Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135392e34382e35322e302f32342d3332203d3e20313336373837.roa
File:                     3135392e34382e35322e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          bHIPYySrYXMb7/4hnxhi1m1pvtq/7wa9Fqu/a25aeqg=
Subject key identifier:   A5:C8:40:D7:30:13:1F:ED:E5:1B:47:DF:24:A8:B2:25:86:F0:C8:A0
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       53AD36F00FF73BD55B558AAB499D0FE88731181B
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135392e34382e35322e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:27:56 +0000
ROA not before:           Wed 28 Dec 2022 09:22:56 +0000
ROA not after:            Wed 27 Dec 2023 09:27:56 +0000
asID:                     136787
IP address blocks:        159.48.52.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ad:36:f0:0f:f7:3b:d5:5b:55:8a:ab:49:9d:0f:e8:87:31:18:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 28 09:22:56 2022 GMT
            Not After : Dec 27 09:27:56 2023 GMT
        Subject: CN=A5C840D730131FEDE51B47DF24A8B22586F0C8A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:ff:00:c2:7a:91:59:aa:94:20:45:3e:60:
                    94:23:96:ff:75:86:ef:0f:72:ee:c0:df:1f:cc:c5:
                    aa:bf:e4:e4:b7:88:91:47:7c:9b:ce:1c:7f:23:08:
                    5a:95:8f:3b:73:6b:17:36:a2:5e:75:1e:f5:48:c0:
                    b2:51:1c:fe:5b:21:c2:dd:7f:ce:54:dd:a3:fb:61:
                    7f:b6:18:12:51:30:31:38:f0:8f:e3:7a:a6:4f:81:
                    4f:31:6b:41:b3:45:1f:02:8c:e8:8d:6e:87:fd:f2:
                    6b:92:3c:06:80:4b:1d:1f:0d:2a:ad:7d:87:4c:12:
                    85:42:81:9d:96:9b:0f:0e:5f:58:8a:45:71:85:08:
                    9d:36:29:27:ef:75:ec:a1:13:65:38:8d:cc:7a:8b:
                    79:7e:b4:79:5f:9f:72:1b:db:c9:81:0d:a0:87:24:
                    d9:9b:e3:13:14:f2:ae:40:97:ec:45:d8:49:10:43:
                    a8:f4:4e:9b:b9:fb:66:b3:8c:0f:c1:6a:55:97:92:
                    6b:c8:26:2c:26:ab:d4:25:b9:fa:94:62:3f:cd:ce:
                    33:3b:8d:ac:d0:bf:8b:b1:16:ab:d3:29:0b:80:bf:
                    88:d9:fb:d6:dc:05:fe:49:1d:88:46:70:93:3c:56:
                    c8:e6:aa:60:d0:df:83:1b:39:75:93:01:16:33:92:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C8:40:D7:30:13:1F:ED:E5:1B:47:DF:24:A8:B2:25:86:F0:C8:A0
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135392e34382e35322e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.48.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:72:14:49:3f:9d:6f:c6:31:d7:ed:22:6f:a1:c8:ea:e4:20:
         6a:ab:00:e5:94:46:c1:0d:79:ba:38:08:24:d8:25:a7:15:77:
         c6:a4:92:ea:a8:fb:0e:c5:b7:de:be:30:b4:b3:3f:eb:99:55:
         95:41:b6:2c:73:04:7c:fe:84:df:91:29:6b:af:79:4d:51:24:
         ac:aa:71:20:36:3c:12:8c:67:1f:64:b3:4d:82:62:2b:82:40:
         73:cd:bd:81:59:6b:fc:d4:de:ce:e2:24:63:7d:83:ab:49:43:
         d4:b3:07:05:ef:99:05:9f:71:dd:83:ce:25:e4:b7:74:bc:6b:
         ec:03:a1:27:df:45:e7:03:03:27:20:5e:14:ee:82:e8:88:d8:
         3e:39:ce:6d:54:de:01:8e:04:f2:a6:f7:b2:a9:37:74:04:9a:
         cd:75:39:12:32:98:02:a3:ea:41:4d:41:90:04:1c:ec:71:0d:
         44:90:9e:97:f8:30:4a:b5:0e:5c:c3:3e:4e:b6:c3:78:82:e0:
         a3:c8:be:c2:f1:7e:d9:77:90:3b:80:a0:c7:5e:1f:93:c4:00:
         e2:f8:36:0d:9f:60:2b:77:d2:4e:96:89:bb:61:92:6d:c1:28:
         c3:cf:f2:20:b1:c3:48:e2:a3:59:a5:85:9f:23:fa:1d:23:4d:
         b3:54:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net