Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32342d3234203d3e203233343730.roa
File:                     352e3138322e33342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          PA8lm/ccJL5OJytGIoOI9xZlwYICnihDMwIeaCgQvSA=
Subject key identifier:   9D:AC:DB:4A:B3:77:DF:C7:9D:5F:11:6A:F8:14:A4:D2:DB:43:97:D1
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       339751C7274301A66A9A82FAA49C72CECAA79687
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 30 Nov 2021 12:49:05 +0000
ROA not before:           Tue 30 Nov 2021 12:44:05 +0000
ROA not after:            Tue 29 Nov 2022 12:49:05 +0000
asID:                     23470
IP address blocks:        5.182.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:97:51:c7:27:43:01:a6:6a:9a:82:fa:a4:9c:72:ce:ca:a7:96:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Nov 30 12:44:05 2021 GMT
            Not After : Nov 29 12:49:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:e0:ad:76:af:d2:c0:2c:14:6f:c3:0e:49:
                    07:a1:61:a3:23:a9:62:d2:57:4d:ef:6b:55:00:82:
                    be:f5:75:13:a5:41:82:5a:02:6c:99:c4:75:a8:8d:
                    1d:43:d8:04:bb:61:74:49:2b:b9:4c:b6:d8:5b:76:
                    8c:c5:ae:8f:46:0e:cf:60:72:bc:6d:0c:90:9e:14:
                    a1:42:59:7a:b3:b7:c5:7f:6f:dd:a7:32:b6:80:24:
                    b1:88:02:30:f6:2b:54:16:39:7a:84:93:a6:3c:79:
                    7e:cb:a6:c4:70:19:31:07:86:93:df:85:a8:eb:50:
                    09:41:39:f8:9a:fa:c2:9e:6e:07:6c:4c:6b:a8:1d:
                    75:31:09:ea:00:ec:82:65:d0:04:59:3f:3a:53:26:
                    35:b3:95:eb:0d:0f:99:9a:ba:74:51:8b:b4:0d:39:
                    1b:f5:f2:b9:ef:c3:f7:18:e5:2b:e3:fe:37:60:5e:
                    8f:9e:0b:2f:a3:86:9e:c3:ac:8a:3e:68:d9:7d:5c:
                    0f:6f:87:d7:2e:89:6d:21:6e:06:09:8a:2a:68:64:
                    c1:b6:a6:f8:cf:6a:09:c3:25:09:cf:e4:81:1f:98:
                    a5:87:72:cc:0d:b7:a7:ea:22:3c:48:b5:63:58:a5:
                    d5:b3:6c:b1:d7:84:91:50:cf:30:9a:87:44:17:8e:
                    1c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AC:DB:4A:B3:77:DF:C7:9D:5F:11:6A:F8:14:A4:D2:DB:43:97:D1
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:0b:21:9a:f9:bd:2b:95:37:55:97:c7:7a:6b:05:60:7c:2a:
         a4:24:5d:34:a7:f4:97:4a:39:c4:67:a1:05:00:54:d9:40:eb:
         ce:1b:4d:ad:e9:9d:9a:86:ea:65:5a:76:96:88:45:0e:6a:cd:
         3f:50:ce:f3:ea:f4:0e:41:e6:06:bd:2b:a0:ff:95:4d:6e:b3:
         96:94:7b:f2:b9:66:59:4c:7d:f4:5d:3d:e4:5a:1e:0b:0e:3d:
         2d:eb:56:89:4c:97:ab:25:5f:64:90:2f:fd:4d:3c:68:ff:ae:
         e4:23:1d:45:a2:4b:28:32:8d:64:8e:db:f1:b7:2d:fe:9b:ec:
         c2:e6:05:99:ca:0e:53:e3:1d:e4:08:55:9b:49:82:54:bf:de:
         b1:b6:06:8d:d6:a1:34:0b:8b:1e:d5:ef:95:99:9d:a1:12:04:
         c5:b0:55:c0:4c:ab:5c:28:08:34:32:68:09:1d:92:52:fc:1e:
         ad:80:df:83:d2:a2:aa:4d:7e:28:77:c5:e5:fa:02:35:08:61:
         b6:5f:21:db:5c:85:e6:7d:92:91:b3:f0:0b:fd:c8:9d:b8:3b:
         98:d3:9d:7f:32:aa:e9:2f:2d:53:ef:06:ee:fd:20:b5:c3:7c:
         29:d8:ca:21:9a:57:01:9a:a7:f3:5f:6f:42:a0:c3:da:4c:e1:
         9c:a9:01:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----