Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/200/36322e332e32352e302f32342d3234203d3e20323031333431.roa
File:                     36322e332e32352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          cR/b7nBTl8JK3OsTv5dZf7JAo4POX0esS1mXbKflJGg=
Subject key identifier:   55:40:C4:78:22:0F:C7:02:F6:6A:9D:89:E5:B8:52:A2:4D:DC:12:10
Certificate issuer:       /CN=f666bd99c46ff0c69df9e17dae81b9a846cbe128
Certificate serial:       10861AF2577D5E70D9DCF972A11F3C1887D170C0
Authority key identifier: F6:66:BD:99:C4:6F:F0:C6:9D:F9:E1:7D:AE:81:B9:A8:46:CB:E1:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ma9mcRv8Mad-eF9roG5qEbL4Sg.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/200/36322e332e32352e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:08 +0000
ROA not before:           Sat 22 Oct 2022 04:29:08 +0000
ROA not after:            Sat 21 Oct 2023 04:34:08 +0000
asID:                     201341
IP address blocks:        62.3.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:86:1a:f2:57:7d:5e:70:d9:dc:f9:72:a1:1f:3c:18:87:d1:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f666bd99c46ff0c69df9e17dae81b9a846cbe128
        Validity
            Not Before: Oct 22 04:29:08 2022 GMT
            Not After : Oct 21 04:34:08 2023 GMT
        Subject: CN=5540C478220FC702F66A9D89E5B852A24DDC1210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:70:25:00:c2:9d:65:6d:29:12:62:78:73:
                    08:24:44:01:5e:04:92:8f:24:4b:62:e0:63:8c:9b:
                    ea:a1:b5:1f:12:86:e9:2d:08:7f:85:75:92:83:cd:
                    35:30:0d:b0:02:4d:0e:c6:8e:4d:43:c2:ba:8d:86:
                    7d:2b:39:9b:7c:a5:df:a5:be:59:f2:27:8c:97:57:
                    21:be:5c:87:55:90:94:92:93:a0:44:18:cf:bb:eb:
                    24:8a:d3:b6:9d:01:aa:07:e7:fe:5c:00:51:61:d4:
                    f3:2b:84:f3:f2:38:10:6e:78:7c:4f:5c:4b:20:2e:
                    71:35:11:92:6e:d7:d5:9f:82:bf:39:08:78:52:c7:
                    84:e8:21:80:56:94:a6:11:0a:f7:a2:22:f2:e1:9c:
                    c3:76:93:f4:1f:88:fd:3e:fb:a1:9c:d1:fe:2f:88:
                    ea:ad:46:a4:6d:83:6c:14:65:60:9c:75:1f:80:06:
                    89:19:bb:4c:71:85:ee:79:c3:d6:48:13:a0:da:37:
                    7e:4e:22:1a:04:79:6c:a5:78:eb:98:ca:65:98:96:
                    88:65:a0:fb:b0:44:cb:a6:f8:33:49:41:30:bc:90:
                    c3:1d:b8:2d:33:fc:c7:35:da:f9:7e:7e:19:71:0d:
                    e4:c1:e1:fc:5a:6a:6e:b9:86:f2:29:d5:93:c0:d5:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:40:C4:78:22:0F:C7:02:F6:6A:9D:89:E5:B8:52:A2:4D:DC:12:10
            X509v3 Authority Key Identifier:
                keyid:F6:66:BD:99:C4:6F:F0:C6:9D:F9:E1:7D:AE:81:B9:A8:46:CB:E1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/200/F666BD99C46FF0C69DF9E17DAE81B9A846CBE128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ma9mcRv8Mad-eF9roG5qEbL4Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/200/36322e332e32352e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:0f:98:06:c6:be:5e:1a:ea:75:af:18:ba:81:f2:f9:94:
         9c:8f:30:95:9e:0e:4a:68:0e:50:aa:c8:68:c4:8e:46:b2:ae:
         83:a6:8b:2a:15:1b:64:e8:e9:d5:36:e2:5b:fb:e8:a4:d6:3a:
         63:8b:be:f9:3f:d5:e1:b2:98:a5:68:c2:58:4e:b8:1f:cc:ac:
         65:f8:07:2c:69:24:54:70:e0:7b:7d:fe:28:b3:4c:2d:6a:04:
         31:e7:cb:76:97:88:56:fe:be:c4:46:90:23:40:30:39:a1:4c:
         8c:e3:e1:fe:1f:ee:69:e5:fd:8e:66:dc:cf:e4:88:4d:71:3a:
         56:89:6b:7b:44:e7:b3:d2:77:d4:4a:4c:db:c0:b4:7f:6a:60:
         2f:e2:44:3e:a4:b7:df:b1:8b:9d:47:cd:41:a8:cc:04:17:b0:
         2a:dd:13:59:5e:d0:4d:5d:bf:3d:23:fe:f1:e3:ee:69:38:e2:
         a8:f3:54:d7:4b:e5:63:a6:4c:3b:b5:5a:77:6b:e5:28:53:51:
         1a:79:d2:e2:8e:41:0a:0a:5b:76:1e:ca:24:d4:1d:42:5a:c2:
         72:0d:a8:94:b4:8e:d1:54:e1:da:47:51:13:cc:7b:72:9d:e5:
         8a:d7:52:fd:f5:6d:bc:0f:b1:79:46:25:21:23:4a:33:5a:f5:
         bd:21:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net