Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32322e302f32342d3234203d3e2037373234.roa
File:                     34352e3134312e32322e302f32342d3234203d3e2037373234.roa (raw, json)
Hash identifier:          Wcn6DxUofYngn8l5vXAzQXWa26T+VBck8Jz2KUlYH/A=
Subject key identifier:   27:79:0D:8C:01:05:C7:BD:CF:12:B5:F9:48:00:50:1D:82:03:CF:6D
Certificate issuer:       /CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
Certificate serial:       17C424943D4D2448294C442E51601E23197CFCE4
Authority key identifier: 54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32322e302f32342d3234203d3e2037373234.roa
Signing time:             Fri 27 Nov 2020 15:10:09 +0000
ROA not before:           Fri 27 Nov 2020 15:05:09 +0000
ROA not after:            Fri 26 Nov 2021 15:10:09 +0000
asID:                     7724
IP address blocks:        45.141.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c4:24:94:3d:4d:24:48:29:4c:44:2e:51:60:1e:23:19:7c:fc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
        Validity
            Not Before: Nov 27 15:05:09 2020 GMT
            Not After : Nov 26 15:10:09 2021 GMT
        Subject: CN=3082010A0282010100CB0AEDF5411714034360FF905413E59E8D2A4B43B9E5E5DA2CB051269C1AB04DC57BD4939D1C88EDE7B6F7DF8E3F28C5F1166FEBC76605AEA7487BC3F5EDFF1F8A6F9D11AD78628C6A6C35475F13D719F0FAFF55DAEAE9BB8D3452B5371A823F520047AF44A15844AA9AC47129EA46E463765B9DE8F8395728C5ACB335ADE84567B9D68ACADB46BBF2560CE02CC454054505D3A115680B8663D0CA73B67F4C1CECB1E6AFBF66FE01F3BAE9B7BE13C99DB35E0851AEC8CB51F73D4D0410733E253BA1A14E85ACD15023EE7F5C241EF758D519356389B56DAD34DFAF1613A2AF07C90037D64E5176DCDBC8F58201379254373F3851F8569CB2F3CBA37BCB946A890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:ed:f5:41:17:14:03:43:60:ff:90:54:13:
                    e5:9e:8d:2a:4b:43:b9:e5:e5:da:2c:b0:51:26:9c:
                    1a:b0:4d:c5:7b:d4:93:9d:1c:88:ed:e7:b6:f7:df:
                    8e:3f:28:c5:f1:16:6f:eb:c7:66:05:ae:a7:48:7b:
                    c3:f5:ed:ff:1f:8a:6f:9d:11:ad:78:62:8c:6a:6c:
                    35:47:5f:13:d7:19:f0:fa:ff:55:da:ea:e9:bb:8d:
                    34:52:b5:37:1a:82:3f:52:00:47:af:44:a1:58:44:
                    aa:9a:c4:71:29:ea:46:e4:63:76:5b:9d:e8:f8:39:
                    57:28:c5:ac:b3:35:ad:e8:45:67:b9:d6:8a:ca:db:
                    46:bb:f2:56:0c:e0:2c:c4:54:05:45:05:d3:a1:15:
                    68:0b:86:63:d0:ca:73:b6:7f:4c:1c:ec:b1:e6:af:
                    bf:66:fe:01:f3:ba:e9:b7:be:13:c9:9d:b3:5e:08:
                    51:ae:c8:cb:51:f7:3d:4d:04:10:73:3e:25:3b:a1:
                    a1:4e:85:ac:d1:50:23:ee:7f:5c:24:1e:f7:58:d5:
                    19:35:63:89:b5:6d:ad:34:df:af:16:13:a2:af:07:
                    c9:00:37:d6:4e:51:76:dc:db:c8:f5:82:01:37:92:
                    54:37:3f:38:51:f8:56:9c:b2:f3:cb:a3:7b:cb:94:
                    6a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:79:0D:8C:01:05:C7:BD:CF:12:B5:F9:48:00:50:1D:82:03:CF:6D
            X509v3 Authority Key Identifier:
                keyid:54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/54ED4605385D5EDB0DD5C3EA049C52A5159B7CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32322e302f32342d3234203d3e2037373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:cb:47:74:42:78:f4:dc:a6:4b:90:8b:e4:8e:00:5f:95:a2:
         5a:1b:a3:40:df:75:12:0a:e7:c2:d2:1f:a6:75:8d:ef:66:1c:
         35:9a:23:a6:df:ca:94:f4:ae:a7:37:f6:ce:31:9d:c7:43:6b:
         5e:63:ea:3d:87:4b:21:fe:b0:d7:06:2c:90:34:50:d5:a5:db:
         59:dc:80:1b:08:a8:19:d6:41:90:5a:0f:84:af:32:df:1a:b0:
         31:f1:61:c7:0f:6d:9d:b0:a2:f5:b5:57:17:de:f2:72:99:b8:
         54:4d:f8:02:79:32:3f:9e:aa:df:ec:ee:f2:3f:3d:9e:4a:f0:
         0e:d9:b6:4f:81:3e:01:98:61:fb:1e:53:48:78:69:e9:de:a2:
         b0:eb:fe:7f:c0:eb:dc:2d:b7:7a:0e:51:8d:ee:2f:c1:92:bc:
         1e:12:d3:82:c3:b9:e0:44:a2:f4:ce:67:bd:a9:b2:59:66:dc:
         6b:94:52:53:90:a6:1c:0d:43:6d:fc:5e:1a:e0:34:d4:4f:48:
         8a:1b:8b:ac:83:85:8c:b9:74:eb:7c:cc:87:37:10:21:f4:e4:
         a0:bc:b7:df:d0:d4:2d:83:e2:1b:09:29:50:84:32:85:ca:05:
         72:d9:28:bf:4d:2d:fd:2f:e3:12:5b:c6:8a:a6:8e:72:c2:b1:
         75:6e:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----