Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138332e3138332e302f32342d3234203d3e203432333636.roa
File:                     3138352e3138332e3138332e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier:          CaAVW8OqGyrtGUDcBKdVlRC3ojOUq7iTznrzi6mCdIQ=
Subject key identifier:   91:E5:9E:F0:F0:CA:45:10:1E:7A:0A:D6:5E:64:5C:40:A5:75:7B:6A
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       7EDE4A1C14438F0391BD29E57DE3CDC2118364CC
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138332e3138332e302f32342d3234203d3e203432333636.roa
Signing time:             Tue 28 Jun 2022 04:41:00 +0000
ROA not before:           Tue 28 Jun 2022 04:36:00 +0000
ROA not after:            Tue 27 Jun 2023 04:41:00 +0000
asID:                     42366
IP address blocks:        185.183.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:de:4a:1c:14:43:8f:03:91:bd:29:e5:7d:e3:cd:c2:11:83:64:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Jun 28 04:36:00 2022 GMT
            Not After : Jun 27 04:41:00 2023 GMT
        Subject: CN=91E59EF0F0CA45101E7A0AD65E645C40A5757B6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:ae:ac:c8:a3:5f:c5:bd:0f:b2:99:6f:95:
                    01:f0:2f:e0:7e:ef:5e:96:cc:1f:79:48:d1:7e:42:
                    10:c2:cf:e1:75:15:92:4b:db:7a:6f:36:9c:16:a1:
                    cf:46:4c:83:a8:c3:a2:51:16:a8:65:e6:8c:2c:26:
                    98:f2:00:45:84:9d:86:5d:79:b2:98:d2:99:55:40:
                    14:a9:5f:ab:ac:ba:b6:61:6e:21:9f:0b:33:5e:39:
                    fd:90:ee:ba:20:f9:ff:88:50:0d:78:23:3d:8e:49:
                    e2:4f:ee:7f:fd:38:82:e3:7d:0e:24:e4:d4:1b:97:
                    79:69:59:03:c2:79:70:98:7c:ad:a3:e4:1d:10:b2:
                    1b:23:67:ec:ff:40:7f:a6:fe:1b:a8:b7:f1:d9:78:
                    72:24:d2:6d:0d:71:a6:14:ca:a6:da:e1:6c:2b:1a:
                    c2:de:24:f3:6a:c2:8c:f8:cc:d3:7a:a7:8c:76:a4:
                    16:d4:4c:76:f3:df:87:45:2a:c1:42:84:e1:38:3c:
                    44:66:a3:81:69:c5:28:b4:60:5f:5b:c7:7e:c2:e0:
                    14:28:e1:b4:cb:c0:81:22:e2:6b:0e:05:39:e2:65:
                    7a:ba:89:75:21:f3:46:c6:c4:09:2e:c9:5a:b9:78:
                    56:ba:52:f0:bc:dd:22:00:89:70:ec:59:07:d5:ff:
                    fb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E5:9E:F0:F0:CA:45:10:1E:7A:0A:D6:5E:64:5C:40:A5:75:7B:6A
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138332e3138332e302f32342d3234203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:c6:58:6f:7f:66:c7:05:93:cd:da:d7:78:9f:72:e9:d0:97:
         e9:fd:60:b0:0e:5b:b0:d0:f7:dc:b2:05:1d:29:31:eb:fe:4a:
         65:95:e4:55:58:5d:92:8a:51:54:19:1a:65:44:90:e8:a8:f3:
         62:e5:62:2f:bb:af:8c:8f:04:09:fa:97:26:27:a8:02:0e:27:
         81:55:4d:25:d3:0a:e5:a1:48:e7:89:d6:67:58:42:9d:e8:d8:
         80:4e:dd:4b:71:60:6a:7b:6c:05:af:93:5a:b0:59:20:30:13:
         47:6f:36:9e:c5:b3:5b:f8:02:0f:38:ab:b8:33:21:66:e2:6d:
         41:43:90:d9:01:6b:da:18:af:10:72:9c:ad:b8:a8:53:b0:c0:
         1a:07:68:48:71:5a:17:47:19:3a:b8:a4:c8:e2:c9:64:ed:f8:
         89:c9:43:64:86:32:61:50:bb:b2:c6:84:13:53:42:a5:1f:0a:
         df:7a:50:db:11:50:30:3e:28:11:cb:5e:78:bb:ae:8e:8f:53:
         29:a6:42:64:7d:0e:44:1e:d0:0e:10:7f:ed:38:89:f7:75:12:
         4d:f5:6d:72:81:c9:08:a8:83:ff:fe:20:76:28:08:39:2e:f6:
         8e:55:b3:d5:4b:3b:3d:9b:cf:c0:c7:1a:a3:aa:cf:7a:8b:46:
         77:02:da:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net