Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e39302e3131322e302f32322d3234203d3e20323033303631.roa
File:                     34352e39302e3131322e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          uM2dy8/PSA62Gf+1nJVdlBtSnm9AVKhLK5aX/D2/ONQ=
Subject key identifier:   F0:99:01:06:90:B8:84:32:27:9A:92:11:B9:87:54:AB:9D:FC:49:73
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       355BE0B34B05D4E044CE1CB47DF54A67BEA85CBF
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e39302e3131322e302f32322d3234203d3e20323033303631.roa
Signing time:             Sat 22 Oct 2022 04:33:56 +0000
ROA not before:           Sat 22 Oct 2022 04:28:56 +0000
ROA not after:            Sat 21 Oct 2023 04:33:56 +0000
asID:                     203061
IP address blocks:        45.90.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5b:e0:b3:4b:05:d4:e0:44:ce:1c:b4:7d:f5:4a:67:be:a8:5c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:56 2022 GMT
            Not After : Oct 21 04:33:56 2023 GMT
        Subject: CN=F099010690B88432279A9211B98754AB9DFC4973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:f3:b0:cb:ca:44:99:25:df:73:1b:87:f5:
                    7c:67:2f:ef:fc:84:3c:94:70:b6:03:1c:5f:cd:b7:
                    85:d3:fc:28:7d:49:69:84:da:94:4d:50:9a:45:ea:
                    0c:ed:45:3c:f5:93:3c:d1:87:04:7f:00:c0:0e:1c:
                    13:32:50:2b:b7:86:f1:96:32:bd:7b:3e:fc:19:c5:
                    51:18:d4:b7:d9:b7:c4:fe:27:c6:30:da:3b:48:81:
                    5e:4d:bc:b7:a0:99:c3:0b:ba:de:ee:86:26:43:47:
                    c8:76:e5:91:b5:fd:15:46:6f:15:1a:ee:c4:ad:11:
                    c6:88:c6:f9:2f:98:34:80:28:16:64:f9:e9:99:e6:
                    ee:2a:76:13:87:7b:42:db:8c:ac:4a:eb:5b:f2:99:
                    eb:d3:00:bb:34:91:2e:80:91:5f:21:0e:34:c8:26:
                    ca:05:a3:fe:22:2b:a3:eb:d6:dd:06:56:ee:b8:db:
                    cb:aa:4c:af:21:e7:b1:a6:a4:2a:6e:75:a5:58:ce:
                    44:e4:91:2a:d2:b4:1c:a8:18:a3:b5:e5:e0:06:65:
                    58:a1:74:cd:d0:6f:ef:5c:0f:ce:68:ff:54:6d:61:
                    2a:46:b5:f5:0c:f9:f8:ec:9f:35:57:d1:60:85:f9:
                    5a:5d:b9:b6:39:8c:eb:af:25:f9:9f:9d:a0:9a:00:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:99:01:06:90:B8:84:32:27:9A:92:11:B9:87:54:AB:9D:FC:49:73
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e39302e3131322e302f32322d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:3a:db:d5:b7:96:20:d5:4f:d6:ca:28:a1:22:f0:3e:06:f6:
         01:22:f4:93:e3:17:4e:8b:90:c9:ac:0d:dc:cc:ba:0a:26:59:
         b9:8f:5b:35:c5:c0:c9:5c:35:37:eb:e1:8e:1f:85:f0:22:3f:
         ec:bd:7f:f9:e1:31:1d:64:4f:48:31:1d:3f:59:a5:18:37:de:
         fb:e7:79:cc:fb:10:97:07:a6:f2:38:cd:f0:52:a5:33:c9:44:
         12:ae:8a:44:28:3b:41:d9:af:a1:41:2e:d7:4d:cb:45:21:12:
         0a:59:ec:13:5b:60:7c:e0:5f:a2:6b:7f:82:9d:d0:6c:4a:3e:
         88:b7:85:ac:f2:42:4e:a0:26:fb:3c:13:b8:87:75:42:4c:9d:
         c2:43:5d:a8:3c:56:cd:37:3d:26:00:15:a0:46:43:78:2a:ba:
         7f:2a:d5:ae:82:3f:3f:d2:e1:46:66:8f:a0:25:53:e2:a2:12:
         bf:59:29:a1:3c:36:16:58:48:c6:45:f2:95:c0:51:00:87:03:
         02:1a:86:af:bb:7d:69:2a:0d:0e:e6:46:b9:11:d3:c2:67:83:
         c5:0d:48:b8:45:0f:bd:ef:75:3e:42:58:d3:b8:ae:57:dd:e0:
         05:de:11:b6:f2:07:15:f5:fc:2f:a9:21:25:de:01:ae:21:1f:
         15:ec:65:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net