Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/322e35382e38322e302f32342d3234203d3e20323132373434.roa
File:                     322e35382e38322e302f32342d3234203d3e20323132373434.roa (raw, json)
Hash identifier:          iE17IxAanHiAVz2C3H0dAGnAHYTSPtWDuhrh3SoBSuM=
Subject key identifier:   30:0B:27:55:24:F1:50:F4:B5:6E:46:D9:B7:12:5E:2E:60:7C:03:93
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       62E9FB6FB5D141080E33CA344E2D3D13186333DE
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/322e35382e38322e302f32342d3234203d3e20323132373434.roa
Signing time:             Tue 28 Jun 2022 04:40:19 +0000
ROA not before:           Tue 28 Jun 2022 04:35:19 +0000
ROA not after:            Tue 27 Jun 2023 04:40:19 +0000
asID:                     212744
IP address blocks:        2.58.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e9:fb:6f:b5:d1:41:08:0e:33:ca:34:4e:2d:3d:13:18:63:33:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Jun 28 04:35:19 2022 GMT
            Not After : Jun 27 04:40:19 2023 GMT
        Subject: CN=300B275524F150F4B56E46D9B7125E2E607C0393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:72:09:53:58:97:0b:23:b7:bc:81:af:6a:
                    5c:70:c9:95:ed:78:34:28:b8:50:33:ff:aa:6c:23:
                    ef:55:10:c8:4c:52:20:72:d0:c9:dc:25:5c:01:79:
                    f5:99:3e:40:ba:c3:1f:ba:c3:38:dd:0a:5b:c6:72:
                    ea:11:49:28:72:a9:c3:ac:17:b9:7a:b3:de:c1:f8:
                    05:3d:94:90:b1:39:0c:ad:fc:fd:36:43:7e:ee:b7:
                    c9:aa:da:79:66:41:1e:5a:14:30:a1:f4:38:66:03:
                    af:78:7d:2e:99:9b:74:96:c4:3f:19:93:a6:ae:42:
                    50:63:8c:4e:21:47:35:0f:12:83:60:06:50:cf:16:
                    1a:df:2d:ec:76:98:19:1e:25:00:75:14:00:fd:5c:
                    a5:7e:73:7f:3a:34:8a:16:69:a8:ea:83:4f:19:37:
                    e0:b4:ff:d4:fb:7f:a6:0b:cf:40:ed:91:0a:fc:19:
                    d4:62:08:b0:ff:79:08:8c:64:6e:e8:4f:80:24:28:
                    b7:0e:90:80:0b:14:98:c2:f7:43:56:0a:75:f8:4f:
                    30:d2:66:20:a1:8d:fe:f2:26:fe:bc:1b:3e:de:93:
                    6f:f2:58:5e:aa:ca:64:47:ef:06:c3:5e:08:c6:f8:
                    1e:29:3a:d6:f9:71:e4:40:13:91:f9:a0:d7:c0:11:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0B:27:55:24:F1:50:F4:B5:6E:46:D9:B7:12:5E:2E:60:7C:03:93
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/322e35382e38322e302f32342d3234203d3e20323132373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:e8:96:8d:48:94:6e:a1:e3:02:ce:40:bb:b1:b3:cc:74:23:
         3c:1e:b8:82:e4:7f:49:c6:7a:dd:d5:9e:52:39:b0:98:66:7a:
         66:f1:97:87:8a:3a:ad:7c:f8:e4:8d:f0:2f:4c:85:21:f4:9c:
         82:80:ab:5d:7e:0d:7f:80:45:52:b4:10:93:d0:37:af:62:18:
         e1:80:94:1f:ca:9f:85:0c:08:d9:88:d7:2a:b9:df:41:33:ce:
         2a:14:b5:6c:70:c2:50:73:bd:54:31:27:c4:69:f4:9b:3c:95:
         62:0d:91:03:1e:5f:cc:f6:86:97:04:01:ee:b6:d7:05:64:6f:
         5c:f5:69:09:92:1f:9e:6d:b2:90:2b:65:92:80:fc:80:16:4e:
         3d:8c:93:a0:31:f6:ab:5b:e0:7d:09:e7:39:51:40:a9:d6:9e:
         35:2d:9f:98:9c:bc:1f:6c:2e:04:15:af:3d:b9:1c:5a:0d:d3:
         8b:e4:df:49:21:51:c5:f7:a5:6e:d8:99:99:c6:5f:ec:ec:e2:
         ba:54:3b:2c:72:ab:52:7a:3b:8a:29:88:25:c0:f4:62:02:d6:
         97:60:7e:4d:fc:ac:26:b4:c4:03:4a:73:e2:e0:4a:8a:e5:ac:
         4f:a3:f9:e6:20:93:2c:e0:65:08:31:b4:77:1e:e9:43:98:8d:
         0e:70:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net