Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234352e3235342e302f32332d3233203d3e20323030303634.roa
File:                     3138352e3234352e3235342e302f32332d3233203d3e20323030303634.roa (raw, json)
Hash identifier:          xSonqCoFXOiekVs8uMdiG4g9jMXeK/68zwozPFrQVSE=
Subject key identifier:   7D:6B:F0:66:52:B7:53:92:F2:E2:67:DA:F9:55:ED:13:E4:8C:F2:C2
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       10D34BC28F2D228C134E7501F94FC2A2C9ACA9D7
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234352e3235342e302f32332d3233203d3e20323030303634.roa
Signing time:             Tue 28 Jun 2022 04:40:58 +0000
ROA not before:           Tue 28 Jun 2022 04:35:58 +0000
ROA not after:            Tue 27 Jun 2023 04:40:58 +0000
asID:                     200064
IP address blocks:        185.245.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d3:4b:c2:8f:2d:22:8c:13:4e:75:01:f9:4f:c2:a2:c9:ac:a9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Jun 28 04:35:58 2022 GMT
            Not After : Jun 27 04:40:58 2023 GMT
        Subject: CN=7D6BF06652B75392F2E267DAF955ED13E48CF2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:57:f1:e1:e2:a5:45:ec:b6:26:d9:8c:6c:
                    17:42:28:79:5c:54:a8:16:8d:65:0f:81:b2:6d:47:
                    6d:21:93:e4:11:aa:d2:cc:14:92:ca:2c:83:8e:fc:
                    26:ec:66:5e:90:0f:29:94:2a:a6:f2:d3:53:85:67:
                    d1:ae:81:80:fe:9c:14:44:0c:eb:0c:a3:6c:b8:49:
                    92:9d:5a:f4:d3:f5:8f:e0:da:0e:39:99:4c:68:f1:
                    a9:45:61:fc:bf:4e:95:6e:e0:3a:90:b2:80:fc:ae:
                    6e:65:46:04:00:a3:1a:89:a5:62:1c:4f:ee:cb:d1:
                    67:97:1d:fb:9c:be:83:05:ff:44:3e:e6:fd:e9:d6:
                    2d:c9:c1:02:12:5c:36:8e:a1:17:c5:f1:47:d3:d8:
                    44:be:4b:2e:bd:19:2a:06:b5:d1:c8:10:26:07:e8:
                    7e:66:f6:67:14:d4:d1:86:1f:4c:5c:ee:22:62:3b:
                    5a:0e:8d:52:69:c5:1d:82:74:2a:49:b5:d2:db:d5:
                    2f:d1:cf:8f:a2:d8:91:b9:f8:3a:9a:cb:3c:4e:3f:
                    b5:8b:74:99:87:d1:38:bc:00:d1:ca:de:df:10:14:
                    48:49:2c:67:3e:4f:34:91:f8:0d:f2:37:44:a3:8d:
                    31:92:fc:b1:e7:72:d7:4b:a2:f2:90:7d:fa:11:4d:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6B:F0:66:52:B7:53:92:F2:E2:67:DA:F9:55:ED:13:E4:8C:F2:C2
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234352e3235342e302f32332d3233203d3e20323030303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:95:70:1c:46:ba:ee:6c:e0:dd:60:94:b4:40:6a:ed:3f:3f:
         ac:2a:48:63:fb:71:08:aa:5d:bf:5c:f3:b3:7a:f9:8b:88:05:
         e4:38:c8:67:6a:fc:60:90:c3:7d:6b:11:00:ef:43:55:06:11:
         ae:f3:12:71:fa:28:c9:d2:aa:aa:ba:fc:65:8a:c8:b3:0b:96:
         cc:92:28:dd:98:c2:81:74:da:06:43:09:72:1d:f7:60:1c:d6:
         65:6e:c5:17:9b:d4:8b:df:2b:98:2e:59:20:3a:a8:87:71:68:
         72:80:a8:c6:a5:a0:d9:ef:03:86:dc:9b:58:22:44:37:5b:ec:
         08:f7:25:65:00:a2:82:cb:39:1c:35:f0:51:58:27:70:10:29:
         41:a0:f6:5f:bc:75:d7:1f:83:4e:25:b5:84:7b:66:96:69:22:
         25:95:a8:d6:98:f3:ab:b2:99:f7:b2:63:5b:c6:2e:5a:e0:d3:
         57:17:fd:2c:9c:87:29:5e:10:56:1d:69:73:ec:ef:19:e0:c7:
         85:5e:d6:5e:16:25:f3:22:9f:21:80:84:cf:91:5f:6f:0e:03:
         e6:c1:d8:b0:76:13:69:98:80:c7:95:f6:af:61:96:70:5e:a4:
         ae:6e:01:26:13:af:53:02:76:f7:75:39:e6:3b:bf:7a:4d:5f:
         f8:e2:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net