Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa
File:                     3135312e3130362e39362e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier:          3VG4xXPJcpRrakhUJdSktux/Vlbj+VDG7of6O74hnbI=
Subject key identifier:   AA:53:A0:AF:7F:B1:51:24:B2:41:19:6A:B5:33:A4:8E:91:59:BD:FA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       745C27F424FAAF94C4BC061E20B245C75EF636E3
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:13 +0000
ROA not before:           Sat 22 Oct 2022 04:29:13 +0000
ROA not after:            Sat 21 Oct 2023 04:34:13 +0000
asID:                     47583
IP address blocks:        151.106.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5c:27:f4:24:fa:af:94:c4:bc:06:1e:20:b2:45:c7:5e:f6:36:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:13 2022 GMT
            Not After : Oct 21 04:34:13 2023 GMT
        Subject: CN=AA53A0AF7FB15124B241196AB533A48E9159BDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:07:e0:3a:e0:c4:24:6d:65:4d:37:30:fa:
                    a9:fe:e6:55:b2:1f:c5:e9:b6:bd:82:70:e5:1a:54:
                    ab:d7:0a:9e:fa:bc:01:7e:12:64:db:c6:11:0e:41:
                    53:86:0c:c0:4e:8e:0b:96:56:5d:de:df:92:f5:f2:
                    d9:86:05:95:d6:3c:00:eb:a8:8f:f9:eb:86:9f:cf:
                    18:ff:69:f8:46:4d:26:16:60:c5:22:c4:7a:db:37:
                    45:11:70:35:cb:17:34:8a:50:57:da:44:af:dd:c2:
                    03:f9:22:4d:33:77:d2:64:ea:e2:f1:d0:e5:9b:b0:
                    b1:b9:d8:01:a4:61:e5:59:2a:39:bf:1b:23:d3:b1:
                    3d:db:a6:89:45:37:dc:18:cc:52:a1:51:89:d1:34:
                    55:67:c7:fd:5f:ff:5f:db:03:74:c2:5e:b8:e7:2a:
                    9f:93:a3:a9:e9:77:ea:26:a4:80:5f:cc:38:8e:6e:
                    cc:f0:00:cb:bf:b5:24:74:9d:46:88:aa:76:8a:2f:
                    96:7e:13:f6:ab:62:01:f7:37:bc:09:c2:7f:29:af:
                    d2:a1:f7:8f:b6:37:8f:a8:1e:e2:f5:4a:a9:b7:2f:
                    8d:06:ea:c7:67:85:1a:6d:f4:6f:b1:5c:be:eb:4a:
                    0c:f7:e1:3b:61:e3:5d:33:20:ef:a2:c3:5a:91:d6:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:53:A0:AF:7F:B1:51:24:B2:41:19:6A:B5:33:A4:8E:91:59:BD:FA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.106.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:ba:dc:21:0c:20:df:c3:8a:8b:b3:aa:6f:65:09:f2:d8:c6:
         ba:ee:92:7a:38:4a:9a:bf:80:ed:a4:34:b6:83:42:43:cb:a8:
         18:86:e8:45:ca:f7:4a:42:19:1a:76:77:70:77:d7:f9:3a:1a:
         51:ad:f2:d0:aa:d9:4d:0b:51:f1:05:7b:97:c9:ac:62:f7:2c:
         04:86:7d:6a:6e:d8:54:7c:69:9c:3f:1c:ac:7d:e0:88:1d:90:
         9d:92:0f:6a:47:3b:1e:ec:0e:82:3f:d1:50:83:e9:01:1d:dc:
         5c:ba:d2:b6:f8:98:82:56:6f:f0:31:e5:a6:50:9e:5b:43:d3:
         1c:4c:ba:93:b4:10:f6:20:ae:b9:75:12:3c:3b:25:13:50:b3:
         b5:9b:0f:c8:63:b6:1e:11:9c:74:fe:b9:b1:e5:37:62:73:48:
         80:41:46:22:08:d7:c0:06:75:18:4a:37:fd:85:b8:06:6f:4b:
         a5:98:9a:f4:b7:30:40:f3:ad:77:9d:ed:a9:67:87:9b:1d:24:
         d3:1d:b2:76:b5:a9:e7:a8:f7:65:2f:1c:20:9e:98:43:46:f6:
         44:29:a2:63:d9:67:ee:77:9e:76:57:0f:54:e0:96:f3:c8:63:
         0e:01:ff:93:2e:b0:37:60:8c:7a:d0:15:48:db:e4:a0:54:e8:
         89:85:70:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net