Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e38342e302f32342d3234203d3e20313336373837.roa
File:                     3135352e3133332e38342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          YdqJ5zstx70jD+5qduB//PEXu5kxXRIJzN0RKyK3Il4=
Subject key identifier:   F8:02:19:39:57:91:5C:1B:47:48:05:B4:63:96:40:E0:D8:42:50:BB
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       24A702177DC1044234F13836250E30548912A0C6
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e38342e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:10 +0000
ROA not before:           Sat 22 Oct 2022 04:29:10 +0000
ROA not after:            Sat 21 Oct 2023 04:34:10 +0000
asID:                     136787
IP address blocks:        155.133.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a7:02:17:7d:c1:04:42:34:f1:38:36:25:0e:30:54:89:12:a0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:10 2022 GMT
            Not After : Oct 21 04:34:10 2023 GMT
        Subject: CN=F802193957915C1B474805B4639640E0D84250BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:77:78:78:d6:d9:54:35:64:6b:1c:56:a4:
                    5b:68:b2:23:9f:79:b6:39:c3:ba:f9:1b:d6:73:fa:
                    db:1d:35:72:a8:53:07:83:73:ae:d7:6d:09:97:ea:
                    17:62:1b:fe:3c:d0:0e:1a:5e:20:34:fe:51:e9:81:
                    1a:bc:5a:e6:dc:70:49:ae:87:fd:51:04:6f:3c:7c:
                    f1:96:8c:9b:bf:41:c0:b9:13:5b:2c:17:16:11:95:
                    c2:fa:52:30:96:5e:f8:ac:7d:d2:40:96:6d:8e:f6:
                    3b:67:65:77:cd:8c:de:7f:fa:d8:b1:2b:2d:08:bc:
                    c2:69:7b:67:f0:b7:7d:30:33:21:69:d7:f8:21:86:
                    33:bd:bf:c8:0e:65:67:8e:04:d6:d7:24:5a:1f:0d:
                    16:cc:a0:a8:3c:ec:cd:05:ca:19:35:a9:c8:28:38:
                    f4:b9:76:b5:3b:03:11:46:49:b3:26:e8:fa:7f:83:
                    05:fe:a1:4b:76:c2:77:63:c1:2f:14:c8:37:f2:0a:
                    05:10:f9:e6:50:eb:99:09:39:6d:d0:66:c5:3b:a8:
                    39:b0:75:6b:80:38:dc:8f:a7:f6:a7:7b:9e:4d:9f:
                    c8:ca:b3:67:12:6a:bf:1e:83:04:8f:a2:cf:3b:48:
                    41:b1:eb:41:a6:d7:77:3b:fe:88:99:b2:68:e3:32:
                    ac:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:02:19:39:57:91:5C:1B:47:48:05:B4:63:96:40:E0:D8:42:50:BB
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e38342e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c3:60:65:b0:e1:40:bd:c7:fb:43:69:14:3b:8f:ec:32:f3:
         c4:79:e0:61:a2:e8:b5:eb:19:e5:fe:4e:81:bd:2d:e7:56:a8:
         83:2c:e1:dc:40:fe:d0:30:ab:65:3a:35:fb:67:85:a6:73:13:
         32:b8:e4:b7:6e:b6:0c:b4:e3:31:14:6e:ce:01:e7:de:7f:44:
         6a:54:5e:53:c1:80:eb:29:cc:f8:08:7d:0a:a0:49:50:14:61:
         8e:b2:d6:ac:a9:2b:53:6e:80:85:6f:a9:18:ca:fa:52:cd:e8:
         af:b5:19:d3:82:dc:f0:dd:09:0c:47:47:f1:1b:d8:c3:fb:36:
         ca:88:42:01:8c:18:e1:1b:f9:b8:75:11:23:41:5a:93:3e:2e:
         2a:4f:6e:e1:fc:01:1b:c6:e2:d2:b6:7b:da:56:74:e6:73:6f:
         50:aa:62:b2:59:63:10:0d:7b:74:8c:a3:53:3a:96:9c:bb:a5:
         74:b9:f5:15:a5:fc:3c:10:51:a2:56:8d:1c:68:c3:22:35:a2:
         cf:09:7d:df:ea:8b:e0:0b:6c:26:8b:f7:44:b6:66:f4:62:8d:
         a3:bf:80:c5:f4:2e:07:ad:34:94:ee:5e:bb:a3:d9:0d:80:82:
         b1:ba:0d:35:66:50:bf:e0:6e:e7:de:3f:a1:ed:b4:8e:6f:be:
         54:10:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net