Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa
File:                     39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          b8l3uo9VX0EenjODznzuZE1fxYOl4l3PJp9MK3TKQR0=
Subject key identifier:   E6:76:36:AD:37:B0:2A:DC:B5:14:95:8C:6F:16:94:8C:D0:CE:79:78
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       3F99F78113149FDE3EA7455A27E2378A1245ED2C
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 17 Feb 2023 13:32:08 +0000
ROA not before:           Fri 17 Feb 2023 13:27:08 +0000
ROA not after:            Fri 16 Feb 2024 13:32:08 +0000
asID:                     136787
IP address blocks:        91.229.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:99:f7:81:13:14:9f:de:3e:a7:45:5a:27:e2:37:8a:12:45:ed:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Feb 17 13:27:08 2023 GMT
            Not After : Feb 16 13:32:08 2024 GMT
        Subject: CN=E67636AD37B02ADCB514958C6F16948CD0CE7978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:58:8a:7c:41:7f:a0:04:ed:73:0e:42:99:
                    38:42:0f:0e:5a:57:f0:d5:f8:29:e2:df:2e:7b:35:
                    5b:c6:a7:db:e6:f3:54:c4:0c:53:a2:f6:46:4e:54:
                    b2:03:1d:39:e0:fd:76:2e:68:8e:eb:e7:10:31:70:
                    fe:27:a5:76:99:ae:b5:e8:ed:05:82:fd:74:fa:55:
                    2b:f2:b8:97:ee:40:35:a4:ad:86:d9:69:09:e4:69:
                    de:91:d8:d8:32:51:47:74:47:b5:ef:e8:1f:1d:57:
                    f7:43:41:03:d7:4e:a3:46:ce:96:4e:2c:04:0e:08:
                    2d:43:25:f1:46:0c:7d:7e:ce:6f:e5:1d:31:77:c5:
                    b8:98:15:e7:e5:89:00:57:6d:72:81:1f:3a:55:55:
                    59:d5:83:44:a6:b1:c3:38:ea:73:4f:48:d0:df:ca:
                    84:31:b7:92:d5:07:be:0d:e0:c8:b5:d5:8e:d2:32:
                    df:e4:3c:a7:01:bb:96:c2:21:a4:c0:44:be:e1:20:
                    ad:97:29:6a:e2:25:18:79:6f:de:4d:b8:09:f0:ad:
                    db:62:a3:8e:bf:da:75:3d:b3:df:4d:80:28:6e:3c:
                    2d:74:82:4a:cd:21:68:6f:8f:12:e3:46:63:cc:49:
                    76:19:dd:f0:12:dc:61:20:bb:c5:61:b6:5b:b0:6a:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:76:36:AD:37:B0:2A:DC:B5:14:95:8C:6F:16:94:8C:D0:CE:79:78
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:4c:b5:78:97:6b:15:f4:22:75:e1:f3:0c:b5:53:9b:08:b9:
         03:ca:b9:dc:9a:26:84:eb:3d:09:7c:4b:b9:d7:b5:6e:17:4e:
         d1:c4:fb:2a:4a:1e:10:db:bd:1b:9b:38:ae:0c:b1:87:29:4c:
         37:43:ce:4e:14:3e:42:33:86:17:d5:8b:ae:49:d0:06:27:61:
         ca:00:64:cd:b4:cb:78:9f:1c:91:59:73:eb:b4:75:ad:1d:3b:
         0c:f8:9f:e6:51:f8:8a:47:bf:6d:f1:25:01:94:57:17:c3:d1:
         ae:f9:f2:6a:a6:94:30:9b:30:08:1d:da:e9:9d:01:13:a1:73:
         5e:ba:d1:bd:87:8d:82:c0:b2:1a:ab:3d:3c:89:9e:60:f2:68:
         81:dc:ed:b7:0a:6e:98:c4:d8:16:2a:06:c9:5c:6f:0f:0f:4b:
         ed:2b:ef:a8:5f:71:a9:7b:10:be:da:56:95:9d:46:a6:7c:1a:
         4d:74:cc:4e:9d:55:1e:0f:83:3e:6a:c9:45:da:28:03:ee:51:
         64:d5:8b:9f:ab:94:1a:66:01:96:f4:52:a9:6c:fe:fc:10:ae:
         62:46:53:98:b7:af:7d:d2:4a:f3:12:de:de:0e:75:0e:9d:d0:
         fe:af:a2:5c:7d:13:8f:9b:70:29:79:c3:c8:16:68:60:13:82:
         3e:ce:23:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net