Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e31342e39312e302f32342d3234203d3e203534323532.roa
File:                     34352e31342e39312e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier:          lX508G9A1rB3PoG6Dhd3XkRoKpT9H+5kv7FUtLIejqg=
Subject key identifier:   E8:DF:79:11:FF:30:AA:FB:43:49:41:B8:F4:EA:DC:DB:B9:55:75:3C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5783E05B497FAD16D989FED0CAF0CA0320278762
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e31342e39312e302f32342d3234203d3e203534323532.roa
Signing time:             Thu 26 Jan 2023 11:48:40 +0000
ROA not before:           Thu 26 Jan 2023 11:43:40 +0000
ROA not after:            Thu 25 Jan 2024 11:48:40 +0000
asID:                     54252
IP address blocks:        45.14.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:83:e0:5b:49:7f:ad:16:d9:89:fe:d0:ca:f0:ca:03:20:27:87:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 26 11:43:40 2023 GMT
            Not After : Jan 25 11:48:40 2024 GMT
        Subject: CN=E8DF7911FF30AAFB434941B8F4EADCDBB955753C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:17:51:c8:9e:e4:15:3c:be:51:57:bb:21:
                    71:69:0e:af:49:ef:0e:cc:f7:31:7f:3e:b8:c6:fb:
                    87:e4:33:41:69:11:d3:76:6f:ee:11:82:23:35:24:
                    f4:47:2c:a4:a7:09:03:1b:30:fb:27:37:49:90:bb:
                    38:6a:37:cc:af:77:c4:2d:7d:cc:8a:b7:74:97:56:
                    a3:a5:a0:4a:c4:d8:77:fb:60:28:25:97:1f:8b:77:
                    87:27:73:c4:b3:d1:3d:d5:ab:d8:07:b2:6b:5b:6f:
                    48:3d:0e:32:ca:cc:6a:43:b0:5e:f5:ff:e4:11:4c:
                    9b:8a:0b:e3:31:cf:20:6f:a1:07:c1:fd:d1:0f:ab:
                    2b:50:9a:07:a0:b2:60:bf:83:08:28:ea:27:c1:24:
                    58:1c:5a:48:56:58:6e:c6:53:67:76:bc:93:4c:b3:
                    23:86:be:fa:32:1a:9e:d6:ba:17:51:85:fe:6e:06:
                    6d:9f:2f:4f:2a:4f:b0:ae:4e:3d:6f:ba:e6:21:c2:
                    cf:d4:9b:d7:8e:5a:ad:4d:75:7c:c1:f8:02:02:5a:
                    2a:f6:9a:1a:24:79:ed:a9:da:06:7f:31:36:52:4d:
                    a3:35:01:ec:2b:07:68:5f:f9:66:e1:01:f6:39:36:
                    c4:65:d9:51:71:6a:2b:f6:d9:ea:e2:6c:74:00:db:
                    6d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DF:79:11:FF:30:AA:FB:43:49:41:B8:F4:EA:DC:DB:B9:55:75:3C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e31342e39312e302f32342d3234203d3e203534323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:c0:12:60:0a:2f:65:18:9a:9a:77:8e:fa:0d:99:17:af:80:
         01:ba:56:b3:c6:aa:26:ea:c4:b7:82:5f:29:d8:2c:8d:40:6b:
         92:7e:c4:a0:20:5c:ca:48:21:23:7a:49:ff:29:33:64:f5:52:
         44:99:b3:4f:5e:cc:5c:6e:c8:70:db:dd:c5:31:d5:5a:e9:ee:
         d4:5f:b6:c2:be:98:33:3b:37:49:fd:96:aa:b4:3a:49:7a:73:
         d9:4b:45:bd:ff:14:bf:66:1e:2e:ef:6c:06:f7:04:3f:56:c1:
         e2:32:c1:88:c7:a3:06:5b:48:bf:b3:5c:a4:a3:32:52:30:9a:
         79:b0:a9:a9:b2:02:d4:55:51:06:b9:30:58:42:c2:a9:ed:40:
         3d:6c:dc:80:26:bb:1d:fa:71:36:44:56:95:d8:0c:5f:92:94:
         86:7a:ee:7f:c1:9d:53:8b:96:05:d5:7d:e2:ad:c0:0d:fc:f8:
         5d:15:1d:43:5b:6a:1a:5b:1f:cc:37:2e:6e:19:bc:15:4a:8d:
         c4:c9:4c:b3:ea:7d:a5:0c:1c:f3:0d:59:66:ea:76:0f:14:cd:
         6e:9c:8e:b6:70:7b:69:5d:4f:15:cd:4b:01:5b:45:46:6c:bd:
         59:aa:7b:3e:12:6c:01:f1:05:02:ca:f1:6b:a0:6d:fa:65:92:
         ca:f8:2a:46
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUV4PgW0l/rRbZif7QyvDKAyAnh2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAxMjYxMTQzNDBaFw0yNDAxMjUxMTQ4NDBaMDMxMTAvBgNV
BAMTKEU4REY3OTExRkYzMEFBRkI0MzQ5NDFCOEY0RUFEQ0RCQjk1NTc1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbIRdRyJ7kFTy+UVe7IXFpDq9J
7w7M9zF/PrjG+4fkM0FpEdN2b+4RgiM1JPRHLKSnCQMbMPsnN0mQuzhqN8yvd8Qt
fcyKt3SXVqOloErE2Hf7YCgllx+Ld4cnc8Sz0T3Vq9gHsmtbb0g9DjLKzGpDsF71
/+QRTJuKC+MxzyBvoQfB/dEPqytQmgegsmC/gwgo6ifBJFgcWkhWWG7GU2d2vJNM
syOGvvoyGp7WuhdRhf5uBm2fL08qT7CuTj1vuuYhws/Um9eOWq1NdXzB+AICWir2
mhokee2p2gZ/MTZSTaM1AewrB2hf+WbhAfY5NsRl2VFxaiv22eribHQA2219AgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQU6N95Ef8wqvtDSUG49Orc27lVdTwwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zNDM1MmUzMTM0MmUzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNDMy
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0OWzANBgkqhkiG9w0BAQsFAAOCAQEAMcASYAovZRia
mneO+g2ZF6+AAbpWs8aqJurEt4JfKdgsjUBrkn7EoCBcykghI3pJ/ykzZPVSRJmz
T17MXG7IcNvdxTHVWunu1F+2wr6YMzs3Sf2WqrQ6SXpz2UtFvf8Uv2YeLu9sBvcE
P1bB4jLBiMejBltIv7NcpKMyUjCaebCpqbIC1FVRBrkwWELCqe1APWzcgCa7Hfpx
NkRWldgMX5KUhnruf8GdU4uWBdV94q3ADfz4XRUdQ1tqGlsfzDcubhm8FUqNxMlM
s+p9pQwc8w1ZZup2DxTNbpyOtnB7aV1PFc1LAVtFRmy9Wap7PhJsAfEFAsrxa6Bt
+mWSyvgqRg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net