Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139382e32372e302f32342d3234203d3e203432333636.roa
File:                     3138352e3139382e32372e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier:          GKffaudao8HJk072/2LMOPLR0uK5IfFQlM1wIyvMiOU=
Subject key identifier:   CD:7A:ED:31:04:69:B5:44:54:77:6F:31:F3:53:98:A6:B2:C0:BB:01
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       3575D690E7436C051FAEB7B3FA8237D65EFAF1E9
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139382e32372e302f32342d3234203d3e203432333636.roa
Signing time:             Tue 28 Jun 2022 04:40:59 +0000
ROA not before:           Tue 28 Jun 2022 04:35:59 +0000
ROA not after:            Tue 27 Jun 2023 04:40:59 +0000
asID:                     42366
IP address blocks:        185.198.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:75:d6:90:e7:43:6c:05:1f:ae:b7:b3:fa:82:37:d6:5e:fa:f1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Jun 28 04:35:59 2022 GMT
            Not After : Jun 27 04:40:59 2023 GMT
        Subject: CN=CD7AED310469B54454776F31F35398A6B2C0BB01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:f8:69:05:33:9c:62:10:55:ba:1d:b8:ed:
                    71:8a:26:d6:6d:aa:4e:a3:1b:0f:97:d9:54:33:d3:
                    d3:cc:65:ce:69:85:b9:9f:8b:12:2c:eb:89:04:ab:
                    a2:ad:c0:9b:d0:f8:33:c8:8f:f1:4c:d0:a2:16:57:
                    fd:5d:08:45:26:10:ee:70:68:ec:ed:74:57:54:97:
                    6b:b8:35:3d:ec:48:f2:d1:59:48:a6:39:71:f9:04:
                    25:27:ab:1e:ff:47:a4:ce:bb:9d:1c:ce:1b:da:9f:
                    a7:37:c0:d6:b2:0e:c1:e4:c5:eb:6b:58:25:dd:7f:
                    7f:6a:41:14:f8:39:75:50:5a:88:d2:f4:44:74:92:
                    74:b3:c2:2f:80:f6:1d:78:b6:ab:9a:43:f0:d9:06:
                    d4:e5:00:dc:3e:d7:e2:23:aa:d1:7b:4b:c9:86:1a:
                    59:96:e0:12:ba:41:eb:bf:78:a5:83:67:58:5a:1c:
                    39:0e:0e:2e:62:1a:8b:c8:0c:ad:e6:97:ba:6c:51:
                    23:ef:7f:ae:70:7b:18:cc:45:29:f8:02:5e:c1:13:
                    71:65:90:90:39:d3:f7:b4:8c:ae:26:8f:e7:7b:77:
                    7e:46:e9:b2:15:f8:a4:67:09:99:87:0c:1c:25:33:
                    93:50:51:db:aa:cf:ab:d2:b9:a8:27:c0:6b:77:04:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7A:ED:31:04:69:B5:44:54:77:6F:31:F3:53:98:A6:B2:C0:BB:01
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139382e32372e302f32342d3234203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.198.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:19:52:f3:46:1c:91:0b:59:9f:4e:d7:8c:88:f5:d6:1c:3a:
         79:47:ba:a9:86:1c:57:c5:d0:3e:60:98:05:a3:70:91:b7:86:
         dd:b1:97:4c:a9:52:f0:77:a4:06:cf:17:f2:c1:a8:4f:f0:7d:
         58:93:fa:4e:37:1c:64:86:b3:d0:5d:75:8a:0a:ae:d4:3f:28:
         b5:8f:7d:5d:82:6e:ce:c0:08:04:80:84:77:80:0e:27:e2:01:
         ca:d8:e1:c1:ef:da:81:5b:1d:cb:71:6b:3f:cc:01:8b:2f:ae:
         57:e7:0f:4c:26:54:12:43:2f:c0:33:8f:7f:49:66:26:5b:14:
         bc:7d:7f:fe:11:58:1c:af:ca:6c:6e:92:ec:cf:cc:cb:e2:3c:
         9d:08:80:28:78:e9:0b:ba:64:76:0a:b9:e7:2a:f9:8b:63:28:
         10:8f:c6:79:3e:04:e1:c1:7c:6f:d9:1e:7b:f1:e1:17:68:6e:
         dd:a2:e7:6f:cb:9b:85:4a:bf:77:2a:0b:f4:d3:13:b1:1f:ff:
         a1:95:b6:a9:14:50:a3:65:5c:e0:eb:59:f0:2c:63:58:e3:6e:
         c0:c6:bf:80:46:7a:57:23:1d:fe:4d:61:c2:6c:65:aa:53:33:
         17:0a:45:26:ec:13:22:4a:21:90:cd:11:41:00:8a:2f:7c:6a:
         14:5a:a3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net