Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3134372e37382e34382e302f32322d3234203d3e20333936333139.roa
File:                     3134372e37382e34382e302f32322d3234203d3e20333936333139.roa (raw, json)
Hash identifier:          aPa+D44scRyLqgVRRRXOLDmHW6EYa8ggBYlYxCagCK0=
Subject key identifier:   07:88:B6:15:A9:C8:01:89:24:25:86:72:CB:E5:76:40:79:CF:AB:CE
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       0E70B9D4FCB4083F087F780C05F5D92B29AC6EAC
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3134372e37382e34382e302f32322d3234203d3e20333936333139.roa
Signing time:             Sat 22 Oct 2022 04:33:57 +0000
ROA not before:           Sat 22 Oct 2022 04:28:57 +0000
ROA not after:            Sat 21 Oct 2023 04:33:57 +0000
asID:                     396319
IP address blocks:        147.78.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:70:b9:d4:fc:b4:08:3f:08:7f:78:0c:05:f5:d9:2b:29:ac:6e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:57 2022 GMT
            Not After : Oct 21 04:33:57 2023 GMT
        Subject: CN=0788B615A9C8018924258672CBE5764079CFABCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:b4:d1:f9:d8:90:68:da:09:5e:45:32:d0:
                    25:4e:61:12:16:c1:c2:67:bc:8e:a3:5d:97:6e:01:
                    41:08:e6:7d:46:90:41:69:a3:54:f1:b8:15:09:00:
                    0b:22:82:b3:51:85:11:ed:d4:d3:d6:14:9c:82:47:
                    40:6a:34:a1:bc:53:9a:18:ea:03:17:1f:dd:8d:1c:
                    a1:08:f8:c0:fa:4d:49:ec:5d:b6:94:f9:ff:af:2d:
                    0e:70:b4:99:85:5e:a6:17:30:0e:1c:ca:91:09:5b:
                    6b:14:d1:56:45:ca:66:65:66:52:ad:1b:d6:d4:89:
                    73:6c:b4:cf:16:ad:96:3b:e1:94:43:31:c0:1f:50:
                    0e:28:37:96:5a:e4:36:da:8b:4b:a1:1e:bf:16:f0:
                    fc:17:b4:87:e4:d4:52:d0:a8:93:8b:e2:8d:96:ef:
                    6c:8a:62:2f:07:ba:3a:4e:01:1f:50:93:7d:d0:3c:
                    4d:f4:4d:35:74:ca:5a:d9:9c:ef:8f:07:d8:3f:ce:
                    34:43:31:80:7f:2a:d0:e7:1b:31:b5:3f:ae:62:05:
                    59:74:af:4b:c9:b9:e9:03:32:ca:39:b0:c8:8f:b3:
                    7a:63:eb:e2:ba:17:5f:ae:a5:f3:9d:5d:a7:99:35:
                    0c:e3:7e:4b:33:ec:97:b8:4d:29:43:02:54:48:3e:
                    86:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:88:B6:15:A9:C8:01:89:24:25:86:72:CB:E5:76:40:79:CF:AB:CE
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3134372e37382e34382e302f32322d3234203d3e20333936333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:f3:62:d0:67:e0:2b:1c:3b:86:88:52:83:08:94:ff:60:ef:
         e7:3e:81:23:12:3b:15:0e:00:fa:c8:6e:b0:df:c0:c6:ba:82:
         6a:69:dc:88:88:82:6e:5b:55:97:5e:cb:93:f4:e2:c9:7f:c8:
         ac:50:19:8f:09:e9:ac:16:bd:ac:33:95:01:46:2b:96:78:b4:
         e2:21:e3:07:d8:af:60:d1:6e:48:ad:ac:19:7a:e5:5f:93:34:
         13:94:df:5c:e4:02:4d:c6:b1:51:90:53:96:68:82:cd:af:bf:
         97:8e:8e:5e:8d:37:6e:d8:a2:66:a8:cb:d3:75:e2:96:d3:54:
         ae:cc:93:d5:52:ab:06:06:34:1f:db:61:e5:79:b4:28:96:13:
         29:3b:bb:af:fc:6b:72:dd:5a:a8:75:f6:d3:aa:e7:76:81:72:
         1c:9d:7d:24:66:2d:29:8d:cf:43:9b:e4:36:95:68:15:00:d8:
         d2:12:79:5f:1e:a6:44:5d:85:e0:f9:4e:03:59:cb:60:7f:fa:
         7a:32:b9:a1:02:ea:8a:98:d9:0c:ab:3e:39:4a:75:e5:45:af:
         8c:a4:14:7d:46:18:d8:80:3e:12:b1:d8:e6:a7:bf:76:6e:eb:
         ef:aa:56:44:34:c3:1f:8c:92:41:a4:9f:ec:f9:46:d9:e9:81:
         0e:6c:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net