Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234332e35382e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3234332e35382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          rWeaz39qH8dB3z93IXoCysaSWd59ENrTl31i7hjoKMY=
Subject key identifier:   A5:BB:D1:9C:89:8F:D8:77:B5:7C:89:97:92:58:73:D0:21:F2:32:A9
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       6A0ACE1C3D9FA8BE1EDE6258DE01C2680314C53C
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234332e35382e302f32342d3234203d3e20313336373837.roa
Signing time:             Wed 07 Dec 2022 21:47:28 +0000
ROA not before:           Wed 07 Dec 2022 21:42:28 +0000
ROA not after:            Wed 06 Dec 2023 21:47:28 +0000
asID:                     136787
IP address blocks:        185.243.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0a:ce:1c:3d:9f:a8:be:1e:de:62:58:de:01:c2:68:03:14:c5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Dec  7 21:42:28 2022 GMT
            Not After : Dec  6 21:47:28 2023 GMT
        Subject: CN=A5BBD19C898FD877B57C8997925873D021F232A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cf:e9:ce:c7:0c:ad:ae:33:58:c9:6d:0e:03:
                    c2:a6:5e:9d:9c:d9:8a:03:ca:da:16:71:19:ac:c5:
                    0c:34:29:46:0a:db:ab:c7:91:dc:86:b8:56:22:df:
                    8c:61:8f:8f:3a:91:97:26:69:03:9f:b7:5b:c0:a6:
                    73:08:22:f1:54:7a:5d:30:3c:45:b9:8f:fa:50:c0:
                    84:0a:1b:31:9b:98:f4:ee:fe:62:92:90:c2:87:44:
                    bb:88:b3:8e:a5:15:74:00:37:8f:ea:2c:dd:10:68:
                    4d:c1:00:ed:62:14:54:e0:74:93:fc:33:28:ca:76:
                    d3:ce:a0:a4:46:b6:f7:61:1e:a1:b1:e8:af:17:5c:
                    65:39:94:65:32:ae:ea:8e:41:e1:b0:97:c6:34:02:
                    4b:a5:4e:aa:20:3a:da:37:83:f3:8a:69:40:7a:d3:
                    dd:68:9a:cc:9c:ee:f8:b3:91:99:08:58:ad:f1:7a:
                    79:98:6c:7e:10:c8:25:5c:8f:73:a9:34:e1:a0:b5:
                    5c:32:33:ce:a5:5b:3a:85:b6:bb:e4:4d:21:ee:0b:
                    e0:c7:5d:61:eb:07:4a:31:d2:34:40:27:7a:5c:7f:
                    b7:54:bd:81:51:87:d6:9f:1c:85:36:9a:f5:5b:bc:
                    26:67:ee:d8:d5:e2:39:7e:c6:c8:f0:a5:ee:55:64:
                    09:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BB:D1:9C:89:8F:D8:77:B5:7C:89:97:92:58:73:D0:21:F2:32:A9
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234332e35382e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:02:1f:72:a1:08:a6:b1:3a:b3:a4:93:ec:b1:ba:0d:c6:
         33:52:e1:bb:4b:e3:d4:56:9e:a1:50:b5:c8:06:86:1c:99:bd:
         3c:1a:3b:17:26:1f:a2:93:e5:9e:06:c3:40:49:4b:92:5d:08:
         e9:da:91:4a:e7:9f:a5:db:c9:19:9c:33:e0:1f:b8:6a:18:3b:
         22:e5:15:5c:f4:b0:88:b8:86:c4:2b:2c:f1:e2:db:23:e2:d6:
         05:c5:ef:8d:de:7f:e8:6b:46:22:99:ef:fa:9a:ec:75:52:d0:
         a9:ec:72:cb:fb:ea:56:e6:6e:1e:ac:5d:6b:ad:56:69:e5:4c:
         89:58:a6:cc:06:a4:fc:43:2e:c2:29:62:38:77:d5:f4:44:22:
         24:66:73:5b:4f:e1:03:1e:d3:84:e6:7f:b3:2c:6f:6b:05:80:
         ea:54:53:5e:23:aa:cf:b6:e0:73:e0:f8:3e:b6:71:7c:e5:54:
         ab:30:8d:e3:81:45:43:ad:9b:2e:8a:9f:b1:52:90:c3:0f:3d:
         3e:b6:f9:28:1b:0e:e4:ee:58:57:b0:f0:44:04:82:c9:7e:fe:
         5c:3d:46:63:3d:f6:9d:cd:74:a9:d5:a5:64:45:18:f8:f5:86:
         8d:6d:ea:7e:28:eb:ec:15:49:61:37:9b:e8:e7:2f:cd:42:af:
         07:4f:cf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net