Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135332e39322e3139312e302f32342d3234203d3e20323031333431.roa
File:                     3135332e39322e3139312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          kRFUqlvLuFQG7R3vepITk05cDlMG/XpXGP7srLXqUos=
Subject key identifier:   2B:7D:F9:E6:43:61:4A:D6:9D:E0:E5:9F:AA:C7:C7:AC:A9:44:A2:47
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6D9297F229359A18F65A880D1ADEE101AA70BE68
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135332e39322e3139312e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:32 +0000
ROA not before:           Sat 22 Oct 2022 04:29:32 +0000
ROA not after:            Sat 21 Oct 2023 04:34:32 +0000
asID:                     201341
IP address blocks:        153.92.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:92:97:f2:29:35:9a:18:f6:5a:88:0d:1a:de:e1:01:aa:70:be:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:32 2022 GMT
            Not After : Oct 21 04:34:32 2023 GMT
        Subject: CN=2B7DF9E643614AD69DE0E59FAAC7C7ACA944A247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:6c:af:3f:99:ba:27:8a:cd:bc:14:fc:53:
                    e9:2f:d3:d1:ee:b4:7e:b7:1e:ca:6b:7d:65:42:6c:
                    62:d0:17:10:db:e7:1c:89:d3:3e:64:10:f6:a6:c1:
                    ee:c9:4a:23:bb:5c:d3:83:24:5d:65:45:99:89:df:
                    d7:75:c2:e2:34:c5:bc:76:4f:ee:d2:61:39:c9:7d:
                    dc:6e:54:f0:a9:64:b3:34:80:6a:1f:01:39:a6:7b:
                    4f:99:bb:0f:ec:6f:f0:9e:a3:fe:1e:bd:86:b9:e4:
                    ac:47:1b:94:1c:aa:81:66:12:1b:74:d1:ee:29:6c:
                    64:56:17:17:ba:ab:e4:e2:ab:e8:4f:d0:1f:92:21:
                    49:83:da:57:b3:b0:6d:af:a6:f4:b2:16:26:92:f6:
                    31:37:60:0e:02:e9:c1:7a:0a:08:69:40:23:fe:3b:
                    f8:43:48:be:c1:81:4e:67:28:4e:b0:f8:12:2c:58:
                    b5:cb:d2:f5:03:49:8c:55:e9:47:13:f7:84:f3:ec:
                    fe:e4:54:32:4f:40:2a:5a:cb:40:17:62:78:a4:ab:
                    71:6b:aa:02:38:c2:b0:b5:ec:80:3a:8e:b9:7d:ad:
                    55:f5:bb:5b:f8:c8:b9:58:52:f5:74:a8:a1:e3:e9:
                    34:b0:61:15:2a:30:3f:54:e6:b7:45:2a:84:67:ae:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7D:F9:E6:43:61:4A:D6:9D:E0:E5:9F:AA:C7:C7:AC:A9:44:A2:47
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135332e39322e3139312e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.92.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ef:26:4c:0e:e7:a4:9b:63:d8:23:71:7d:f4:a6:8a:91:c7:
         0b:f6:a5:4e:9b:6f:75:46:4c:05:ea:ff:b2:02:77:3e:1b:8c:
         2f:23:dc:f7:e5:6d:c8:e7:00:b7:33:54:b1:87:4b:3b:7c:63:
         23:c5:37:c8:56:ea:a2:ac:3b:58:49:fd:36:cd:f9:20:c1:c1:
         40:8b:d4:76:1d:08:3b:0f:fe:26:ff:00:b3:c1:31:da:6a:d7:
         cd:97:e3:86:97:1f:bd:04:3f:63:85:2d:e9:63:df:4b:d5:ea:
         07:4f:49:0f:f6:43:7c:57:24:fc:5f:39:37:f8:9a:61:2a:5c:
         4a:c4:55:be:35:e7:95:ec:dd:53:8d:22:62:80:6c:ac:9e:57:
         44:37:e3:1d:0c:a3:34:f6:3c:a3:33:1c:91:e1:ce:89:57:47:
         42:4d:87:2f:d2:2a:12:79:aa:6b:c1:a5:41:8c:1f:1f:9f:85:
         84:58:7c:77:62:91:01:c1:9a:5b:6a:c2:d7:45:00:89:1f:c1:
         71:f0:4e:57:48:cc:d0:da:ee:98:c4:53:dc:36:9c:07:fd:ab:
         92:b5:13:bd:dc:1f:73:3e:0d:3d:70:4c:5a:51:f8:b7:2d:a7:
         dd:23:35:3d:2e:29:04:2d:3a:8d:76:98:6f:07:c5:c1:b8:f4:
         6d:13:db:ad
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUbZKX8ik1mhj2WogNGt7hAapwvmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MzJaFw0yMzEwMjEwNDM0MzJaMDMxMTAvBgNV
BAMTKDJCN0RGOUU2NDM2MTRBRDY5REUwRTU5RkFBQzdDN0FDQTk0NEEyNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZ2yvP5m6J4rNvBT8U+kv09Hu
tH63HsprfWVCbGLQFxDb5xyJ0z5kEPamwe7JSiO7XNODJF1lRZmJ39d1wuI0xbx2
T+7SYTnJfdxuVPCpZLM0gGofATmme0+Zuw/sb/Ceo/4evYa55KxHG5QcqoFmEht0
0e4pbGRWFxe6q+Tiq+hP0B+SIUmD2lezsG2vpvSyFiaS9jE3YA4C6cF6CghpQCP+
O/hDSL7BgU5nKE6w+BIsWLXL0vUDSYxV6UcT94Tz7P7kVDJPQCpay0AXYnikq3Fr
qgI4wrC17IA6jrl9rVX1u1v4yLlYUvV0qKHj6TSwYRUqMD9U5rdFKoRnrnVBAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUK3355kNhStad4OWfqsfHrKlEokcwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM1MzMyZTM5MzIyZTMxMzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAJlcvzANBgkqhkiG9w0BAQsFAAOCAQEASu8m
TA7npJtj2CNxffSmipHHC/alTptvdUZMBer/sgJ3PhuMLyPc9+VtyOcAtzNUsYdL
O3xjI8U3yFbqoqw7WEn9Ns35IMHBQIvUdh0IOw/+Jv8As8Ex2mrXzZfjhpcfvQQ/
Y4Ut6WPfS9XqB09JD/ZDfFck/F85N/iaYSpcSsRVvjXnlezdU40iYoBsrJ5XRDfj
HQyjNPY8ozMckeHOiVdHQk2HL9IqEnmqa8GlQYwfH5+FhFh8d2KRAcGaW2rC10UA
iR/BcfBOV0jM0NrumMRT3DacB/2rkrUTvdwfcz4NPXBMWlH4ty2n3SM1PS4pBC06
jXaYbwfFwbj0bRPbrQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net