Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32342d3234203d3e203330383233.roa
File:                     3134392e36322e33362e302f32342d3234203d3e203330383233.roa (raw, json)
Hash identifier:          cpbrE6MWEjs5qkeGo0u9zqanQHwVdCPxl1TXtxdrTwY=
Subject key identifier:   00:8F:F0:D9:86:1C:66:08:58:2D:CE:10:2E:AE:B9:CA:7E:F6:8B:4F
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       2A7BD1AF3ACA241094A6063F357423F4B95AF231
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32342d3234203d3e203330383233.roa
Signing time:             Sat 22 Oct 2022 04:33:33 +0000
ROA not before:           Sat 22 Oct 2022 04:28:33 +0000
ROA not after:            Sat 21 Oct 2023 04:33:33 +0000
asID:                     30823
IP address blocks:        149.62.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7b:d1:af:3a:ca:24:10:94:a6:06:3f:35:74:23:f4:b9:5a:f2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:33 2022 GMT
            Not After : Oct 21 04:33:33 2023 GMT
        Subject: CN=008FF0D9861C6608582DCE102EAEB9CA7EF68B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7a:a4:e6:e7:b1:64:8d:da:24:72:be:b3:65:
                    f4:a3:f8:2b:cf:59:ac:1c:4c:e7:fd:44:df:ac:3d:
                    99:4c:f8:ed:fa:70:5d:3d:91:f2:bd:a4:4c:48:99:
                    53:af:35:77:d2:0a:a8:ac:8f:7c:c9:68:1e:e3:fa:
                    41:3e:7b:47:90:01:c3:e2:a7:a0:8c:9a:dc:70:85:
                    75:9a:ad:72:7c:d5:8c:e7:04:1a:59:e9:f4:c7:e0:
                    b1:12:e3:52:dc:64:fb:81:c6:cb:7c:fd:51:bf:e5:
                    d2:5a:3d:87:4b:d4:7d:a2:62:25:fe:47:19:d1:8d:
                    38:a7:b3:41:aa:da:4f:4b:d0:35:62:77:a5:fc:0e:
                    b5:b6:d0:46:72:8d:12:72:f1:b5:55:84:d0:da:26:
                    9b:d7:5c:09:61:eb:43:14:3d:e3:03:5f:f0:03:e4:
                    a6:75:01:27:f8:f3:60:c6:19:f3:c7:71:97:ca:5f:
                    d1:25:c3:6a:b6:c7:97:99:73:5b:7a:39:fc:41:74:
                    5d:db:db:b8:03:d4:8e:13:80:9d:e6:56:93:69:81:
                    60:0f:21:1f:29:92:91:8c:eb:b6:01:18:67:ff:43:
                    1e:92:4a:a7:8d:d4:29:99:26:a4:e2:7b:a2:f2:db:
                    07:b1:0b:45:2d:c8:79:cb:1f:e4:bd:e7:5e:de:d3:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8F:F0:D9:86:1C:66:08:58:2D:CE:10:2E:AE:B9:CA:7E:F6:8B:4F
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32342d3234203d3e203330383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:22:20:f4:2b:fe:9e:9b:c0:90:58:ca:27:ce:f7:78:0c:9f:
         ac:c9:ec:90:f5:7e:ae:f7:7b:32:91:3d:57:ef:01:ad:e6:48:
         5d:66:c5:dd:83:9c:65:3a:f7:7c:af:91:13:7e:3c:be:c0:7f:
         ff:d9:7f:3e:c8:e0:11:a7:bd:3a:0c:4a:4d:aa:85:d2:86:96:
         c7:82:55:63:f6:6e:24:2e:a5:b7:f6:16:56:c2:40:c5:1a:70:
         2e:c6:22:ec:31:6e:8e:42:39:71:ca:4d:1d:0b:c7:c7:e4:a8:
         a6:20:a1:7b:e4:ce:f6:e8:b0:b2:55:f4:b9:e2:76:01:88:f1:
         26:3c:6a:dd:cb:32:0a:2f:cf:d9:df:5f:99:06:3e:4a:31:ee:
         4b:9a:2a:b4:08:73:7d:51:6d:81:cc:19:4e:23:30:16:65:c8:
         bd:c1:2d:63:33:42:74:99:12:d7:52:76:fb:80:fd:85:42:ff:
         e6:54:bf:2c:0f:72:d3:f4:60:a8:1f:78:6a:0e:29:e2:12:78:
         e8:a2:85:26:3d:49:4d:86:53:da:40:96:a3:43:6a:b2:2e:38:
         74:a5:f6:5d:ef:48:cb:2d:96:c8:ab:b1:93:a3:6a:9e:25:2b:
         e9:d2:e8:51:59:db:13:71:f7:84:76:63:69:03:0f:c4:5d:32:
         ce:30:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net