Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e20323132303737.roa
File:                     3139342e3134372e35392e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier:          D+kyeR0cOwDGTRjpnWxVL0mup9jKgC846pmPm2flxcQ=
Subject key identifier:   8B:3E:88:69:9B:0A:68:70:B4:53:D8:34:2F:7A:C4:98:51:01:BD:71
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       7FC0828DB61BE12DCA00233530668355B3CD1218
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e20323132303737.roa
Signing time:             Sat 22 Oct 2022 04:33:31 +0000
ROA not before:           Sat 22 Oct 2022 04:28:31 +0000
ROA not after:            Sat 21 Oct 2023 04:33:31 +0000
asID:                     212077
IP address blocks:        194.147.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c0:82:8d:b6:1b:e1:2d:ca:00:23:35:30:66:83:55:b3:cd:12:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:31 2022 GMT
            Not After : Oct 21 04:33:31 2023 GMT
        Subject: CN=8B3E88699B0A6870B453D8342F7AC4985101BD71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:d2:25:09:9a:20:b7:d0:3e:b2:74:57:51:
                    47:68:99:7a:14:1d:d3:07:d5:e1:d9:90:d2:c6:19:
                    6d:c3:4f:59:4a:55:1f:86:53:2e:07:1f:12:42:64:
                    96:8a:a3:16:16:9b:42:e2:be:3f:e6:20:7d:d1:9e:
                    13:a0:31:21:7a:e0:e6:19:27:40:70:cf:ed:c6:e4:
                    3a:95:71:48:bd:b3:f6:44:e5:d3:d3:b2:0c:8d:39:
                    71:ec:37:fc:96:b2:e5:96:33:ab:41:9c:cd:17:81:
                    5c:fd:f8:9e:15:00:b0:4b:6c:10:33:ad:2f:f1:78:
                    78:9c:e0:d0:da:50:8a:c8:93:8f:35:66:2f:23:b2:
                    ac:5d:93:c3:bc:ef:98:e7:0e:10:a1:f4:b6:53:be:
                    3f:bb:c9:4d:4e:90:73:67:69:54:47:71:1e:0e:69:
                    7a:a9:df:f2:09:32:b5:09:2f:e9:4a:7f:fb:4f:9a:
                    0e:44:9e:cf:54:75:3e:7f:cc:d4:27:2f:1a:b2:63:
                    5e:25:76:32:c6:27:d4:04:d7:69:31:6a:36:ad:e9:
                    29:7b:ad:0d:30:1f:a8:ab:66:74:1e:72:ce:8e:84:
                    0f:2e:21:a3:07:13:dc:4f:ed:1c:56:49:77:a3:fe:
                    05:fe:1c:3b:cb:b8:5f:a5:d9:19:c3:53:2f:9d:9d:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3E:88:69:9B:0A:68:70:B4:53:D8:34:2F:7A:C4:98:51:01:BD:71
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e20323132303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f9:fc:bc:89:ce:8a:ac:8f:05:44:6b:57:b3:55:d2:da:9c:
         82:7e:a4:56:d7:c2:1f:3c:c4:b7:4c:54:21:78:1e:cd:3b:88:
         a6:d5:c7:8c:86:12:db:2e:3a:f8:e7:2d:46:f5:b7:bf:2f:3c:
         33:11:b1:82:2a:64:d4:0f:a7:f1:f5:6c:de:42:00:37:85:43:
         ae:cc:a9:b7:81:d8:9c:83:38:2e:b7:7f:95:da:23:e1:e5:84:
         d5:bc:11:8a:65:3f:78:87:2f:20:df:f0:df:26:9b:24:68:91:
         5a:09:29:6c:18:57:fd:ee:9b:9d:85:f7:de:c1:8e:28:29:14:
         c8:a1:02:02:98:72:6a:88:2f:e0:32:0e:c3:4e:b4:bf:e5:b3:
         9e:d0:73:11:48:8b:42:d1:17:83:ef:55:46:14:b0:47:c2:1d:
         3e:d7:16:31:d5:09:44:76:9a:95:8c:fe:9d:c4:49:7d:6d:e7:
         db:6d:aa:25:31:8e:d5:dc:3f:1e:f3:a9:51:4e:c7:40:fa:e9:
         ca:4a:29:d0:a5:d6:83:63:d4:9c:ab:4e:54:6b:07:34:4b:68:
         dc:29:c0:d5:7f:9b:44:d2:43:d6:ee:f0:c4:12:fc:ed:eb:71:
         72:b0:54:b2:cc:27:75:15:ab:91:b3:f9:e3:bb:23:ec:16:81:
         de:61:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net