Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e342e302f32342d3234203d3e203632323430.roa
File:                     3135352e3133332e342e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          tMFsUXL4Ru4wjS9UbqacigiPT4FCpgti7usd7YM+tP4=
Subject key identifier:   CB:69:A5:6A:C1:DD:02:C0:FD:82:7B:A9:01:7C:48:10:8B:5D:BD:E4
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0558630A11F0D7722CF09B6CB7A96389C4CF56AC
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e342e302f32342d3234203d3e203632323430.roa
Signing time:             Fri 17 Mar 2023 09:19:27 +0000
ROA not before:           Fri 17 Mar 2023 09:14:27 +0000
ROA not after:            Fri 15 Mar 2024 09:19:27 +0000
asID:                     62240
IP address blocks:        155.133.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:58:63:0a:11:f0:d7:72:2c:f0:9b:6c:b7:a9:63:89:c4:cf:56:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 17 09:14:27 2023 GMT
            Not After : Mar 15 09:19:27 2024 GMT
        Subject: CN=CB69A56AC1DD02C0FD827BA9017C48108B5DBDE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:03:cc:8e:12:47:5e:dd:43:3d:35:80:67:
                    c4:28:77:45:10:27:1c:96:07:fe:0b:b3:77:8c:36:
                    2c:d6:30:d1:e6:59:e2:93:85:f8:e3:a6:fa:0c:ae:
                    82:e8:b5:af:08:08:c9:f6:90:94:1e:a8:59:c2:f3:
                    e4:35:8d:d5:10:6c:72:78:fd:1c:85:c7:22:58:86:
                    50:51:84:15:01:98:dd:3a:46:66:02:44:a6:33:eb:
                    08:a8:67:a4:c7:8d:4e:00:f4:e6:54:84:da:63:0a:
                    ae:a2:13:69:6f:3f:14:e5:25:41:c0:fe:37:25:2f:
                    8f:2b:1a:dd:db:af:c1:69:c8:c8:1c:ca:63:4c:28:
                    5d:da:f1:92:c6:7e:b5:e9:56:9e:43:ad:52:7a:f5:
                    11:54:16:17:e1:da:f9:fa:b3:80:b9:27:c7:03:ca:
                    2c:c1:93:3e:ef:68:08:db:db:53:53:5e:5e:d4:3b:
                    9d:1a:4d:2f:c2:f3:c2:75:ec:c4:08:ba:f6:97:f0:
                    5d:74:7b:fc:c2:94:9b:1c:a6:f6:67:b2:0c:4b:33:
                    2f:ed:75:84:68:f6:be:42:41:97:9b:a0:c7:1f:99:
                    da:b8:96:6f:ca:25:f2:07:cc:16:3b:18:e8:10:c2:
                    ee:40:7f:9b:2c:e8:1d:59:42:f3:ea:cf:7f:1c:ca:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:69:A5:6A:C1:DD:02:C0:FD:82:7B:A9:01:7C:48:10:8B:5D:BD:E4
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e342e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:a0:a6:ca:c7:a5:fb:ba:57:c8:40:6a:b2:1e:d1:20:5a:16:
         cb:21:44:78:97:0f:b9:91:ac:e5:b7:2e:05:a5:1b:db:23:9d:
         a5:f3:e8:63:90:e7:55:8c:42:1a:29:c4:29:b6:69:70:10:30:
         b7:e5:4c:09:bd:2a:b7:51:ad:e7:c1:7b:5a:96:1b:02:5a:4d:
         41:79:b1:c2:61:52:45:88:74:fe:55:c0:94:d5:80:2f:4e:74:
         c8:f8:bd:2c:33:de:d0:2b:a4:29:60:30:e6:35:77:5f:78:06:
         37:fe:d8:44:5f:ee:c0:ea:9c:61:3c:f2:91:b8:ba:81:d9:fd:
         d8:4b:87:97:5a:61:e2:d3:23:7f:25:77:84:37:66:47:cd:09:
         81:aa:66:74:b0:8d:7d:e1:e5:c1:21:4f:af:6a:23:ee:08:fe:
         d8:01:8d:42:b4:56:3f:2f:11:30:d6:e6:58:44:f7:f0:46:04:
         79:89:77:25:bb:06:ed:52:08:27:ee:86:be:df:5e:7c:19:90:
         66:e4:ae:cc:9e:43:b8:03:aa:b1:47:1d:78:70:24:1c:84:37:
         bc:56:1a:da:c6:f1:f8:77:74:94:9b:8f:0c:86:0c:77:a9:1e:
         a0:f8:e6:35:87:bd:09:7b:0e:aa:cd:1f:20:84:95:f3:2f:41:
         a6:4a:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net