Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa
File:                     3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier:          gXbPxpl7E8k/k3x7O/Skgz0y1IgP+eHD+P1/BMDX08s=
Subject key identifier:   AF:73:16:8D:71:6A:A6:55:5C:9B:D1:58:95:1C:CF:DE:94:F5:52:CD
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       591345EB9360504C7C7DF032CC16246F85F67A5A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:36 +0000
ROA not before:           Sat 22 Oct 2022 04:29:36 +0000
ROA not after:            Sat 21 Oct 2023 04:34:36 +0000
asID:                     201341
IP address blocks:        155.133.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:13:45:eb:93:60:50:4c:7c:7d:f0:32:cc:16:24:6f:85:f6:7a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:36 2022 GMT
            Not After : Oct 21 04:34:36 2023 GMT
        Subject: CN=AF73168D716AA6555C9BD158951CCFDE94F552CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:70:6d:b2:39:21:bf:d5:7c:9f:46:e5:f5:
                    35:20:5f:27:26:f4:e1:55:df:d6:79:46:31:ab:2f:
                    dc:37:ae:62:e7:b3:57:89:95:83:29:b6:ab:21:5c:
                    41:59:60:ad:da:b0:4a:fd:22:70:5a:13:fb:c0:56:
                    16:3a:53:1d:e5:8e:fc:87:36:df:1f:07:ea:48:75:
                    0d:10:2c:68:6b:1e:4c:95:2b:8f:50:6a:d7:b7:59:
                    98:e9:f3:f0:8a:17:08:cd:01:d6:8f:9e:f0:a3:62:
                    4c:40:d3:b6:39:5b:ac:08:17:71:3f:d3:ce:b9:e4:
                    54:f0:6a:0d:f2:60:4e:ce:1c:6e:99:9a:ee:6d:52:
                    65:9c:80:8b:c5:5c:df:04:58:a3:c3:8b:55:36:dd:
                    ec:f4:32:08:2e:60:64:a3:bd:62:2c:19:ed:d2:8c:
                    22:a7:ff:cc:b8:a3:46:63:1a:e9:04:42:7f:86:2b:
                    f9:d0:d3:5b:30:c6:d1:42:27:3a:9b:13:3d:be:29:
                    66:16:71:ad:e8:d0:ca:2a:ca:93:09:f6:f0:67:87:
                    26:97:bf:c3:e2:e3:93:d4:be:52:e1:a2:06:ef:1b:
                    a4:fa:f1:94:dc:7b:52:a2:e7:aa:a6:40:4b:82:e4:
                    46:3f:6d:f5:38:93:91:65:d5:f5:ac:ca:63:7f:73:
                    8e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:73:16:8D:71:6A:A6:55:5C:9B:D1:58:95:1C:CF:DE:94:F5:52:CD
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:10:38:56:fe:20:7d:c8:b4:8a:f8:fc:fe:6e:18:ad:53:e6:
         e8:d9:be:66:27:33:c5:65:f9:f1:4e:98:da:29:86:c6:67:50:
         74:25:32:bb:56:44:c0:b0:df:eb:b4:0c:10:10:ad:01:42:cf:
         51:08:7c:48:32:82:e6:11:04:b3:55:c4:5f:25:07:0d:67:90:
         47:5d:5f:1a:b9:d2:9d:12:c8:c5:78:93:a1:2c:06:87:ce:39:
         15:8d:89:32:21:b4:33:dc:db:08:ad:94:54:00:9c:ec:0b:d9:
         6b:c8:7c:64:fe:78:2d:51:ee:ce:6e:bd:49:68:e1:2e:d9:6c:
         a7:73:d6:43:89:af:86:3d:ba:0c:1a:c3:7e:8a:91:f8:d5:f9:
         bc:4c:89:4a:be:72:cc:9b:87:db:c5:cc:13:12:d4:57:b5:55:
         18:e4:9d:82:6b:ca:ac:20:bd:e7:28:e9:52:fc:d9:1a:a4:1f:
         d7:3f:e6:86:f4:68:e0:52:b4:e0:89:c9:af:37:3c:17:a9:cc:
         32:d6:ab:1b:57:1b:c8:86:06:df:e4:de:29:6d:4d:9c:e5:38:
         db:f1:7c:d2:f3:b2:c7:c4:60:71:2d:a2:2b:ec:99:58:94:a9:
         94:6d:e3:5f:fb:d8:6b:f6:f0:33:89:58:8a:ef:d0:53:76:5d:
         e2:d8:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net