Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/219/3138352e3231322e3131382e302f32342d3234203d3e20313437303439.roa
File:                     3138352e3231322e3131382e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          mvoadaIsLAp0FcZdhDCEcKDRDKH5s7AH+Gw+A1Ffvds=
Subject key identifier:   EE:A3:C6:E9:74:19:AC:A1:E9:66:E3:07:B4:F6:64:B9:99:64:DF:C8
Certificate issuer:       /CN=6858a1c91fe320bd3fe18693c30eddd7f72c23ca
Certificate serial:       437B85062BD0CDDDA1551A45469FF2CC3100186A
Authority key identifier: 68:58:A1:C9:1F:E3:20:BD:3F:E1:86:93:C3:0E:DD:D7:F7:2C:23:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFihyR_jIL0_4YaTww7d1_csI8o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/219/3138352e3231322e3131382e302f32342d3234203d3e20313437303439.roa
Signing time:             Sat 22 Oct 2022 04:33:51 +0000
ROA not before:           Sat 22 Oct 2022 04:28:51 +0000
ROA not after:            Sat 21 Oct 2023 04:33:51 +0000
asID:                     147049
IP address blocks:        185.212.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7b:85:06:2b:d0:cd:dd:a1:55:1a:45:46:9f:f2:cc:31:00:18:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6858a1c91fe320bd3fe18693c30eddd7f72c23ca
        Validity
            Not Before: Oct 22 04:28:51 2022 GMT
            Not After : Oct 21 04:33:51 2023 GMT
        Subject: CN=EEA3C6E97419ACA1E966E307B4F664B99964DFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:48:ef:41:b5:d8:2e:7b:2b:33:9b:da:9e:92:
                    eb:e9:4c:d7:f9:74:09:53:ae:81:62:55:59:e6:81:
                    f7:17:45:35:1f:a6:ad:bc:d9:35:ff:06:83:03:5e:
                    d1:37:be:90:49:09:ee:1a:ed:20:b4:98:54:00:c2:
                    3c:40:ad:7e:1c:e7:6e:a9:9c:08:c5:2e:a0:55:4c:
                    f7:37:fc:6a:43:62:b0:18:02:e4:18:79:a1:10:13:
                    30:50:54:92:d8:55:36:71:fd:74:bb:9f:b8:0f:84:
                    f7:17:96:59:c3:e3:07:3d:20:90:5e:e0:64:6a:ee:
                    ff:4e:46:92:80:29:5d:1b:6e:21:25:05:dc:d7:f3:
                    52:00:fc:71:ee:80:8d:8c:7c:c0:87:72:9a:3f:27:
                    9d:0d:9f:07:c4:d6:21:e4:29:f8:53:ab:05:61:82:
                    45:62:ba:fd:3f:bc:79:ee:75:ef:1f:f5:17:74:ef:
                    72:34:7b:5c:0f:ef:ed:ae:45:38:01:3e:f9:8b:85:
                    d4:b2:8e:9e:27:35:6c:2c:ce:32:69:73:5e:67:28:
                    35:f2:60:2c:3d:58:02:85:40:21:42:dc:68:26:9e:
                    ff:2b:49:19:63:90:3a:d7:7c:57:a3:6f:b7:4a:b2:
                    2f:5a:d0:f6:b8:c2:b0:93:e6:a6:a1:1d:38:e3:72:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A3:C6:E9:74:19:AC:A1:E9:66:E3:07:B4:F6:64:B9:99:64:DF:C8
            X509v3 Authority Key Identifier:
                keyid:68:58:A1:C9:1F:E3:20:BD:3F:E1:86:93:C3:0E:DD:D7:F7:2C:23:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/219/6858A1C91FE320BD3FE18693C30EDDD7F72C23CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFihyR_jIL0_4YaTww7d1_csI8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/219/3138352e3231322e3131382e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:0f:51:ea:58:86:c4:24:9e:51:88:16:8e:49:ac:9d:0b:d8:
         70:05:5e:03:46:ad:99:2b:a3:44:b7:fe:8f:7f:12:bd:f2:50:
         fc:cc:43:a3:bc:c3:d5:cf:7f:7a:8a:8f:cd:cb:8e:09:d5:99:
         9b:a0:eb:8f:ee:ea:ef:be:52:b0:08:c0:14:c8:04:48:9f:f5:
         44:4a:bd:6b:43:76:19:21:13:65:da:a7:49:1a:22:94:e4:cb:
         ef:08:10:e3:72:21:b0:de:2b:bc:01:b2:27:ee:fc:17:12:0a:
         09:06:06:de:b2:f8:a3:7f:a6:48:17:8c:87:cf:b6:4f:2c:06:
         1c:f5:cc:9f:bb:b4:10:e2:4e:36:86:93:f6:80:a4:ae:bf:a1:
         1f:e9:3a:ee:32:9d:60:ba:58:d2:a4:fb:b8:d7:40:6b:9a:9f:
         4f:12:34:5f:88:b8:4a:3c:fb:f7:dd:58:9a:67:fb:17:0e:09:
         39:59:d8:cb:d2:3e:44:d0:a4:d7:0b:df:fe:ee:8c:b0:9e:07:
         52:5c:91:06:0b:3f:e2:64:69:ba:db:66:27:cc:2c:83:4d:a2:
         43:cd:f6:8c:11:5f:64:6b:21:a9:a8:48:7d:7d:bd:0b:70:ac:
         cd:bc:3c:81:bc:e0:d4:43:df:1e:21:f5:60:92:39:61:82:6d:
         6d:57:7c:f4
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUQ3uFBivQzd2hVRpFRp/yzDEAGGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg1OGExYzkxZmUzMjBiZDNmZTE4NjkzYzMwZWRkZDdm
NzJjMjNjYTAeFw0yMjEwMjIwNDI4NTFaFw0yMzEwMjEwNDMzNTFaMDMxMTAvBgNV
BAMTKEVFQTNDNkU5NzQxOUFDQTFFOTY2RTMwN0I0RjY2NEI5OTk2NERGQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvSO9Btdgueyszm9qekuvpTNf5
dAlTroFiVVnmgfcXRTUfpq282TX/BoMDXtE3vpBJCe4a7SC0mFQAwjxArX4c526p
nAjFLqBVTPc3/GpDYrAYAuQYeaEQEzBQVJLYVTZx/XS7n7gPhPcXllnD4wc9IJBe
4GRq7v9ORpKAKV0bbiElBdzX81IA/HHugI2MfMCHcpo/J50NnwfE1iHkKfhTqwVh
gkViuv0/vHnude8f9Rd073I0e1wP7+2uRTgBPvmLhdSyjp4nNWwszjJpc15nKDXy
YCw9WAKFQCFC3Ggmnv8rSRljkDrXfFejb7dKsi9a0Pa4wrCT5qahHTjjcp63AgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQU7qPG6XQZrKHpZuMHtPZkuZlk38gwHwYDVR0j
BBgwFoAUaFihyR/jIL0/4YaTww7d1/csI8owDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIxOS82ODU4QTFDOTFGRTMyMEJEM0ZFMTg2OTNDMzBFRERE
N0Y3MkMyM0NBLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYUZpaHlSX2pJTDBf
NFlhVHd3N2QxX2NzSThvLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYBBQUH
MAuGcnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFu
c2l0LzIxOS8zMTM4MzUyZTMyMzEzMjJlMzEzMTM4MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzEzNDM3MzAzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudR2MA0GCSqGSIb3DQEBCwUA
A4IBAQB/D1HqWIbEJJ5RiBaOSaydC9hwBV4DRq2ZK6NEt/6PfxK98lD8zEOjvMPV
z396io/Ny44J1ZmboOuP7urvvlKwCMAUyARIn/VESr1rQ3YZIRNl2qdJGiKU5Mvv
CBDjciGw3iu8AbIn7vwXEgoJBgbesvijf6ZIF4yHz7ZPLAYc9cyfu7QQ4k42hpP2
gKSuv6Ef6TruMp1guljSpPu410Brmp9PEjRfiLhKPPv33ViaZ/sXDgk5WdjL0j5E
0KTXC9/+7oywngdSXJEGCz/iZGm622YnzCyDTaJDzfaMEV9kayGpqEh9fb0LcKzN
vDyBvODUQ98eIfVgkjlhgm1tV3z0
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net