Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138352e3132352e302f32342d3234203d3e2030.roa
File:                     3138352e3138352e3132352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          MuQcxP3b0635CyKNsbx1P2Io1dNjI1uERNaU7zptFRA=
Subject key identifier:   01:2B:D1:69:4D:BE:97:F7:36:A9:E9:E9:00:2D:2E:C7:0A:FF:57:76
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       711203AEF88420863ABDA2077CDA5851D4BFBA75
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138352e3132352e302f32342d3234203d3e2030.roa
Signing time:             Tue 28 Jun 2022 04:40:58 +0000
ROA not before:           Tue 28 Jun 2022 04:35:58 +0000
ROA not after:            Tue 27 Jun 2023 04:40:58 +0000
asID:                     0
IP address blocks:        185.185.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:12:03:ae:f8:84:20:86:3a:bd:a2:07:7c:da:58:51:d4:bf:ba:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Jun 28 04:35:58 2022 GMT
            Not After : Jun 27 04:40:58 2023 GMT
        Subject: CN=012BD1694DBE97F736A9E9E9002D2EC70AFF5776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:5e:cc:71:b5:ef:8d:6d:ad:39:fe:b6:4c:
                    18:69:8e:2d:f0:b8:45:d5:b1:6c:02:26:73:eb:ee:
                    f2:62:fc:a0:bc:29:68:a6:a4:df:30:ca:38:99:d0:
                    fa:a9:31:54:37:84:83:dd:61:4b:09:9a:5f:f7:86:
                    88:98:6b:d5:30:51:48:24:e5:3d:4b:ba:d0:9b:c5:
                    58:c7:8c:4c:f5:52:53:1b:4e:be:45:ab:8d:59:69:
                    8b:8a:f6:62:b3:92:94:bf:0d:03:07:cd:df:5c:dd:
                    88:e6:81:1c:76:29:67:06:ec:b5:df:09:cd:93:0e:
                    4d:a1:29:68:36:97:87:21:f0:d5:9e:0d:61:70:dc:
                    94:b8:cb:f8:b3:30:9c:12:f2:a6:ef:07:5b:7b:07:
                    58:21:dd:1a:76:3a:a4:ed:af:72:98:a6:3c:ac:69:
                    1d:ae:f6:22:ee:2d:54:e4:cd:37:f8:1a:bf:42:74:
                    4a:04:d6:23:14:ec:2e:68:14:b9:e5:75:28:5f:5c:
                    b3:70:30:c1:2e:a8:aa:c2:e1:31:a4:73:24:a1:ae:
                    63:cf:35:58:98:9b:d8:5d:19:cf:bd:fb:b0:1d:ee:
                    d5:d6:4b:5a:a6:59:b6:ed:ba:dd:6b:8f:ef:59:6e:
                    4d:a3:72:80:48:f9:18:4c:70:13:29:54:2c:d4:8a:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2B:D1:69:4D:BE:97:F7:36:A9:E9:E9:00:2D:2E:C7:0A:FF:57:76
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138352e3132352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:5c:a9:39:f1:26:54:51:14:f0:10:10:d4:46:5a:8d:2a:b8:
         8f:27:06:24:d4:06:54:3f:e1:85:f2:11:ad:0c:11:76:52:be:
         6f:89:2e:59:69:af:c6:5c:a9:57:cb:d0:b6:3a:f4:33:51:28:
         02:bb:90:c4:22:e8:d9:38:94:01:23:70:33:d3:1d:fe:0d:3c:
         d4:c1:03:cc:ae:39:a3:17:e9:78:3a:ca:c1:75:ca:ba:0b:da:
         3c:1e:f6:41:01:cf:d8:f5:d0:bd:ef:fe:e7:81:1c:be:1b:28:
         0a:fe:04:0c:1e:f3:b5:4b:61:4f:dd:aa:33:ba:b8:6e:b0:60:
         59:fd:98:77:79:09:c1:0f:38:37:84:be:8e:e0:e9:45:7e:6c:
         03:5e:b3:e1:39:ea:b6:ba:3e:06:b1:bc:be:99:cd:db:57:34:
         40:2e:f7:0e:c6:4f:1d:b3:da:04:ca:43:45:d2:3e:72:5c:ea:
         a2:91:04:55:38:0e:39:c8:39:0a:de:7b:74:35:54:64:e2:49:
         93:38:02:69:d2:36:3e:a3:d1:c3:f8:a5:9d:76:f8:82:1f:e8:
         b1:16:8a:1f:90:4c:6c:75:2f:ab:33:56:10:2d:45:6c:07:d8:
         3e:3e:2f:0e:44:d5:03:6a:67:85:78:04:82:6c:8a:54:cf:9b:
         86:68:bb:23
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUcRIDrviEIIY6vaIHfNpYUdS/unUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJkMjljOTk2YWJjYzcyYzcyMjc5ZWY3ODk4Nzk1MWI4
MjVhZTQwMDAeFw0yMjA2MjgwNDM1NThaFw0yMzA2MjcwNDQwNThaMDMxMTAvBgNV
BAMTKDAxMkJEMTY5NERCRTk3RjczNkE5RTlFOTAwMkQyRUM3MEFGRjU3NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA317McbXvjW2tOf62TBhpji3w
uEXVsWwCJnPr7vJi/KC8KWimpN8wyjiZ0PqpMVQ3hIPdYUsJml/3hoiYa9UwUUgk
5T1LutCbxVjHjEz1UlMbTr5Fq41ZaYuK9mKzkpS/DQMHzd9c3YjmgRx2KWcG7LXf
Cc2TDk2hKWg2l4ch8NWeDWFw3JS4y/izMJwS8qbvB1t7B1gh3Rp2OqTtr3KYpjys
aR2u9iLuLVTkzTf4Gr9CdEoE1iMU7C5oFLnldShfXLNwMMEuqKrC4TGkcyShrmPP
NViYm9hdGc+9+7Ad7tXWS1qmWbbtut1rj+9Zbk2jcoBI+RhMcBMpVCzUit41AgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUASvRaU2+l/c2qenpAC0uxwr/V3YwHwYDVR0j
BBgwFoAUItKcmWq8xyxyJ573iYeVG4Ja5AAwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzMvMjJEMjlDOTk2QUJDQzcyQzcyMjc5RUY3ODk4Nzk1MUI4
MjVBRTQwMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0l0S2NtV3E4eHl4eUo1
NzNpWWVWRzRKYTVBQS5jZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4Zm
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
My8zMTM4MzUyZTMxMzgzNTJlMzEzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC5uX0wDQYJKoZIhvcNAQELBQADggEBAJhcqTnxJlRRFPAQ
ENRGWo0quI8nBiTUBlQ/4YXyEa0MEXZSvm+JLllpr8ZcqVfL0LY69DNRKAK7kMQi
6Nk4lAEjcDPTHf4NPNTBA8yuOaMX6Xg6ysF1yroL2jwe9kEBz9j10L3v/ueBHL4b
KAr+BAwe87VLYU/dqjO6uG6wYFn9mHd5CcEPODeEvo7g6UV+bANes+E56ra6Pgax
vL6ZzdtXNEAu9w7GTx2z2gTKQ0XSPnJc6qKRBFU4DjnIOQree3Q1VGTiSZM4AmnS
Nj6j0cP4pZ12+IIf6LEWih+QTGx1L6szVhAtRWwH2D4+Lw5E1QNqZ4V4BIJsilTP
m4ZouyM=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net