Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/176/34352e3134382e3139342e302f32342d3234203d3e20313938303930.roa
File:                     34352e3134382e3139342e302f32342d3234203d3e20313938303930.roa (raw, json)
Hash identifier:          t5wWt8Ars1chlDG78/HyeAAqL/e3Gw8COP3Qgt/Mei8=
Subject key identifier:   44:B5:AA:A2:28:35:36:91:FB:A0:23:30:60:DB:52:F7:C5:70:FF:EB
Certificate issuer:       /CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
Certificate serial:       1BC03EED75D7591EBEF4CAD3EFA659168A8583C4
Authority key identifier: E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e3134382e3139342e302f32342d3234203d3e20313938303930.roa
Signing time:             Sat 22 Oct 2022 04:34:38 +0000
ROA not before:           Sat 22 Oct 2022 04:29:38 +0000
ROA not after:            Sat 21 Oct 2023 04:34:38 +0000
asID:                     198090
IP address blocks:        45.148.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c0:3e:ed:75:d7:59:1e:be:f4:ca:d3:ef:a6:59:16:8a:85:83:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
        Validity
            Not Before: Oct 22 04:29:38 2022 GMT
            Not After : Oct 21 04:34:38 2023 GMT
        Subject: CN=44B5AAA228353691FBA0233060DB52F7C570FFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:c1:8b:02:be:a4:2a:04:63:30:9c:dd:90:
                    ad:1e:37:bc:c8:d9:72:3f:f8:bf:76:49:ad:b3:e5:
                    1e:fe:ec:f9:a0:85:95:e5:61:cb:18:91:30:22:f5:
                    7b:72:65:4d:67:ee:f8:0b:89:b3:da:91:50:e9:16:
                    7d:fc:ce:4b:cf:11:4e:61:b1:79:32:0f:f5:ae:1b:
                    46:b8:d8:75:d1:c5:55:07:b9:9a:2e:a5:d5:bc:84:
                    f1:58:93:7d:88:d3:53:bc:6b:18:e3:02:25:17:5a:
                    58:71:5d:6a:4b:17:21:6a:f4:a4:3f:2d:6b:78:65:
                    84:f3:3e:54:63:9a:b3:09:cd:59:6c:1a:bf:6e:55:
                    36:e9:be:6f:cf:bc:39:d1:44:6a:b1:94:05:6b:6d:
                    c6:c8:5e:ea:53:ee:40:5a:72:e8:29:2a:03:38:e2:
                    64:b4:9b:76:50:3c:93:04:5a:cd:43:6c:f3:bd:07:
                    f8:5e:9a:27:3e:73:d5:f6:d7:e4:69:b3:7d:9d:a2:
                    4f:0b:ce:84:00:7d:39:89:0e:9f:15:ff:a6:88:63:
                    6d:dd:58:15:20:45:5f:f6:1a:2b:8b:f7:00:90:66:
                    96:8d:f9:0c:8b:17:5a:86:63:b1:1a:a9:92:98:0f:
                    38:66:d3:b0:0c:5f:4b:21:fc:aa:48:bc:d2:2b:01:
                    c3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B5:AA:A2:28:35:36:91:FB:A0:23:30:60:DB:52:F7:C5:70:FF:EB
            X509v3 Authority Key Identifier:
                keyid:E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e3134382e3139342e302f32342d3234203d3e20313938303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:26:f2:63:e7:ad:7c:78:34:45:78:39:be:fa:41:e5:20:01:
         1f:9c:8d:b1:91:fc:0c:ff:ab:8e:2c:37:f8:b9:b4:ec:09:98:
         09:1b:90:35:3a:2d:e0:43:bf:fe:f8:32:9b:29:ae:bb:f2:8f:
         51:3d:99:4b:d0:3e:fb:3f:3b:c4:65:7d:53:a9:92:81:0f:39:
         9c:44:a3:bf:6f:01:06:b1:3f:5c:bb:f5:ac:d0:47:9c:36:e7:
         fe:31:2d:c7:74:38:9f:5d:ce:1e:9e:ba:5e:74:b3:a8:32:be:
         ff:26:dc:4c:e9:fe:05:62:27:6e:ed:cf:91:c1:dc:21:99:c8:
         2d:6a:89:35:bb:46:ae:c4:5e:69:9c:ee:90:f4:3e:30:49:43:
         9d:81:69:7c:91:6c:82:14:c8:b6:76:17:8d:ec:b3:90:14:c1:
         54:32:0e:0c:0d:e2:46:d8:3c:ad:b4:af:23:7a:f1:43:f2:72:
         60:78:37:78:78:5d:81:44:af:81:73:97:bc:d2:96:87:48:df:
         d9:9c:dd:5d:0a:15:91:04:79:ad:bf:c8:f5:77:3a:95:98:13:
         03:7c:2b:7f:ef:09:bb:85:b2:56:74:92:8e:dc:62:74:1a:08:
         8d:13:f8:47:c3:83:17:56:9c:ad:80:cb:6d:71:be:97:69:a8:
         40:24:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net