Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/322e35392e3135372e302f32342d3234203d3e203631333137.roa
File:                     322e35392e3135372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          CJEcdf6mieTGrS5e0icAVcdTQjxZQzYRu6w0kBekcRc=
Subject key identifier:   D6:52:02:46:E4:CA:82:FA:60:75:74:E6:71:17:FE:2C:29:2A:93:65
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       1E7A1BB4A30EA089AC82C949B515E5F0D68473D3
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/322e35392e3135372e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:40 +0000
ROA not before:           Sat 22 Oct 2022 04:28:40 +0000
ROA not after:            Sat 21 Oct 2023 04:33:40 +0000
asID:                     61317
IP address blocks:        2.59.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7a:1b:b4:a3:0e:a0:89:ac:82:c9:49:b5:15:e5:f0:d6:84:73:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Oct 22 04:28:40 2022 GMT
            Not After : Oct 21 04:33:40 2023 GMT
        Subject: CN=D6520246E4CA82FA607574E67117FE2C292A9365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:9e:97:04:47:90:d2:30:37:08:2b:ad:3c:
                    71:91:2c:86:d6:f0:b7:81:ed:79:75:d2:52:03:fc:
                    3a:9c:02:ac:14:ec:c3:d8:27:45:05:c2:f4:7c:f9:
                    ef:44:59:25:4d:a9:19:0e:60:54:58:8d:d7:0f:95:
                    67:94:9a:c5:d0:2b:11:df:11:38:84:7b:03:73:8f:
                    08:71:cc:27:dd:13:fe:6f:93:17:ac:3d:5e:47:ad:
                    70:e1:21:38:88:5e:56:0e:b0:e2:00:2c:eb:44:c9:
                    cd:31:cc:10:b7:85:a1:97:5b:b8:21:dc:3b:66:5b:
                    37:9c:2a:b1:9e:dd:56:41:1e:2b:37:a1:ba:34:48:
                    e4:98:74:dc:3d:6c:d4:50:66:91:44:cb:da:18:0e:
                    3a:2f:ad:a2:64:76:18:bf:ca:be:68:d1:f7:46:20:
                    be:34:8e:72:74:f4:43:07:b3:1e:17:d8:54:43:55:
                    a0:63:b0:a9:ce:15:1c:7a:f0:72:df:ae:d0:e5:47:
                    37:6d:44:4e:f9:25:c5:39:6f:d5:52:15:21:23:6c:
                    7e:c8:d7:53:cd:c3:95:7d:88:61:21:b8:6f:2a:83:
                    99:b6:f4:a7:3d:fa:f9:83:c8:4d:7c:2a:d3:a0:3b:
                    15:19:50:dd:08:e3:58:33:5d:64:3f:99:21:7a:06:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:52:02:46:E4:CA:82:FA:60:75:74:E6:71:17:FE:2C:29:2A:93:65
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/322e35392e3135372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:be:43:05:dc:4c:09:ab:6d:65:f6:c6:00:e0:1b:e4:ba:ac:
         67:d3:0b:0d:e4:3d:97:a8:92:52:43:e5:33:16:8a:a8:45:48:
         25:30:98:0e:a5:d3:02:b1:84:14:d2:9b:e0:7e:64:e9:2e:9a:
         ae:a5:4e:32:fc:94:6f:7c:0b:e8:9f:d9:e2:16:49:70:b4:98:
         ca:a0:98:6c:86:04:ff:a7:42:19:b8:83:d3:e0:07:2c:0d:22:
         a0:0c:a0:6b:cc:35:c5:b4:d2:5c:55:a5:52:cd:78:6b:a7:dd:
         8e:95:6b:30:b4:8a:bf:91:12:cc:72:c0:d9:e3:9c:98:69:cb:
         4c:a5:c2:36:63:53:d2:18:67:e0:63:14:23:fe:b5:60:5b:06:
         c2:c9:af:1c:0e:82:34:56:42:37:3b:cb:83:b3:19:e1:52:29:
         28:25:d1:d9:0e:94:69:e3:8e:03:0a:56:c9:4b:37:4e:2e:f0:
         9d:7a:cc:52:41:e7:dd:f6:73:6b:aa:1a:46:e5:db:df:a5:9b:
         d4:f6:99:ac:62:38:6a:86:cf:4f:53:67:53:ed:50:e4:13:49:
         e7:0f:17:31:04:bb:9d:27:d7:10:ad:43:68:cc:cc:5a:d1:f8:
         51:d0:39:c3:96:3a:70:05:7a:0b:66:c5:87:b9:c4:7c:29:04:
         56:d0:96:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net