Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135342e302f32342d3234203d3e203631333137.roa
File:                     34352e31302e3135342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          2K/m9KyaNFjiI+qjFm8NGk0ZIXQKzg7drRjqI4m8qfI=
Subject key identifier:   21:E8:64:7B:CD:21:11:15:55:6C:57:C7:04:F5:CF:84:90:41:35:13
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       2FD33331B8CD547895B787ED1BBEC7A5F01FBB24
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135342e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:41:04 +0000
ROA not before:           Tue 28 Jun 2022 04:36:04 +0000
ROA not after:            Tue 27 Jun 2023 04:41:04 +0000
asID:                     61317
IP address blocks:        45.10.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d3:33:31:b8:cd:54:78:95:b7:87:ed:1b:be:c7:a5:f0:1f:bb:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jun 28 04:36:04 2022 GMT
            Not After : Jun 27 04:41:04 2023 GMT
        Subject: CN=21E8647BCD211115556C57C704F5CF8490413513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7a:a1:e3:3b:8b:b8:64:fa:5a:db:6b:aa:8d:
                    51:e7:ef:13:8a:e5:0b:94:de:be:18:9c:f2:66:60:
                    29:70:af:b1:99:5b:9d:b5:a4:16:58:2e:10:03:47:
                    72:f5:47:18:ea:9f:d1:62:ad:26:4b:e3:ff:1c:e4:
                    9f:c9:5a:76:bb:81:5f:18:da:32:a4:1e:70:ef:09:
                    18:62:e8:bd:ba:89:62:b5:0d:86:61:34:76:b2:77:
                    a5:bb:ab:47:6d:9c:62:e5:6e:02:26:25:31:ea:c7:
                    b6:5e:ea:f9:a8:5f:94:56:a1:ce:eb:af:46:d9:45:
                    dc:88:ae:23:45:b9:f4:a0:5d:9d:6e:42:8f:b5:bd:
                    db:4d:f8:dc:d4:93:46:39:53:fd:56:1a:c6:e6:52:
                    5d:fb:73:40:f0:5e:7d:40:bd:d2:3a:62:9f:7c:2f:
                    da:1a:49:dd:fc:6d:d0:df:8d:bc:bb:26:69:a1:23:
                    03:83:0a:cc:1d:6f:33:40:5a:f8:49:a2:e0:b8:32:
                    e2:43:61:b0:76:fb:fa:e2:86:e3:38:c1:a8:41:42:
                    d3:7b:5f:5e:a5:8e:43:9a:74:bb:55:de:35:5d:7e:
                    d5:dd:41:1b:39:02:79:c9:0b:84:56:5d:0c:0b:75:
                    52:65:44:2b:ac:b0:2b:94:d2:d2:f9:b0:ae:02:2d:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E8:64:7B:CD:21:11:15:55:6C:57:C7:04:F5:CF:84:90:41:35:13
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:c7:ff:61:2d:dc:0a:dc:05:39:b7:f0:44:9c:28:07:94:28:
         70:60:6c:fa:91:9f:c9:18:5d:a7:79:37:47:6e:e7:dc:b5:d4:
         67:e8:10:bf:42:b6:bc:d5:49:89:1f:f5:49:70:f8:28:89:ff:
         5a:0d:d9:43:ee:10:55:98:d9:e7:3f:53:f9:98:d7:e7:a1:a6:
         62:94:05:ac:61:bb:28:fd:eb:ff:b5:36:1a:7c:ed:66:3d:2d:
         ab:62:3f:5a:5e:d1:bf:c3:af:e3:20:a2:ff:42:b3:3d:ee:96:
         64:2c:ae:f3:bb:f0:87:65:43:43:14:03:90:d7:23:a5:92:da:
         61:9e:f7:4c:9e:ed:f0:b9:1e:af:f9:c1:a6:0c:df:71:b3:39:
         01:48:4f:15:9a:4c:28:83:02:c1:40:51:ea:c3:01:d9:f6:f6:
         a6:3b:cc:fa:ac:57:b1:dc:06:81:08:74:87:36:9a:f9:a8:c4:
         29:66:1a:c6:97:1b:8a:ba:41:48:c0:8c:1a:03:26:f5:85:05:
         e9:f5:e1:9c:13:2e:db:3e:53:cb:e4:5b:6c:28:7a:a6:26:26:
         5d:56:78:1e:10:30:3f:4f:90:7d:f2:64:b7:b7:16:48:23:44:
         1c:dc:c9:b5:9a:71:e2:1e:cc:af:2b:24:ac:a0:ef:2e:74:55:
         b6:8d:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net