Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3134342e302f32332d3234203d3e20323034393135.roa
File:                     3134352e31342e3134342e302f32332d3234203d3e20323034393135.roa (raw, json)
Hash identifier:          ccvdysezkFn0C1Dndxc0xKggi+45nplt584DxxXBt24=
Subject key identifier:   CB:95:5A:FF:EA:83:CA:23:09:E6:25:DD:56:38:33:7A:E1:6D:EC:F3
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       451C63617775E569CD1D305E741745D714DEA465
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3134342e302f32332d3234203d3e20323034393135.roa
Signing time:             Sat 22 Oct 2022 04:34:26 +0000
ROA not before:           Sat 22 Oct 2022 04:29:26 +0000
ROA not after:            Sat 21 Oct 2023 04:34:26 +0000
asID:                     204915
IP address blocks:        145.14.144.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1c:63:61:77:75:e5:69:cd:1d:30:5e:74:17:45:d7:14:de:a4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:26 2022 GMT
            Not After : Oct 21 04:34:26 2023 GMT
        Subject: CN=CB955AFFEA83CA2309E625DD5638337AE16DECF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:78:a1:9a:6b:75:fb:dc:fd:fa:d2:76:6a:
                    5e:2b:47:bd:6d:e1:61:92:a7:8a:31:df:b7:94:94:
                    00:51:69:3c:6d:44:21:ba:ec:b8:1f:d8:86:71:f9:
                    16:d2:a9:33:35:f4:bc:30:3f:68:94:2a:8e:32:41:
                    94:e1:78:14:8a:75:54:3d:5a:0a:34:cd:39:82:90:
                    cc:aa:27:25:bd:c8:86:10:0d:b4:95:df:8a:87:05:
                    e9:67:ad:48:33:85:f7:b7:16:2a:61:ff:9f:2d:a3:
                    f1:2b:d1:90:73:8a:89:ef:73:8e:66:bd:3c:70:86:
                    df:ad:c2:83:74:d1:cf:a7:39:56:9c:fe:d7:56:a3:
                    e6:2c:ef:6d:9c:41:4a:2b:02:1a:59:e5:2d:fb:54:
                    79:65:18:e0:8b:73:18:ba:66:41:fc:c9:b8:69:b8:
                    8a:e3:2e:ca:30:04:6c:26:f3:7e:d1:0a:4a:32:34:
                    54:27:fa:f0:03:34:ad:91:7f:62:98:cd:9f:e4:fc:
                    39:0f:c8:37:de:b5:9e:84:23:6b:a1:32:dc:59:40:
                    36:9f:36:b7:78:57:b1:6e:24:02:cf:b1:0d:9d:78:
                    0f:df:fe:32:50:e6:00:fa:bc:2b:9f:0f:01:39:0a:
                    e1:ed:af:8a:34:26:03:e8:37:4c:93:07:ff:f7:98:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:95:5A:FF:EA:83:CA:23:09:E6:25:DD:56:38:33:7A:E1:6D:EC:F3
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3134342e302f32332d3234203d3e20323034393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.14.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:a4:e0:0d:cd:7d:62:36:30:ee:a1:7c:24:00:26:1f:7c:37:
         39:c1:f1:32:86:ce:66:69:ce:fe:93:3c:1a:ed:17:e5:9b:69:
         1f:f8:99:3a:13:42:3e:6f:dd:e6:26:ef:d4:0f:fa:03:bc:12:
         f4:19:49:6b:7d:73:16:08:cc:d3:54:9c:62:97:a5:47:64:af:
         7e:58:32:67:ac:df:23:49:53:fe:a9:83:5f:8a:ba:06:82:71:
         aa:8e:48:77:0f:9a:7c:11:8b:9f:dd:a9:91:e1:4d:ad:27:4f:
         0c:e3:2a:27:ee:ef:5e:e8:3a:3d:66:e6:c9:bf:16:bc:de:71:
         18:e3:5a:a0:4b:0b:0e:5b:d3:5d:7e:14:4b:71:34:53:2c:09:
         eb:3f:9a:1a:97:d1:34:5b:fc:5a:bf:f9:38:9b:7f:6c:ff:20:
         6a:29:b8:82:e8:ce:4b:d7:8f:32:f6:d6:83:1f:75:80:55:0e:
         3d:11:3b:89:a1:d8:e2:b8:c4:e6:38:ae:93:50:2b:22:63:c7:
         3d:07:fa:95:d8:56:7d:d8:71:40:82:9d:a2:47:99:9f:58:62:
         42:c6:b6:d6:ce:55:33:3e:05:65:a8:67:ea:d5:14:5a:df:04:
         8d:9b:d4:48:b1:e7:c2:5f:1f:6e:27:b3:ef:59:35:e6:17:82:
         e4:bf:59:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net