Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e372e302f32342d3332203d3e203531313637.roa
File:                     3135352e3133332e372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          WjjBSgoCUIV8lV080N/nMcs2i347iBIInmuWNS6nVsI=
Subject key identifier:   01:10:49:D8:FD:BF:C8:47:DF:36:01:2F:D6:8B:B9:27:30:4C:1A:E1
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       72CA9F422CF567798866176D07AC1B4E6F8C6272
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e372e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:27 +0000
ROA not before:           Sat 22 Oct 2022 04:29:27 +0000
ROA not after:            Sat 21 Oct 2023 04:34:27 +0000
asID:                     51167
IP address blocks:        155.133.7.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ca:9f:42:2c:f5:67:79:88:66:17:6d:07:ac:1b:4e:6f:8c:62:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:27 2022 GMT
            Not After : Oct 21 04:34:27 2023 GMT
        Subject: CN=011049D8FDBFC847DF36012FD68BB927304C1AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:3b:51:aa:22:22:75:c3:3e:66:e1:72:d3:
                    43:76:f3:9d:e9:6c:58:03:6c:d4:a8:45:5c:e7:48:
                    ef:bf:59:48:f2:3b:ca:be:f7:98:18:af:c8:cc:60:
                    a3:81:40:51:9c:9f:26:e9:d2:25:b7:19:8b:07:d3:
                    c0:b8:da:cb:05:a6:c0:d0:cc:eb:39:53:2d:9c:7c:
                    a7:f6:6b:36:fe:cc:a6:ef:5b:e1:40:e9:24:b4:13:
                    05:01:17:19:40:a6:11:04:95:ec:a1:6e:62:37:55:
                    85:10:6a:40:c4:82:a6:c4:a9:61:79:de:cf:2b:a7:
                    43:b5:37:57:8e:5b:7a:d1:af:bd:75:0d:d8:72:0e:
                    1c:96:f2:4f:59:81:d8:d0:33:4a:98:8c:59:b5:a9:
                    9e:39:d6:41:6f:d3:62:ff:1c:1b:c8:8c:d0:38:6d:
                    f2:f2:82:b8:62:a4:86:cb:2b:ed:6a:03:07:ac:48:
                    ee:35:73:01:e6:70:6f:f2:fe:b2:88:d2:4a:79:de:
                    d4:e6:95:2c:60:3d:a6:ce:6b:95:88:6e:9a:97:d1:
                    da:22:32:18:71:71:e2:c6:85:8e:f3:26:d7:40:f6:
                    44:61:1e:ce:7f:26:10:95:f1:9f:80:d6:32:68:8e:
                    54:3b:f2:bf:5d:30:ff:a4:5c:bc:8d:5d:a0:28:38:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:10:49:D8:FD:BF:C8:47:DF:36:01:2F:D6:8B:B9:27:30:4C:1A:E1
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e372e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:51:18:10:7b:9d:71:bc:3d:55:93:a0:0b:86:64:9a:84:21:
         e5:95:67:50:3d:7e:17:aa:af:12:cf:c9:2c:35:67:0a:6e:c1:
         39:86:86:55:8e:43:fc:a4:15:0c:9c:94:bc:ad:c0:b7:be:4d:
         ff:0a:9a:da:77:7c:69:01:7a:98:1d:b3:2b:d9:2e:bf:da:b2:
         ed:e0:bd:ca:97:32:bf:bb:34:22:c0:05:b1:3b:b3:54:68:86:
         4d:29:6b:a6:54:8a:9c:47:eb:f9:ec:ed:d5:4d:21:5a:f0:de:
         8e:1a:5b:ea:e0:2c:44:8f:8f:36:30:37:93:39:e5:6b:01:86:
         e9:d9:f1:5c:dc:b0:dd:f1:c1:13:a7:df:ef:9f:d6:aa:b7:95:
         0b:e7:ac:51:f6:c8:ac:74:bc:05:f0:3d:53:96:55:0e:fc:d4:
         e9:58:16:0e:e5:cc:df:de:85:50:1d:f4:d5:e2:53:2b:91:8b:
         c0:43:dd:6f:2a:02:b4:40:ef:b7:81:e4:ab:c7:4a:01:41:b9:
         97:d2:bc:fd:94:24:5b:48:d4:85:a2:7f:c4:0d:e7:6b:57:48:
         56:98:68:c6:17:9b:4c:af:a8:c9:1b:e7:69:b8:8c:c2:e9:aa:
         93:9d:67:b2:2b:c0:b0:df:2a:03:e4:a2:36:ac:ba:cf:bf:25:
         02:47:96:f4
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUcsqfQiz1Z3mIZhdtB6wbTm+MYnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MjdaFw0yMzEwMjEwNDM0MjdaMDMxMTAvBgNV
BAMTKDAxMTA0OUQ4RkRCRkM4NDdERjM2MDEyRkQ2OEJCOTI3MzA0QzFBRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXDtRqiIidcM+ZuFy00N2853p
bFgDbNSoRVznSO+/WUjyO8q+95gYr8jMYKOBQFGcnybp0iW3GYsH08C42ssFpsDQ
zOs5Uy2cfKf2azb+zKbvW+FA6SS0EwUBFxlAphEEleyhbmI3VYUQakDEgqbEqWF5
3s8rp0O1N1eOW3rRr711DdhyDhyW8k9ZgdjQM0qYjFm1qZ451kFv02L/HBvIjNA4
bfLygrhipIbLK+1qAwesSO41cwHmcG/y/rKI0kp53tTmlSxgPabOa5WIbpqX0doi
MhhxceLGhY7zJtdA9kRhHs5/JhCV8Z+A1jJojlQ78r9dMP+kXLyNXaAoOFR/AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUARBJ2P2/yEffNgEv1ou5JzBMGuEwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM1MzUyZTMxMzMzMzJlMzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMx
MzEzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAm4UHMA0GCSqGSIb3DQEBCwUAA4IBAQAeURgQe51x
vD1Vk6ALhmSahCHllWdQPX4Xqq8Sz8ksNWcKbsE5hoZVjkP8pBUMnJS8rcC3vk3/
Cprad3xpAXqYHbMr2S6/2rLt4L3KlzK/uzQiwAWxO7NUaIZNKWumVIqcR+v57O3V
TSFa8N6OGlvq4CxEj482MDeTOeVrAYbp2fFc3LDd8cETp9/vn9aqt5UL56xR9sis
dLwF8D1TllUO/NTpWBYO5czf3oVQHfTV4lMrkYvAQ91vKgK0QO+3geSrx0oBQbmX
0rz9lCRbSNSFon/EDedrV0hWmGjGF5tMr6jJG+dpuIzC6aqTnWeyK8Cw3yoD5KI2
rLrPvyUCR5b0
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net