Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa
File:                     3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier:          AYAF9qnsJsiuK7XDeOpQE6r2ddT5JMygxY2FiLgXMIo=
Subject key identifier:   AE:61:FF:46:F1:65:73:5B:F1:F0:1C:DA:9F:73:A4:00:7A:55:24:D0
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0EC0E6BB53CA8F703F998E3ABDD782E32EBD0BE5
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa
Signing time:             Tue 22 Nov 2022 11:27:01 +0000
ROA not before:           Tue 22 Nov 2022 11:22:01 +0000
ROA not after:            Tue 21 Nov 2023 11:27:01 +0000
asID:                     141995
IP address blocks:        109.123.227.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c0:e6:bb:53:ca:8f:70:3f:99:8e:3a:bd:d7:82:e3:2e:bd:0b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 22 11:22:01 2022 GMT
            Not After : Nov 21 11:27:01 2023 GMT
        Subject: CN=AE61FF46F165735BF1F01CDA9F73A4007A5524D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:1a:bc:69:b9:60:0d:61:87:af:83:58:e8:
                    db:30:42:ad:9b:da:10:d1:fa:33:1c:8c:17:34:76:
                    8c:9a:0f:f5:6c:27:29:f2:bc:9e:ca:fb:9f:fb:9c:
                    b4:aa:8b:11:49:e4:9d:70:3e:88:fd:9c:c7:e0:4d:
                    2d:cc:b1:d8:99:d2:d5:44:a0:d4:7b:8e:47:8c:97:
                    fb:df:8a:bb:e2:61:72:c1:91:43:82:92:e9:61:3d:
                    18:c5:5a:3a:f8:60:da:76:69:0f:05:90:72:67:66:
                    0b:33:75:da:13:89:00:3e:ac:b6:86:ee:2f:5b:2a:
                    6e:c7:80:33:24:98:4f:d6:2a:9f:e9:4d:fc:44:aa:
                    1c:64:44:93:b7:69:7e:38:3c:4a:2b:d5:8d:99:7b:
                    02:64:c1:37:91:bb:9d:2a:9b:09:73:8f:d9:3d:e8:
                    69:ad:f4:73:dc:79:b0:56:4e:84:dc:e8:19:b6:bb:
                    cb:2e:67:77:f2:cb:49:b2:84:88:ec:12:34:c8:5d:
                    1d:9e:77:8f:91:44:73:50:01:0f:48:30:66:f7:e9:
                    bf:45:d1:96:9b:e8:72:87:ca:12:9e:c2:e2:67:1d:
                    a0:fd:54:37:91:3e:df:8a:cb:6e:59:95:06:d6:94:
                    22:c3:f9:87:31:8b:91:98:e1:57:8d:b8:32:7b:9b:
                    d0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:61:FF:46:F1:65:73:5B:F1:F0:1C:DA:9F:73:A4:00:7A:55:24:D0
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.123.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:81:2b:18:7e:df:12:59:7a:39:bd:7f:be:01:3c:1c:29:71:
         62:46:e6:64:73:17:5b:b9:ae:d7:67:61:61:18:a3:5c:9c:78:
         73:ff:26:dd:25:ab:06:21:f3:04:e0:6b:97:4c:ed:6f:70:53:
         f5:3f:b8:36:08:1d:4e:5a:45:fd:74:9d:30:87:ae:a4:f6:5b:
         bf:14:74:2c:15:c4:80:e4:59:26:e5:4c:99:56:8a:fb:92:43:
         03:42:d5:6d:01:09:45:47:f5:7a:49:95:dd:0f:45:b9:b2:0c:
         55:e4:28:6a:54:a3:3a:9d:70:78:e4:dc:53:75:ad:4c:30:a7:
         2c:dc:42:39:b7:a9:94:f2:6e:65:36:50:af:8d:2d:bd:7b:01:
         06:03:3b:07:27:2e:ee:f6:4f:16:5d:76:8a:06:85:77:b6:46:
         62:3c:fc:b3:6e:c3:62:53:98:b4:e8:ed:7f:45:18:6c:74:20:
         6f:88:43:4f:60:98:a3:ef:03:38:8c:57:a1:59:be:66:f8:c5:
         d6:da:ce:83:71:48:66:e9:9b:45:ae:14:f5:8e:c8:7a:e7:38:
         82:3c:1e:fa:7d:d4:fa:71:f3:f8:e6:30:3a:d4:78:da:08:15:
         3e:89:f2:55:88:ec:d5:e7:ce:22:dd:da:00:b7:96:83:04:90:
         c6:16:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net