Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135382e302f32342d3234203d3e2038303834.roa
File:                     3138352e3131312e3135382e302f32342d3234203d3e2038303834.roa (raw, json)
Hash identifier:          m6jXRBeQtWWuURqG34kDf6tCnjLy8FBfo05u7qwWSsU=
Subject key identifier:   72:35:42:A3:95:FA:8C:0C:9A:B9:7C:25:EF:60:F0:27:34:C3:1A:51
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0A479548AA834B12263E25FC02709454214BA25D
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135382e302f32342d3234203d3e2038303834.roa
Signing time:             Sat 22 Oct 2022 04:34:29 +0000
ROA not before:           Sat 22 Oct 2022 04:29:29 +0000
ROA not after:            Sat 21 Oct 2023 04:34:29 +0000
asID:                     8084
IP address blocks:        185.111.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:47:95:48:aa:83:4b:12:26:3e:25:fc:02:70:94:54:21:4b:a2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:29 2022 GMT
            Not After : Oct 21 04:34:29 2023 GMT
        Subject: CN=723542A395FA8C0C9AB97C25EF60F02734C31A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:37:dd:e2:c7:a9:77:59:ca:af:a3:67:7c:
                    43:f1:21:69:65:5e:f3:fe:2d:1b:4a:05:74:fc:8a:
                    2b:b0:68:91:ea:89:94:d1:1a:f1:9d:52:79:f6:41:
                    a8:57:5b:14:13:3c:7e:92:91:ca:a0:1c:aa:6e:a8:
                    2f:47:d7:2e:8c:e3:a2:da:5a:94:8e:5a:45:28:27:
                    f6:6f:d5:56:05:8f:8f:58:68:32:f7:e9:a4:88:02:
                    f5:d9:dc:80:72:9c:79:51:9f:55:7f:ac:a7:e7:f0:
                    bf:7c:60:0e:82:12:58:9b:38:da:d1:39:c5:9d:4c:
                    9a:42:7a:ab:fc:21:41:47:67:15:a6:e5:ef:4b:eb:
                    45:97:5f:f8:7e:d3:64:03:a3:29:03:f4:32:45:68:
                    d4:c6:0f:02:0d:32:bf:0b:0c:29:90:4c:5b:d0:ac:
                    bf:dc:6a:46:7a:ce:d5:33:de:6c:b4:d8:9b:64:a8:
                    3f:65:34:44:14:0b:70:02:31:3a:3e:da:6e:46:f9:
                    c1:31:b3:a6:93:a2:b3:53:aa:1b:18:45:5b:43:e0:
                    f4:08:a9:ec:a0:68:98:3d:43:a9:97:db:cb:f8:a7:
                    d9:30:6a:55:eb:80:cd:95:eb:27:be:11:88:64:f6:
                    38:d0:3e:d9:e2:c6:6a:2b:f0:00:80:41:84:45:e7:
                    fb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:35:42:A3:95:FA:8C:0C:9A:B9:7C:25:EF:60:F0:27:34:C3:1A:51
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135382e302f32342d3234203d3e2038303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.111.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:f5:1c:e0:2c:61:60:8f:03:06:38:e9:8d:aa:9e:64:84:e0:
         46:56:6a:2b:b6:be:e8:97:3a:fc:71:4a:e2:5d:1f:7d:c8:bb:
         58:d1:b5:f2:6d:d0:37:ae:25:7d:52:7e:9a:43:bc:68:44:ff:
         f0:fa:b4:60:e5:e2:6a:6f:a9:76:95:9b:f4:e1:a8:61:d2:ec:
         83:f6:3d:16:83:4b:b0:03:c5:52:c4:83:aa:b6:95:f4:55:80:
         32:6d:d3:10:d9:43:d7:2b:44:7b:aa:d8:d5:02:7b:3b:d5:d5:
         a0:0f:dc:67:47:21:41:9b:00:aa:4e:18:20:6f:a7:88:17:cf:
         e9:48:8b:4d:90:61:a0:21:76:cd:e0:c1:7b:6c:dd:2b:dc:34:
         19:25:05:b1:b7:48:e3:97:de:51:a4:0f:ef:c1:73:58:93:87:
         45:7b:f5:03:54:a3:53:fd:4a:ea:7c:11:21:4f:1b:fd:e3:2d:
         79:ef:76:19:d3:4a:05:18:8a:9a:bf:22:a2:b9:1e:29:a4:d8:
         cb:6b:47:65:aa:e3:35:9a:a2:25:59:a3:41:d0:96:23:1a:2a:
         30:d6:59:f8:64:61:ca:bd:5c:bb:ef:85:c8:34:91:61:3d:6d:
         e4:5f:5c:84:ae:5d:0d:48:bc:2e:30:13:4d:42:d2:ad:23:91:
         44:63:d0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net