Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e31342e302f32342d3234203d3e20313336373837.roa
File:                     3135352e3133332e31342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          nlvqy3LN/mxfTZ1t2N+aEDJQHTG+V//g/DTeU4hnaHA=
Subject key identifier:   BD:72:3C:62:D5:7C:DD:E5:01:88:86:D5:FA:F4:FA:5A:52:F3:01:AE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2D2B4CBB10AC22A05839DF66C64320F5CCA1564F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e31342e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:30 +0000
ROA not before:           Sat 22 Oct 2022 04:29:30 +0000
ROA not after:            Sat 21 Oct 2023 04:34:30 +0000
asID:                     136787
IP address blocks:        155.133.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2b:4c:bb:10:ac:22:a0:58:39:df:66:c6:43:20:f5:cc:a1:56:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:30 2022 GMT
            Not After : Oct 21 04:34:30 2023 GMT
        Subject: CN=BD723C62D57CDDE5018886D5FAF4FA5A52F301AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:8f:dd:a4:c7:fd:12:e7:89:8c:95:04:d8:
                    7f:d4:9c:31:0c:99:2b:c8:fe:1d:d6:c6:63:be:ec:
                    d9:35:11:63:0a:6a:8a:38:fc:e8:ea:11:a7:fc:b7:
                    49:1b:76:d3:f4:5d:22:5a:a2:a9:a0:14:4a:5a:5e:
                    87:ae:1f:51:a5:1b:3d:f7:ca:10:8c:22:45:97:c6:
                    a1:aa:36:7c:22:7d:6e:56:a4:f5:d8:a8:aa:68:32:
                    b1:75:16:dd:df:f6:72:35:b8:e4:f0:2d:49:96:e9:
                    b4:95:14:76:0a:15:53:d4:da:0a:21:c3:c6:d1:d9:
                    97:5b:c2:c0:91:a3:50:e3:fb:db:bf:2c:ae:cc:37:
                    57:ab:e2:7b:b4:1e:ae:79:98:59:89:fe:ee:36:38:
                    31:20:1c:99:35:4e:ce:0b:43:bc:84:14:25:04:43:
                    a5:c9:1c:e8:9a:13:d6:2d:49:02:30:6c:3a:a6:f5:
                    aa:f4:5a:2b:1f:f3:c2:04:b6:43:96:b0:b9:73:12:
                    23:8c:28:42:a5:c1:c7:60:ba:0b:86:60:ad:be:13:
                    22:13:94:6e:d0:58:f6:54:a1:17:b8:70:c8:23:28:
                    45:04:e4:f4:86:62:f4:8e:e4:01:95:80:61:c7:01:
                    8a:38:83:a1:75:8f:bc:49:3b:a5:4f:3c:37:0d:9d:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:72:3C:62:D5:7C:DD:E5:01:88:86:D5:FA:F4:FA:5A:52:F3:01:AE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e31342e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:ec:d4:5a:78:89:8c:74:30:14:b6:9b:09:1a:d4:fc:5e:ef:
         1c:20:68:72:70:cb:ed:e0:7a:9e:40:8d:5e:e7:bc:5b:8a:3c:
         fd:fd:9c:af:12:30:dc:ce:af:05:0e:3f:b5:a8:9c:4d:40:aa:
         b7:41:c1:4c:c2:70:e1:da:5e:89:3d:42:7d:be:d1:58:78:53:
         c6:09:dd:70:84:80:93:ab:7c:9f:9e:2b:b3:f5:4a:09:85:5c:
         da:c4:85:8c:2f:05:c3:9e:f9:23:e7:57:c9:62:4d:5e:5f:7d:
         da:82:83:4a:a6:70:7f:da:99:e4:ef:8a:5d:97:79:c3:57:5c:
         4e:c0:04:7e:53:8d:af:7f:56:88:a7:71:87:cd:c7:87:b9:25:
         b0:43:ce:26:45:55:a3:41:58:93:a4:01:f9:42:4a:d8:76:7e:
         0d:8e:fe:ae:77:95:02:6c:28:d4:89:51:d1:f3:33:8b:6b:fa:
         2e:fb:ce:bd:50:a2:7d:ad:bf:e7:63:6e:9f:15:2d:33:83:da:
         92:e5:52:78:18:a2:b9:bc:f0:2c:2d:59:a3:5d:7e:48:aa:11:
         f7:c4:16:92:6b:2f:5f:62:7d:06:fa:23:f6:b7:29:03:d0:98:
         e5:3f:1b:fd:e5:1d:28:a1:ff:0a:10:18:20:47:56:d5:25:c7:
         6c:5a:50:ba
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIULStMuxCsIqBYOd9mxkMg9cyhVk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MzBaFw0yMzEwMjEwNDM0MzBaMDMxMTAvBgNV
BAMTKEJENzIzQzYyRDU3Q0RERTUwMTg4ODZENUZBRjRGQTVBNTJGMzAxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9So/dpMf9EueJjJUE2H/UnDEM
mSvI/h3WxmO+7Nk1EWMKaoo4/OjqEaf8t0kbdtP0XSJaoqmgFEpaXoeuH1GlGz33
yhCMIkWXxqGqNnwifW5WpPXYqKpoMrF1Ft3f9nI1uOTwLUmW6bSVFHYKFVPU2goh
w8bR2ZdbwsCRo1Dj+9u/LK7MN1er4nu0Hq55mFmJ/u42ODEgHJk1Ts4LQ7yEFCUE
Q6XJHOiaE9YtSQIwbDqm9ar0Wisf88IEtkOWsLlzEiOMKEKlwcdguguGYK2+EyIT
lG7QWPZUoRe4cMgjKEUE5PSGYvSO5AGVgGHHAYo4g6F1j7xJO6VPPDcNnZ3BAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUvXI8YtV83eUBiIbV+vT6WlLzAa4wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM1MzUyZTMxMzMzMzJlMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAJuFDjANBgkqhkiG9w0BAQsFAAOCAQEAwezU
WniJjHQwFLabCRrU/F7vHCBocnDL7eB6nkCNXue8W4o8/f2crxIw3M6vBQ4/taic
TUCqt0HBTMJw4dpeiT1Cfb7RWHhTxgndcISAk6t8n54rs/VKCYVc2sSFjC8Fw575
I+dXyWJNXl992oKDSqZwf9qZ5O+KXZd5w1dcTsAEflONr39WiKdxh83Hh7klsEPO
JkVVo0FYk6QB+UJK2HZ+DY7+rneVAmwo1IlR0fMzi2v6LvvOvVCifa2/52NunxUt
M4PakuVSeBiiubzwLC1Zo11+SKoR98QWkmsvX2J9Bvoj9rcpA9CY5T8b/eUdKKH/
ChAYIEdW1SXHbFpQug==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net