Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/181/352e3235332e3232372e302f32342d3234203d3e20323035363539.roa
File:                     352e3235332e3232372e302f32342d3234203d3e20323035363539.roa (raw, json)
Hash identifier:          8nqLNiM/tW7cllx8Kkz1Z5WELArevf5gU2ap2ckMzGU=
Subject key identifier:   BC:7D:49:35:A8:D8:63:89:4A:EB:13:C1:07:17:32:33:96:2D:57:1B
Certificate issuer:       /CN=da27acfb4f88bc239db8fd8c7b11f21b1cbac465
Certificate serial:       1D5EA2075F14A8AA756022C23FEEFF58E2939B7C
Authority key identifier: DA:27:AC:FB:4F:88:BC:23:9D:B8:FD:8C:7B:11:F2:1B:1C:BA:C4:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ies-0-IvCOduP2MexHyGxy6xGU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/181/352e3235332e3232372e302f32342d3234203d3e20323035363539.roa
Signing time:             Sat 22 Oct 2022 04:33:10 +0000
ROA not before:           Sat 22 Oct 2022 04:28:10 +0000
ROA not after:            Sat 21 Oct 2023 04:33:10 +0000
asID:                     205659
IP address blocks:        5.253.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5e:a2:07:5f:14:a8:aa:75:60:22:c2:3f:ee:ff:58:e2:93:9b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da27acfb4f88bc239db8fd8c7b11f21b1cbac465
        Validity
            Not Before: Oct 22 04:28:10 2022 GMT
            Not After : Oct 21 04:33:10 2023 GMT
        Subject: CN=BC7D4935A8D863894AEB13C107173233962D571B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:23:74:e1:47:c1:3e:ef:b3:67:e4:63:a8:6c:
                    a7:a2:bd:ca:64:55:74:54:dd:0c:a4:87:48:32:d7:
                    cb:aa:23:87:e0:6b:93:eb:d6:37:fb:5a:ff:5f:12:
                    e4:6b:e1:88:18:05:7a:7f:9a:72:28:db:6e:18:f9:
                    04:27:cd:f7:6a:b4:17:2d:ad:99:a7:2f:30:cc:6b:
                    77:b5:b8:08:e6:61:91:25:95:a0:14:7c:c6:08:4f:
                    77:d2:04:5e:97:ed:87:d7:ce:50:2d:d4:c5:e3:b1:
                    57:bc:a4:bf:4b:28:a7:ab:31:2c:66:ce:8b:9e:96:
                    14:05:da:92:1a:4f:90:43:03:23:a8:d7:ad:04:47:
                    ff:1d:aa:75:7b:a0:f5:71:2a:c5:fa:10:6e:93:61:
                    c2:d1:35:e5:c1:ea:2d:af:43:34:1c:ce:54:35:31:
                    8c:71:1f:e9:11:26:db:60:35:ef:2d:17:fe:e0:03:
                    2c:de:17:6e:ba:78:c7:35:d5:6b:e8:73:9f:67:c1:
                    a1:e2:16:ba:82:14:f0:7e:15:7f:d5:4d:0c:66:53:
                    50:2c:30:56:83:98:52:99:d4:b5:44:da:cb:cb:e5:
                    61:77:f1:5b:0f:cf:16:f1:c9:f9:db:d4:bd:1e:fc:
                    23:8c:a0:bc:38:81:a7:49:61:a1:cc:e5:31:e0:01:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7D:49:35:A8:D8:63:89:4A:EB:13:C1:07:17:32:33:96:2D:57:1B
            X509v3 Authority Key Identifier:
                keyid:DA:27:AC:FB:4F:88:BC:23:9D:B8:FD:8C:7B:11:F2:1B:1C:BA:C4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/181/DA27ACFB4F88BC239DB8FD8C7B11F21B1CBAC465.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ies-0-IvCOduP2MexHyGxy6xGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/181/352e3235332e3232372e302f32342d3234203d3e20323035363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:81:9f:20:cb:98:26:45:89:41:99:11:7e:24:e6:b6:47:79:
         4b:ee:67:75:57:4a:7b:4d:c1:09:b8:e6:47:e9:5a:0e:f6:21:
         6f:fc:4f:74:50:a4:50:44:0a:e2:30:f8:e1:8f:5f:dd:87:3d:
         e2:c5:fa:4c:4f:79:a2:53:62:86:45:f8:39:f4:73:36:be:db:
         3e:df:90:de:26:9b:e4:60:24:ab:ac:ec:e5:be:24:e1:38:57:
         07:85:9e:9b:f3:5e:86:aa:6e:aa:80:1a:5e:a8:98:28:80:ce:
         51:5d:7e:d4:e3:69:14:35:6c:aa:0c:e3:10:53:01:fa:6e:40:
         a4:cd:20:26:e6:a2:1d:ec:29:c4:5f:5e:5e:3d:9d:fd:4f:4f:
         a0:38:09:a6:47:f9:0b:81:80:5e:9d:1e:42:a0:cb:ee:e8:21:
         01:3b:bf:e7:ef:01:9f:90:b2:b3:ef:1f:d1:af:d9:4c:4e:3f:
         cc:18:07:dc:c0:bb:76:93:29:68:82:06:e1:b0:fa:9a:24:5d:
         cf:ee:99:19:8c:a9:18:ff:fa:92:ba:c4:e5:80:90:d1:61:4b:
         2f:f6:5d:fe:83:27:b7:5b:8c:f2:c0:ac:19:50:85:3b:a8:ce:
         61:0b:d7:91:5b:16:6c:69:49:92:08:d4:c7:20:aa:74:1d:9f:
         08:81:8f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net