Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa
File:                     3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          gLw/qy6YEefYa2NHMA7ykrx/SGSk5m0M5sZXxVTQ2pQ=
Subject key identifier:   27:33:46:48:00:76:4E:5C:F9:7F:49:74:FE:AE:A9:43:DC:B3:E7:51
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       6A18A3E58403107EC598A1008619C0435A9FBCF8
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:07 +0000
ROA not before:           Sat 22 Oct 2022 04:29:07 +0000
ROA not after:            Sat 21 Oct 2023 04:34:07 +0000
asID:                     47583
IP address blocks:        185.237.144.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:18:a3:e5:84:03:10:7e:c5:98:a1:00:86:19:c0:43:5a:9f:bc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:07 2022 GMT
            Not After : Oct 21 04:34:07 2023 GMT
        Subject: CN=2733464800764E5CF97F4974FEAEA943DCB3E751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:19:6a:2f:61:9d:2a:2b:4f:db:1c:25:cb:
                    3a:52:89:70:4d:00:5d:c7:79:ab:e3:19:26:81:ac:
                    25:1a:b1:bd:de:5b:ad:db:e6:24:ca:ab:49:3d:ff:
                    c9:2f:8f:07:ff:07:98:c2:94:1e:f6:d4:48:9b:46:
                    b1:31:7e:51:d2:f4:24:96:61:5d:a4:18:32:26:c6:
                    50:ed:db:e6:3e:a0:e2:2b:80:4f:2e:38:ee:c2:49:
                    b4:67:37:eb:ee:29:de:79:6d:1c:fa:39:01:10:3e:
                    bd:ba:dc:dd:d4:cc:af:f8:49:f6:5f:45:27:4f:fd:
                    84:ef:bc:10:2b:3c:b9:57:7d:13:fc:ab:e9:d3:cf:
                    30:50:11:9e:6d:87:76:20:a4:08:c4:7d:ce:3a:ad:
                    c2:bb:d9:eb:7e:89:e2:a1:21:f4:5d:8f:57:8d:c7:
                    bf:07:ff:5d:3a:dd:67:ed:b2:e0:a6:30:dd:92:ea:
                    20:93:34:c9:4b:1e:1c:8d:e5:46:83:52:e3:d7:71:
                    ed:95:41:57:20:46:26:c8:c8:c4:a3:a8:c0:0e:94:
                    7e:ff:98:36:ac:ad:27:18:63:3b:c2:a5:94:e3:9d:
                    09:3c:07:cb:e2:cf:31:f8:db:62:bc:88:0f:cd:8c:
                    be:51:d3:80:5c:e2:2e:29:f3:3c:98:6a:e1:d5:b3:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:33:46:48:00:76:4E:5C:F9:7F:49:74:FE:AE:A9:43:DC:B3:E7:51
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:7e:04:91:8a:94:64:ab:21:82:49:24:6f:be:e1:57:69:d1:
         64:00:3b:76:be:dc:ef:7d:fe:04:ad:61:2f:58:fe:46:0d:fa:
         ad:73:55:5c:23:cc:9a:a0:d2:77:84:e5:da:1a:4c:ef:9b:dd:
         bf:46:d0:5d:40:32:7c:85:5f:9d:e5:4a:fc:11:5f:5f:68:fa:
         63:01:5e:90:dc:46:3e:c5:d5:da:13:d7:df:ff:61:31:eb:7f:
         c6:66:4b:a5:10:d6:5e:be:1e:65:c2:8b:40:85:42:9d:38:ce:
         4e:f6:54:51:fe:6e:15:8c:64:e1:b7:17:df:62:3e:36:ec:39:
         08:4a:31:51:3e:36:25:4a:33:06:70:20:c4:11:d1:f6:7f:f5:
         3b:8e:76:7c:4a:fa:33:0c:16:68:e7:b2:a4:31:eb:2d:bc:57:
         5c:0c:d0:78:4f:fd:38:be:b2:ec:de:7b:4b:30:07:f1:a8:0b:
         54:ec:70:d6:61:17:1d:94:ed:d8:68:ee:ff:0d:95:10:a2:ac:
         80:08:6c:f6:52:5c:8f:9a:e0:c1:07:f4:62:b5:13:3b:24:cc:
         27:44:69:10:bd:ad:bb:76:96:51:0e:7a:5d:94:ee:c4:f3:91:
         86:c5:09:f0:5e:b0:0e:fe:fe:39:c9:2d:c3:f3:a9:fb:25:6e:
         a4:71:f1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net