d:19:56:01:c9:
         20:4b:87:ea:aa:14:3e:25:aa:bd:d4:6d:2d:7f:4e:61:f4:b7:
         cb:b0:e4:5f:f0:11:56:2c:18:c9:f6:73:b7:7c:32:f9:65:e9:
         a8:71:2c:90:0f:9d:d0:b8:6b:95:33:5c:07:64:e5:65:54:df:
         7d:3f:ab:44:48:e6:30:14:66:fa:c6:12:95:31:0c:90:82:3e:
         9f:1d:fd:78:7d:80:bb:8d:a6:0c:47:b5:48:6f:cf:bd:a4:c5:
         31:9f:21:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org