Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20333939373436.roa
File:                     38352e3230322e38312e302f32342d3234203d3e20333939373436.roa (raw, json)
Hash identifier:          75jdfEGHrUQ14Wbk0QNc19+It9rHMdrB4BK9fOvxq9g=
Subject key identifier:   6B:4F:E8:6D:A8:BE:61:2C:2F:67:C9:A7:4C:C1:AC:CC:93:96:92:14
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       15F5E5B3A445738CB9BA2DEC10868CB9FBA5AC20
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20333939373436.roa
Signing time:             Wed 20 Oct 2021 11:42:14 +0000
ROA not before:           Wed 20 Oct 2021 11:37:14 +0000
ROA not after:            Wed 19 Oct 2022 11:42:14 +0000
asID:                     399746
IP address blocks:        85.202.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f5:e5:b3:a4:45:73:8c:b9:ba:2d:ec:10:86:8c:b9:fb:a5:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 20 11:37:14 2021 GMT
            Not After : Oct 19 11:42:14 2022 GMT
        Subject: CN=3082010A0282010100E6B106EB3BAF067EB36DC36ED9F4F856BA28AF60E23A9C6E5554BD03B403509C1F7A1193DCD1BE7931C93BE600EBA7EF148165FA813607534213DD8C6D8285F1DEE6099903C4C7D8A83E92EC7E5A28D212E54F77916C2F5CA6CE9F2C59E8AC154E9A1E1C5480FA4C6D8D3170FCDAB18300E24B1A57A465BE1A218DF807AC1CA6B9D05E04F34CC7C5606548ED9B54E5FBE48C7D3134E73FE98A184C533FD146092422D969F8F4942480F530A1D17EB1D1D66AB996C4AAEE8BA4AA2551C7E6BBF90E70A6BED75EFF9380E9977805F6DF9FA2BC5C3E51B80FC012CCFCD33FDDFD52135A5DACF4C340809604C7513E46BE4A22EBA4DB3DFF748457D33C3694DEC2790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b1:06:eb:3b:af:06:7e:b3:6d:c3:6e:d9:f4:
                    f8:56:ba:28:af:60:e2:3a:9c:6e:55:54:bd:03:b4:
                    03:50:9c:1f:7a:11:93:dc:d1:be:79:31:c9:3b:e6:
                    00:eb:a7:ef:14:81:65:fa:81:36:07:53:42:13:dd:
                    8c:6d:82:85:f1:de:e6:09:99:03:c4:c7:d8:a8:3e:
                    92:ec:7e:5a:28:d2:12:e5:4f:77:91:6c:2f:5c:a6:
                    ce:9f:2c:59:e8:ac:15:4e:9a:1e:1c:54:80:fa:4c:
                    6d:8d:31:70:fc:da:b1:83:00:e2:4b:1a:57:a4:65:
                    be:1a:21:8d:f8:07:ac:1c:a6:b9:d0:5e:04:f3:4c:
                    c7:c5:60:65:48:ed:9b:54:e5:fb:e4:8c:7d:31:34:
                    e7:3f:e9:8a:18:4c:53:3f:d1:46:09:24:22:d9:69:
                    f8:f4:94:24:80:f5:30:a1:d1:7e:b1:d1:d6:6a:b9:
                    96:c4:aa:ee:8b:a4:aa:25:51:c7:e6:bb:f9:0e:70:
                    a6:be:d7:5e:ff:93:80:e9:97:78:05:f6:df:9f:a2:
                    bc:5c:3e:51:b8:0f:c0:12:cc:fc:d3:3f:dd:fd:52:
                    13:5a:5d:ac:f4:c3:40:80:96:04:c7:51:3e:46:be:
                    4a:22:eb:a4:db:3d:ff:74:84:57:d3:3c:36:94:de:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:E8:6D:A8:BE:61:2C:2F:67:C9:A7:4C:C1:AC:CC:93:96:92:14
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20333939373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.202.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:46:20:72:28:e5:b5:15:d3:ff:c9:11:8d:b5:26:e6:92:ff:
         d4:d2:d3:ea:e5:20:31:d3:06:81:4f:4e:62:c2:45:f8:88:2d:
         5a:7a:b4:bf:a0:eb:6a:1e:af:6d:b0:9e:56:a9:73:5d:4a:69:
         c9:dc:a3:c7:51:b4:b3:48:7b:6d:6b:8b:9a:f5:cc:99:dc:f4:
         97:3f:aa:0c:d7:0b:c6:80:81:96:4d:8c:fe:49:3e:06:b5:fa:
         57:e0:af:c2:a2:fa:57:14:d0:82:9d:84:c4:ec:58:75:9a:11:
         05:b4:bd:b4:c9:0a:29:75:5a:6f:fd:23:6a:e1:a3:cc:fc:65:
         4e:1a:17:74:80:c8:84:16:d8:65:20:87:ed:25:e9:7c:cd:70:
         da:79:8e:94:84:b8:01:77:45:78:f1:04:77:68:7c:87:f5:30:
         6c:17:77:50:bc:93:59:93:1c:0c:82:97:58:6f:20:76:75:86:
         b3:ec:b1:14:19:be:35:a5:4a:c6:5f:2c:fc:6f:f7:79:c4:e4:
         a8:30:10:82:44:95:27:52:20:76:c4:5b:bc:f2:11:95:75:db:
         b6:55:89:ae:50:7a:16:be:77:cb:9f:6c:7c:2f:7f:12:d2:d8:
         fb:07:4e:2e:1c:9f:db:ae:4b:1f:e8:b3:e1:e4:e1:7b:ac:de:
         5d:7b:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net