Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3135362e302f32322d3234203d3e203437353833.roa
File:                     3134352e31342e3135362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          GRpgxKzO9lYR5PqfKb8aiYpf6RsGO4hU0dzoYpZ7zrs=
Subject key identifier:   8E:D9:3D:1D:D6:2F:13:9D:FC:7C:73:7E:FB:8F:69:39:60:8C:82:1B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7366A62090C92CA4DF2F51C3C827F6C8BCC2C657
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3135362e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:28 +0000
ROA not before:           Sat 22 Oct 2022 04:29:28 +0000
ROA not after:            Sat 21 Oct 2023 04:34:28 +0000
asID:                     47583
IP address blocks:        145.14.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:66:a6:20:90:c9:2c:a4:df:2f:51:c3:c8:27:f6:c8:bc:c2:c6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:28 2022 GMT
            Not After : Oct 21 04:34:28 2023 GMT
        Subject: CN=8ED93D1DD62F139DFC7C737EFB8F6939608C821B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:2c:11:64:a8:de:97:74:84:14:11:b7:cf:
                    31:21:26:93:71:8a:30:0d:e1:bc:ac:22:22:bc:55:
                    a1:9f:22:f0:2c:3d:ae:af:7e:8d:45:e2:fd:82:88:
                    78:79:80:1b:e7:92:6e:85:54:85:d8:98:17:22:88:
                    94:db:ad:0f:25:f2:6e:fb:40:d7:d4:f7:0f:22:04:
                    ae:04:7d:f4:83:36:02:9a:c1:bd:66:b7:dd:97:03:
                    a9:96:c3:ea:a4:65:29:41:78:83:f2:f9:a6:7b:3c:
                    e5:16:12:77:5f:1d:a1:94:b3:32:77:fc:1b:9f:93:
                    8c:82:49:a7:a8:ec:0c:9b:59:aa:fb:d0:15:50:d3:
                    bd:9d:c5:c4:e1:3c:a3:e2:18:b9:35:f2:57:86:1d:
                    ff:d2:56:7b:fe:4e:3d:e2:73:33:ca:6f:2b:38:f3:
                    ae:94:14:60:ab:30:80:a1:1e:55:f9:70:b6:51:c7:
                    99:51:97:e7:50:1f:6f:7b:ad:ce:2e:7a:1e:47:d3:
                    1c:9d:ef:05:29:8d:d3:65:3f:0f:41:8c:85:c9:be:
                    fb:af:bf:f3:c6:e6:9f:55:d5:bc:fd:9f:6c:b7:8c:
                    a1:3f:e3:71:2b:7d:88:ab:20:6a:3b:60:9f:ba:cd:
                    04:fa:cc:86:8c:cd:c5:01:45:62:52:6a:47:91:40:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D9:3D:1D:D6:2F:13:9D:FC:7C:73:7E:FB:8F:69:39:60:8C:82:1B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3135362e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.14.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:85:46:f4:c5:fb:5c:20:7c:05:f2:51:50:42:82:ec:16:e7:
         db:bf:6f:ac:b8:46:74:b8:d0:f7:36:80:51:9e:3c:e6:57:4d:
         1c:c6:e9:47:e1:8b:5d:de:9c:ca:11:d2:4e:22:9c:0d:b4:5c:
         23:c2:45:4a:01:04:91:32:83:67:9f:94:8e:23:fa:44:81:99:
         be:aa:25:4a:e9:47:75:72:f4:36:c8:b6:9d:f2:8a:00:63:73:
         ab:fb:3e:e9:ac:b6:f3:90:27:c3:64:e7:32:29:10:23:94:00:
         7a:25:1e:52:40:94:3e:b2:bf:eb:a1:9b:a1:bb:34:ae:4d:a9:
         19:a2:60:ac:7f:4a:43:c7:c1:6e:b4:e9:24:7e:b3:a0:cb:fb:
         66:48:3d:85:74:61:2c:28:f5:40:39:81:e5:48:02:f9:f5:86:
         9b:e8:7b:20:b5:ef:18:db:9f:d1:ea:2c:f9:4b:57:bc:5d:b1:
         2d:79:bf:fc:7d:1c:ad:42:3e:7a:0d:5c:2c:2f:85:e9:09:37:
         ed:19:87:8a:e5:2a:c4:c0:fa:1e:9f:95:80:15:f0:54:76:78:
         03:8a:d2:ab:aa:ac:2a:d0:cc:ef:f5:81:8a:06:70:42:a8:37:
         e1:83:9e:c2:1e:ae:76:29:ea:de:f8:2c:5d:6f:4c:69:29:17:
         94:e9:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net