Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135392e34382e35352e302f32342d3234203d3e20313336373837.roa
File:                     3135392e34382e35352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          unxTN7800mvTNYPiUmUYDb8BpelGVV4s7n8f/ew+X2M=
Subject key identifier:   CD:A6:50:9A:5D:6D:A4:56:B1:7C:72:E3:D5:22:0D:A3:8E:CB:B5:FB
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       34DE09EF0CC588F9BBF03F83E850738997F0E367
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135392e34382e35352e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 16 Dec 2022 08:59:26 +0000
ROA not before:           Fri 16 Dec 2022 08:54:26 +0000
ROA not after:            Fri 15 Dec 2023 08:59:26 +0000
asID:                     136787
IP address blocks:        159.48.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:de:09:ef:0c:c5:88:f9:bb:f0:3f:83:e8:50:73:89:97:f0:e3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 16 08:54:26 2022 GMT
            Not After : Dec 15 08:59:26 2023 GMT
        Subject: CN=CDA6509A5D6DA456B17C72E3D5220DA38ECBB5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4a:8c:e8:90:bc:8d:3b:e3:5f:3f:e8:6b:aa:
                    6c:d5:6e:f4:43:b0:3c:56:80:b2:1e:a4:ed:39:7e:
                    8d:57:8a:a3:e1:c7:4d:2b:99:08:f7:d0:b9:80:64:
                    25:a8:8f:96:74:9e:53:a9:12:13:cb:10:aa:fc:07:
                    56:82:e8:01:f5:23:10:3f:65:6d:cb:f7:98:04:3c:
                    97:0c:65:4a:db:72:bb:3d:48:84:1c:82:42:27:e2:
                    24:07:6f:08:8f:9f:5c:c6:cc:db:b7:6d:ec:e8:6d:
                    9c:27:47:d3:aa:3d:0f:13:23:82:23:88:d3:99:d7:
                    c9:7c:16:19:e4:54:a3:20:75:88:f6:14:ea:61:8d:
                    bf:cd:e4:32:10:1a:94:7b:6d:8e:94:46:09:71:97:
                    59:4a:63:a8:1f:f6:c6:82:ad:69:4f:9c:d3:ca:fe:
                    89:a3:d8:1d:91:2d:2b:3e:ba:a0:6b:ba:d1:d4:48:
                    06:87:50:ae:a8:38:52:fa:40:cf:c0:1e:63:6d:d4:
                    5f:ca:2f:f1:5f:3b:35:b2:79:3c:8b:39:10:b6:6d:
                    f6:52:8c:40:2f:84:21:d4:c5:b4:e4:f3:bb:78:27:
                    3f:a9:8d:f2:47:cd:80:66:c2:18:0e:85:f3:46:0c:
                    72:76:e2:29:6b:b1:3d:75:f0:74:55:8e:77:70:0f:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A6:50:9A:5D:6D:A4:56:B1:7C:72:E3:D5:22:0D:A3:8E:CB:B5:FB
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135392e34382e35352e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.48.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:31:4a:e6:ea:26:8d:eb:48:a3:89:d3:31:b3:ac:b8:50:
         f4:f1:03:6f:0d:c7:c4:14:da:13:77:a6:70:a5:02:3d:61:8f:
         84:ca:7a:08:cd:87:7a:f7:79:62:83:1d:a8:17:d8:51:33:3e:
         84:0b:73:04:23:03:46:bc:b9:3e:08:61:b2:21:e2:d0:89:9f:
         f6:65:7d:6f:04:1d:51:04:8c:75:c1:d4:59:30:7a:ab:88:ec:
         00:9b:55:b7:93:17:76:fa:4b:8b:d5:74:58:d9:3e:a6:b1:cf:
         7e:de:96:52:49:05:e8:85:65:19:ff:42:d5:69:1b:8d:a4:05:
         47:13:ee:8f:34:d3:40:2e:25:1f:db:81:de:7c:fa:15:d7:d9:
         55:04:4a:14:79:9b:a5:57:fe:06:dc:00:3e:c0:ae:a0:63:f9:
         df:4f:c9:e5:4c:d3:50:f9:71:ed:10:c0:01:2b:69:2e:a2:6b:
         4c:59:ff:ed:c6:a9:d6:8b:44:da:24:56:71:4f:9d:81:fd:5e:
         c0:bd:0b:db:83:6a:b0:b4:05:a8:b5:63:99:19:14:ce:f5:16:
         0c:09:99:56:27:a1:23:47:44:84:32:ab:ba:67:bc:d3:48:52:
         ea:04:a7:17:57:12:5b:30:e2:4b:09:b7:48:6b:d8:10:1a:2c:
         75:cc:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net