Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32322d3234203d3e203631333137.roa
File:                     3138352e3131312e3135362e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          pCWhiBjhKUx/gF66fSBGaelvJ3DQ6nE9y9tv7pugh5g=
Subject key identifier:   28:94:6E:73:2F:9E:0C:33:76:A9:61:6B:F6:EB:1E:25:D7:E5:8D:72
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       42A145154D84956CABDEB70E697D7D874F428A75
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32322d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:38 +0000
ROA not before:           Tue 28 Jun 2022 04:35:38 +0000
ROA not after:            Tue 27 Jun 2023 04:40:38 +0000
asID:                     61317
IP address blocks:        185.111.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a1:45:15:4d:84:95:6c:ab:de:b7:0e:69:7d:7d:87:4f:42:8a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:38 2022 GMT
            Not After : Jun 27 04:40:38 2023 GMT
        Subject: CN=28946E732F9E0C3376A9616BF6EB1E25D7E58D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:46:2b:c9:a2:ff:0a:16:87:8e:a8:18:fb:
                    f5:22:58:b0:69:cb:d7:38:e5:6d:f4:42:8f:be:69:
                    fe:02:eb:91:70:e6:c1:1e:5c:a6:06:79:73:32:8b:
                    2b:df:06:6d:4f:bd:60:aa:f7:9b:36:e3:63:2d:35:
                    4c:47:f9:fe:73:6e:07:70:d5:39:ff:b2:d8:53:83:
                    18:b0:88:d8:e2:cb:3a:6b:d3:f4:a8:e9:fc:ac:ae:
                    0e:37:c3:b2:2f:7c:aa:28:dc:b0:08:4a:d3:5e:21:
                    83:e7:bc:51:ea:56:b5:8e:78:da:ca:39:23:52:be:
                    49:d7:b5:69:95:a8:c4:41:7f:3a:26:cb:9b:36:da:
                    b3:2b:08:64:de:82:cc:54:33:2b:b5:7f:f9:af:53:
                    02:2a:17:22:30:fe:7b:34:93:ed:6d:88:40:e8:af:
                    c2:6d:20:b5:f3:1b:be:6e:8b:22:d5:61:e5:04:af:
                    1e:77:11:5a:64:4c:21:50:2a:22:0b:ec:04:a3:a8:
                    5a:e5:f7:10:4f:e8:dd:23:e1:85:99:bd:b2:8a:d8:
                    d0:a6:52:17:74:05:f2:8f:79:4f:41:e2:aa:ec:6b:
                    25:60:5a:3a:35:10:f9:2c:ef:0b:53:4d:b7:bd:4e:
                    d7:d1:61:b2:7f:73:29:79:60:c4:2d:35:96:9a:6a:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:94:6E:73:2F:9E:0C:33:76:A9:61:6B:F6:EB:1E:25:D7:E5:8D:72
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.111.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:81:0f:3a:f5:70:61:7d:fa:fe:a3:13:ae:2f:4c:07:74:47:
         f6:1f:60:71:dd:f9:2c:59:c2:3b:7e:54:57:35:ef:41:a5:0f:
         c8:da:fb:fd:43:e0:b3:4a:ed:71:32:c0:b5:e3:ba:0f:d2:f5:
         a5:4d:89:e0:0f:38:b0:ef:01:08:5f:29:a2:17:f6:d7:a9:2b:
         1d:b5:74:0c:fd:f4:4c:d8:d2:ba:55:38:99:31:73:58:3b:dd:
         64:3e:5c:cc:30:dc:7c:fa:0e:2c:7b:00:09:99:04:85:02:27:
         63:33:5c:75:ab:11:2c:5e:59:cd:70:54:ad:61:44:2c:11:3f:
         8d:55:17:56:39:3a:7a:e5:0f:9e:dd:0f:38:f8:13:56:85:4c:
         c9:a0:c4:31:70:65:86:96:af:e4:4d:4b:76:28:6d:b1:f1:41:
         5e:43:d0:7f:95:6f:df:ff:89:de:dd:95:ba:42:dc:e0:ca:b7:
         c0:e9:63:a6:6f:a0:b6:98:a5:69:05:0e:8e:5b:5f:08:26:13:
         35:39:30:99:7f:06:30:71:86:43:12:46:5e:8b:e5:96:a7:6d:
         c3:38:36:f4:da:a5:82:5d:75:e4:aa:c8:18:eb:af:bc:0c:a4:
         6c:24:bf:10:c7:34:5a:4d:3b:9e:eb:f2:e6:7d:0c:2a:a1:d4:
         b1:85:7a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net