Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232322e3132342e302f32322d3232203d3e20323030303634.roa
File:                     3138352e3232322e3132342e302f32322d3232203d3e20323030303634.roa (raw, json)
Hash identifier:          v+jVQV93cGzIAnwHvw6lTNG/+o/s5vQYQo8RRL3rRIs=
Subject key identifier:   6F:73:15:84:2D:C4:E4:05:73:6F:12:3D:D9:E5:E8:A0:CB:66:B7:6A
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       43DDECFF71FE635443022F207A2A9DEDE619D286
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232322e3132342e302f32322d3232203d3e20323030303634.roa
Signing time:             Tue 28 Jun 2022 04:41:00 +0000
ROA not before:           Tue 28 Jun 2022 04:36:00 +0000
ROA not after:            Tue 27 Jun 2023 04:41:00 +0000
asID:                     200064
IP address blocks:        185.222.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:dd:ec:ff:71:fe:63:54:43:02:2f:20:7a:2a:9d:ed:e6:19:d2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Jun 28 04:36:00 2022 GMT
            Not After : Jun 27 04:41:00 2023 GMT
        Subject: CN=6F7315842DC4E405736F123DD9E5E8A0CB66B76A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:cc:e6:e1:c3:f3:f8:c6:03:05:ab:eb:fb:
                    7c:20:ef:a2:72:1d:80:1e:59:05:96:8e:6e:eb:bd:
                    c4:69:6a:50:e6:fe:32:5b:7f:20:b2:e0:b9:4f:e9:
                    91:42:89:c5:8a:8c:b3:b4:f3:9c:83:98:e2:30:9e:
                    87:84:19:d5:65:ca:d2:64:3a:1a:3c:b5:b4:4a:54:
                    ac:fa:58:bb:0a:91:c2:f5:10:b2:86:e7:d7:b1:f2:
                    73:e5:28:de:9c:b7:cb:75:d4:34:75:df:f1:b2:a4:
                    59:17:5c:6a:51:85:a0:aa:af:64:84:8d:92:46:eb:
                    34:fe:81:58:5c:de:ef:bc:c4:28:29:4c:f8:4c:8a:
                    7e:28:4d:bd:65:15:8e:7e:00:21:d6:4a:7d:e6:86:
                    9f:24:03:e1:72:49:2b:a4:2e:1d:ee:c5:93:df:41:
                    18:7c:9c:84:21:cf:8a:21:4a:2b:d9:cd:dc:43:8b:
                    e2:14:b1:fb:2b:98:b9:8a:d7:28:45:88:a0:1d:a2:
                    eb:dc:fd:d1:77:4f:d9:2b:31:e2:92:3f:5b:e5:c8:
                    18:71:9c:b4:f9:04:04:da:64:70:9f:f1:f4:9f:8d:
                    85:85:8e:cb:ee:8d:95:c9:96:4a:92:42:eb:4c:41:
                    58:db:29:0d:c5:e7:17:42:e5:9e:a8:89:9a:1e:14:
                    c9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:73:15:84:2D:C4:E4:05:73:6F:12:3D:D9:E5:E8:A0:CB:66:B7:6A
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232322e3132342e302f32322d3232203d3e20323030303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:6b:44:48:c6:45:2f:63:03:54:c2:30:51:88:03:fb:5e:5e:
         b1:3a:06:99:f5:a0:c5:51:15:e4:63:f6:b7:a6:3d:ef:a2:57:
         fb:88:f8:e8:d3:c1:32:c2:4a:ff:46:72:6c:6c:00:ef:40:56:
         70:d3:bf:80:0d:ac:a0:80:d4:16:bd:d2:16:ee:2a:f2:90:b8:
         77:e7:70:c9:24:f7:a3:39:2d:f8:2d:a6:ad:9e:3d:b2:4d:a4:
         8b:a6:7b:3a:41:d6:29:c7:73:1f:40:fb:ba:80:f9:7a:7f:c8:
         89:65:24:d5:aa:39:82:c9:a4:20:a4:02:0b:08:a1:ea:00:65:
         5a:2b:6e:02:05:06:40:48:1e:f2:6e:31:66:8b:6e:0b:50:15:
         61:c4:7d:5a:2a:98:d1:e6:76:e5:b8:88:85:e1:18:09:72:d2:
         dc:3e:47:14:22:37:4f:2a:de:7e:72:c6:33:0f:fe:2e:2f:44:
         0b:03:da:27:84:f9:ed:07:38:f1:bc:c7:b7:87:a8:ee:89:4a:
         11:1b:b5:d8:67:72:87:a7:f7:d8:d4:43:23:a9:22:91:f7:d4:
         00:5d:8a:a4:c5:e1:16:e0:18:1a:98:a6:e4:49:2d:d3:84:3a:
         bf:5f:73:89:b9:51:be:be:f3:d3:3c:31:be:a2:c8:94:50:7a:
         d6:0d:34:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net