Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138352e3132352e302f32342d3234203d3e203432333636.roa
File:                     3138352e3138352e3132352e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier:          YBjdhVUCuUbBbMZXQP5OTQUVfV+LoH33KM4MK1MaB80=
Subject key identifier:   D6:7E:41:8F:A0:2F:42:73:0D:28:7F:72:20:9E:19:95:8B:BD:07:D7
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       16B93FE563DA3C0C702445836B5DDDCA80972E2A
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138352e3132352e302f32342d3234203d3e203432333636.roa
Signing time:             Tue 28 Jun 2022 04:40:59 +0000
ROA not before:           Tue 28 Jun 2022 04:35:59 +0000
ROA not after:            Tue 27 Jun 2023 04:40:59 +0000
asID:                     42366
IP address blocks:        185.185.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b9:3f:e5:63:da:3c:0c:70:24:45:83:6b:5d:dd:ca:80:97:2e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Jun 28 04:35:59 2022 GMT
            Not After : Jun 27 04:40:59 2023 GMT
        Subject: CN=D67E418FA02F42730D287F72209E19958BBD07D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d1:60:de:88:c6:b2:65:09:6f:10:a0:dd:19:
                    b7:ac:20:4c:7a:7b:a7:74:64:f8:df:56:13:b7:91:
                    98:4e:87:22:98:6d:1d:60:f3:8f:f3:7f:dc:dc:4e:
                    cd:a1:5f:57:3d:2e:ac:b8:f1:82:7f:5f:90:6a:19:
                    99:97:a4:6d:a3:49:df:28:83:0f:0e:af:b8:19:cf:
                    26:91:e8:ff:20:77:29:fe:07:0f:84:b6:d1:72:4a:
                    c2:e7:be:23:28:1c:f1:d8:11:01:36:b2:08:2e:36:
                    19:65:65:99:68:54:f2:85:d4:89:be:ca:8b:81:38:
                    07:c2:80:fd:2e:49:71:c9:d9:d1:8c:9a:ba:96:bd:
                    bf:08:8c:cf:26:01:0b:56:b7:d9:29:da:1b:56:0d:
                    04:1c:bc:ee:32:17:11:60:00:1f:66:92:51:f3:62:
                    27:74:54:e5:fb:79:1c:9c:4c:c4:42:e3:70:e6:a1:
                    6d:b5:08:d1:00:17:3b:58:87:91:7c:e7:3e:8f:7b:
                    9b:19:30:94:66:b2:5d:c9:ee:1f:63:16:28:35:20:
                    5a:df:4d:f0:81:87:4f:bb:e3:ea:ad:67:2f:b5:aa:
                    7d:1c:4e:6d:42:48:1b:ec:e8:70:bf:4e:cb:4e:e2:
                    1d:9b:2d:2f:d7:95:e8:c4:3b:96:26:28:c1:03:58:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7E:41:8F:A0:2F:42:73:0D:28:7F:72:20:9E:19:95:8B:BD:07:D7
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138352e3132352e302f32342d3234203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:e0:d3:88:c2:a8:a4:4d:9d:56:fa:44:cc:a7:7f:2f:5d:45:
         09:fd:5c:19:a0:b3:2a:3d:e3:a7:44:21:73:ee:9a:12:82:1d:
         8d:0f:bc:91:f4:b8:af:30:79:c2:e6:79:c9:3f:11:6b:c9:39:
         87:73:79:8b:96:cd:f6:ca:b5:5c:92:4b:72:66:35:6c:17:25:
         62:6e:41:79:65:33:fb:c1:ef:ba:fa:2b:59:d5:98:39:67:12:
         ac:8c:d9:3e:77:a2:8f:dd:91:e6:b5:92:82:18:0b:40:9c:df:
         a5:e3:ea:0e:e3:8c:54:8b:fb:99:bf:dd:df:18:bd:f9:6e:dc:
         d5:d1:05:fb:58:0c:63:db:32:86:56:3f:f4:2a:bc:c8:8f:75:
         1f:9b:04:82:ba:f5:0b:72:cb:63:b4:31:78:6e:c1:0f:e0:39:
         9c:e5:99:ab:d9:90:4f:c7:89:81:60:cd:16:c1:7f:a8:cf:3e:
         40:09:ef:47:3c:36:3e:66:f8:ba:a7:a8:21:fd:77:66:a5:e3:
         ea:e2:b0:aa:56:d7:c4:04:fb:4a:bb:2f:7c:af:c8:0f:e7:38:
         b7:e7:db:95:94:b8:c6:1c:64:57:1e:7f:96:c9:b1:23:e8:4b:
         ba:51:43:f9:f3:59:eb:69:61:2f:d1:8e:70:12:4e:f1:f9:55:
         3e:11:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net