Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32332d3234203d3e203631333137.roa
File:                     352e3138322e33342e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          RByIgKSgL/+08pI3+a575/XFggImOstibKOE9d4QPdU=
Subject key identifier:   31:BD:A2:E8:76:5C:45:C1:B1:D6:23:7D:C5:75:4F:50:D9:4B:4F:9B
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       0704C6F6DDA62700AABB2C2AFBAC8EBF4982B8CB
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:55 +0000
ROA not before:           Sat 22 Oct 2022 04:28:55 +0000
ROA not after:            Sat 21 Oct 2023 04:33:55 +0000
asID:                     61317
IP address blocks:        5.182.34.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:04:c6:f6:dd:a6:27:00:aa:bb:2c:2a:fb:ac:8e:bf:49:82:b8:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:55 2022 GMT
            Not After : Oct 21 04:33:55 2023 GMT
        Subject: CN=31BDA2E8765C45C1B1D6237DC5754F50D94B4F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:f3:28:81:8a:2d:24:5f:86:68:df:f0:91:
                    53:08:06:bd:64:b2:09:5c:fb:e5:1f:2f:e8:a1:b3:
                    71:af:84:20:a4:a6:c5:f3:f3:3a:e3:71:eb:64:e1:
                    36:ed:94:c4:7b:e0:3e:c2:96:5a:8b:39:1f:14:cf:
                    39:71:5b:9f:de:e3:8d:20:62:96:ed:b3:c4:28:9e:
                    b4:5d:14:b1:64:24:eb:8a:88:45:0f:c3:53:f8:93:
                    db:79:49:e4:6f:80:32:87:af:72:94:d0:a7:f5:0c:
                    a3:98:c4:06:ba:ee:54:c4:72:f9:32:4f:2b:1a:0c:
                    d6:82:8e:d6:e0:5c:0e:18:12:57:13:3f:6e:a2:24:
                    3f:d8:ad:55:6e:ed:df:c5:f8:ef:73:cd:b9:39:a9:
                    a5:02:6a:aa:81:8a:e0:46:20:f9:1d:1e:4b:a1:65:
                    c3:f4:4e:06:e3:52:87:ec:17:ae:3a:84:3d:6a:9b:
                    43:3f:e7:be:36:5d:57:93:6a:f3:cd:b7:db:61:2e:
                    05:df:5e:b5:ae:b4:a4:91:fa:69:9c:37:e6:b1:0c:
                    e9:a7:04:35:5f:bc:81:4c:15:00:74:03:ca:81:fd:
                    11:21:05:4c:e5:e8:1f:c1:54:2d:92:24:63:1c:6a:
                    ff:28:c3:ef:ba:66:2a:2b:a7:85:91:3e:06:a5:27:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BD:A2:E8:76:5C:45:C1:B1:D6:23:7D:C5:75:4F:50:D9:4B:4F:9B
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:82:2b:e2:3b:41:e9:6b:9c:5b:c5:71:24:66:bc:43:5f:25:
         9f:4f:51:50:1f:c8:d4:8b:3d:10:a5:6a:5f:22:37:1e:d5:8c:
         aa:a9:51:3d:29:5e:9a:cf:cd:b9:a4:e9:bd:33:65:ca:2d:b3:
         6d:7c:91:ae:ab:e2:f0:03:74:d4:29:7e:5e:95:f5:2e:b0:85:
         f8:f4:00:67:8a:da:96:ab:12:c3:79:70:13:34:d5:4d:00:bd:
         99:51:db:06:bb:af:77:ca:28:18:34:55:be:ca:e1:d1:06:04:
         8b:be:9b:79:10:c4:c2:f7:04:40:5c:86:f4:58:1e:55:74:1f:
         c0:69:9b:5d:5c:d0:53:11:81:2a:bb:de:78:ea:11:9d:64:17:
         d8:fa:96:ca:e0:ff:22:ff:07:65:89:3e:58:db:de:c8:da:fd:
         cd:f1:dc:c8:ca:c6:af:7d:3d:2b:2f:dd:17:79:5c:ed:e5:9a:
         68:2f:bf:c9:99:a3:a2:aa:ce:c5:51:62:bf:3a:54:c6:39:91:
         5d:0c:d4:ef:7d:15:51:8e:54:4a:44:ea:55:02:3a:95:50:75:
         c3:bc:2b:3a:3c:2e:5f:92:3a:6d:ad:d2:96:46:48:17:46:da:
         33:db:ec:b7:67:69:14:19:15:8c:55:d1:a0:48:c3:f1:cb:aa:
         1d:1b:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net