Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203136353039.roa
File:                     34352e38352e3235302e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          1UHk3Q/jhm/6REAW6noyz1OcwCjGm/bfGhsGuRu67i0=
Subject key identifier:   0A:68:8B:F8:71:98:98:59:A7:2D:B3:C8:C8:FB:23:0A:F8:BC:56:91
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       09308EBB0098E2F4642233FB56E94C47C7C6AEFE
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 28 Jun 2022 04:41:22 +0000
ROA not before:           Tue 28 Jun 2022 04:36:22 +0000
ROA not after:            Tue 27 Jun 2023 04:41:22 +0000
asID:                     16509
IP address blocks:        45.85.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:30:8e:bb:00:98:e2:f4:64:22:33:fb:56:e9:4c:47:c7:c6:ae:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Jun 28 04:36:22 2022 GMT
            Not After : Jun 27 04:41:22 2023 GMT
        Subject: CN=0A688BF871989859A72DB3C8C8FB230AF8BC5691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:d3:11:25:af:14:b9:4a:9c:8b:05:de:2e:
                    18:04:cc:30:72:27:b4:78:1f:66:5e:78:2f:a9:81:
                    fa:fa:0f:85:0e:9c:53:31:59:66:78:a5:1a:9f:1c:
                    ba:94:ee:e6:2b:7a:15:bb:48:05:5b:fe:1c:d1:9e:
                    09:84:e6:cc:4d:44:82:4b:d7:cf:2f:9f:e6:72:e3:
                    27:86:14:fb:9b:ac:17:4d:bd:e0:f8:1a:8e:ba:bb:
                    c3:fd:19:af:01:64:56:56:1b:b0:4f:d1:15:5b:8c:
                    1f:18:e9:24:5d:8a:3e:71:b9:3e:f0:98:ad:7f:58:
                    47:8e:7b:af:f5:1d:80:e5:a2:0b:f1:d9:35:a5:92:
                    03:42:f7:65:d1:79:77:95:41:3a:0a:73:e4:c7:02:
                    95:28:5a:c6:6b:e7:8f:95:e5:7d:b3:d9:3a:6f:b3:
                    33:a1:39:90:75:38:3e:e2:85:cb:b4:6e:ab:29:6b:
                    a2:a7:0e:bd:06:e4:d6:e4:ee:86:10:5d:36:8f:ac:
                    9e:c3:b2:41:ef:6a:d2:fd:fc:39:1a:c8:83:0c:1e:
                    2f:75:c5:37:73:e5:2b:2b:df:53:b9:d3:32:db:7a:
                    f5:21:47:87:0e:b8:fa:0d:60:8b:d9:8c:f4:cc:c5:
                    19:ed:54:59:ad:1c:dd:7e:11:9b:aa:5a:e1:94:b2:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:68:8B:F8:71:98:98:59:A7:2D:B3:C8:C8:FB:23:0A:F8:BC:56:91
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:62:4a:33:09:09:be:b3:d0:8c:e9:8f:5d:52:9c:9f:51:a9:
         c4:3c:1d:b9:66:ce:bd:5f:cd:fa:f5:56:03:63:ca:14:a6:59:
         bc:52:0f:7d:e4:10:20:17:8b:97:94:a4:20:38:69:9c:cb:bf:
         45:3b:f9:0e:c3:86:3a:b8:80:11:dd:2d:74:4f:6b:c8:ab:11:
         ea:8d:fc:7a:6f:8c:e3:d1:19:5d:1a:7e:f7:84:65:5d:05:62:
         50:09:65:f5:73:cf:00:f7:ee:84:06:a7:b9:5b:78:71:a5:0e:
         61:20:a3:9f:6f:c4:21:ca:21:ce:60:6b:02:62:e4:1c:5b:21:
         e3:a7:d2:22:63:50:55:2d:1a:79:95:68:78:5d:31:69:8a:51:
         ff:29:ed:e3:06:f1:d0:39:f7:21:af:2a:e3:3e:93:1e:59:f1:
         3b:e0:c6:b9:18:98:85:96:08:b7:34:61:79:e2:9b:5b:1d:1e:
         a6:46:4e:12:7d:0e:55:98:09:9f:c3:a9:44:9f:b7:ea:c0:f4:
         92:8d:57:29:e6:12:b9:09:7e:9c:a3:6c:d1:1d:7c:c0:a8:02:
         1f:80:1f:75:9e:8e:c2:10:0c:aa:6c:60:d8:c8:67:4c:52:f2:
         d4:0c:20:52:00:51:75:16:25:94:2f:76:80:f9:d8:47:cd:4f:
         ac:11:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net