Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133342e302f32332d3234203d3e203631333137.roa
File:                     34352e382e3133342e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          NQ1M7ATeQiARjteu8uEie4Mi1bnkm5u+rT+BQ1qHmA4=
Subject key identifier:   12:34:9D:1E:EF:DE:0D:9C:A3:E7:BA:D9:8D:A5:77:24:51:DB:55:7C
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       4D6A8A7637E5F93973EF465F860E0DACF6EED388
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133342e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:53 +0000
ROA not before:           Sat 22 Oct 2022 04:28:53 +0000
ROA not after:            Sat 21 Oct 2023 04:33:53 +0000
asID:                     61317
IP address blocks:        45.8.134.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6a:8a:76:37:e5:f9:39:73:ef:46:5f:86:0e:0d:ac:f6:ee:d3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:53 2022 GMT
            Not After : Oct 21 04:33:53 2023 GMT
        Subject: CN=12349D1EEFDE0D9CA3E7BAD98DA5772451DB557C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:77:90:c7:0b:e7:48:ba:82:2f:c7:be:64:
                    80:1c:50:a7:52:dc:96:e4:71:34:1d:8a:4a:e0:be:
                    6b:7b:fc:e0:91:ad:f3:a4:73:06:6e:13:00:7a:a4:
                    a9:73:14:38:03:74:97:1a:50:66:de:97:4a:f6:dd:
                    b7:3c:ae:89:ff:d1:65:30:59:66:62:48:dd:fa:27:
                    59:42:b9:60:e7:5d:88:3d:ee:19:db:3d:58:1b:21:
                    bf:41:5d:bb:bb:10:66:4b:44:97:b3:26:a2:4b:52:
                    9b:e0:b1:d1:92:46:07:a7:74:54:19:66:fc:bd:cf:
                    6a:3a:f1:f0:99:7e:ec:b5:d6:bf:e6:bd:12:78:10:
                    65:0e:bf:8d:6a:4a:91:72:4b:6a:4b:81:d8:c5:30:
                    dd:6b:9e:f3:ec:9e:ab:9d:0f:d0:0b:e8:02:0a:e8:
                    ea:55:a2:3e:0b:e9:b2:8e:bb:61:7e:74:b1:5e:7a:
                    58:24:34:07:d7:5d:f8:a7:61:38:04:42:0b:36:d4:
                    84:90:45:b5:24:4c:c6:a9:cb:1e:ed:17:57:a6:65:
                    92:b3:56:cd:ad:b4:39:d9:99:f1:93:aa:55:02:f6:
                    29:cc:39:23:e4:b0:b4:4a:19:f9:fc:91:02:fc:91:
                    40:9e:3c:16:be:0f:17:6e:30:97:8b:9a:93:33:bc:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:34:9D:1E:EF:DE:0D:9C:A3:E7:BA:D9:8D:A5:77:24:51:DB:55:7C
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133342e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:14:00:be:2f:a5:09:1a:6e:17:84:b1:06:ca:6b:f3:75:4f:
         9f:34:8f:3d:55:e4:00:f1:e4:82:ff:df:33:97:9d:a2:40:10:
         b5:fb:62:5c:87:ed:d2:fd:64:75:26:b1:aa:42:4d:9a:97:17:
         ee:dc:8c:76:f3:7a:01:b6:94:ae:7f:ae:46:6f:ea:87:83:ba:
         f3:55:28:4d:a9:09:06:25:89:26:3d:ab:c6:3b:b3:fa:61:70:
         22:96:bb:14:d6:fc:32:2e:af:54:16:1f:79:e6:32:6b:8a:41:
         c3:00:27:12:d8:fa:fe:db:f6:ce:df:f2:ca:c7:b5:d1:fc:66:
         08:8c:27:48:5c:f6:a3:67:28:3a:90:a2:45:d7:8d:3a:6e:80:
         a1:4f:72:26:df:5c:94:14:c5:3b:4b:77:d5:72:33:d6:e4:bf:
         e2:22:72:98:de:39:cc:fd:4f:5e:d4:cd:b7:7a:22:f2:86:9e:
         dc:75:be:74:78:49:9d:b4:83:4d:29:4a:03:22:02:8c:c1:0f:
         99:26:f3:99:00:b0:60:9a:13:0c:47:01:4c:e6:9b:37:38:03:
         4b:8b:47:de:36:29:27:1e:34:5d:74:3c:c8:ca:e1:47:3d:7c:
         6a:a7:ef:c5:37:f5:de:a9:31:63:97:8b:fc:70:d6:2c:c9:b4:
         4d:95:f8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net