Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137332e3232342e302f32342d3234203d3e203434353932.roa
File:                     3138352e3137332e3232342e302f32342d3234203d3e203434353932.roa (raw, json)
Hash identifier:          cPfSTbPmrfjqkGNGdVK082WzY3JmFAPtDWiZV9Ln9OU=
Subject key identifier:   9F:A7:59:AB:E5:C2:B5:A4:18:A8:7B:9B:59:A5:84:B3:BF:1C:21:2F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       42733605041F0BC85FB5B04B929F65993C7F783A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137332e3232342e302f32342d3234203d3e203434353932.roa
Signing time:             Sat 22 Oct 2022 04:34:18 +0000
ROA not before:           Sat 22 Oct 2022 04:29:18 +0000
ROA not after:            Sat 21 Oct 2023 04:34:18 +0000
asID:                     44592
IP address blocks:        185.173.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:73:36:05:04:1f:0b:c8:5f:b5:b0:4b:92:9f:65:99:3c:7f:78:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:18 2022 GMT
            Not After : Oct 21 04:34:18 2023 GMT
        Subject: CN=9FA759ABE5C2B5A418A87B9B59A584B3BF1C212F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:70:cf:c7:3f:e5:d1:ff:93:d7:66:b2:2e:
                    9b:a4:a9:74:d7:28:ae:9b:5e:4c:70:e0:5b:dc:40:
                    7d:3b:35:2b:69:53:04:98:10:ab:fe:3d:7d:e0:5a:
                    56:08:52:61:d9:7a:81:bc:f3:00:c0:fd:51:eb:f7:
                    89:d4:6b:bf:35:20:96:cd:62:e1:f7:ac:26:4e:71:
                    6e:5b:ec:ec:41:55:86:2c:9f:d4:3a:d8:4d:c0:a9:
                    07:96:35:b7:03:18:03:ee:de:65:b5:40:38:06:99:
                    de:75:35:48:69:69:f3:30:22:ae:42:66:a2:8a:f0:
                    5e:63:8d:73:88:88:46:5c:22:b3:1f:c4:1f:96:d3:
                    ab:7a:56:f5:d6:4b:8c:33:d1:b7:08:42:c7:e8:aa:
                    5c:42:82:0c:b0:87:98:eb:25:fe:cb:ca:7e:31:ea:
                    64:7a:4b:d3:c9:14:c7:66:83:5d:75:3c:72:bc:46:
                    52:24:df:85:eb:08:3c:49:52:55:86:81:36:f1:61:
                    61:93:e0:c2:06:47:04:d2:5d:92:23:6e:9f:d7:70:
                    3b:a6:23:19:d2:08:95:83:e6:37:65:a9:0d:36:a3:
                    55:de:2f:c8:f4:34:ae:27:bb:50:f8:c7:f9:42:d3:
                    c5:9f:00:0b:5b:f4:60:47:b4:4c:9c:e8:1a:4a:81:
                    27:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A7:59:AB:E5:C2:B5:A4:18:A8:7B:9B:59:A5:84:B3:BF:1C:21:2F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137332e3232342e302f32342d3234203d3e203434353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.173.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:3a:ff:4b:78:51:5b:7d:ab:62:59:2b:1c:7e:9a:2c:6f:89:
         1d:80:4f:66:90:0d:af:89:ba:80:79:12:d7:77:d7:9b:6c:81:
         58:54:ee:f2:d7:37:d2:95:b8:0d:f5:42:f8:2c:74:31:80:f0:
         8c:ea:26:90:f5:90:d1:76:5e:4f:01:9a:d0:c5:db:6c:b6:2a:
         ce:96:86:f6:a2:10:50:59:cf:62:8d:06:44:f1:1e:2d:bd:21:
         c9:66:8f:81:94:44:1e:99:a4:0b:2c:4e:6d:ab:bf:be:35:f4:
         0f:73:ae:39:9b:5e:87:a0:79:49:7f:11:b8:c3:3f:a1:6e:9c:
         ba:4a:26:f6:b9:92:29:30:bd:32:6c:9b:12:85:98:b4:e6:db:
         b8:c3:4a:b6:3d:86:d8:fd:45:d8:aa:c7:38:55:69:f6:79:52:
         dd:85:f9:65:4c:de:96:25:c7:94:27:e5:5c:1c:a6:d8:c9:6f:
         6e:1f:37:d5:ca:e3:8a:4f:b9:67:58:93:0b:58:04:1f:31:70:
         a7:9c:a0:13:cc:7d:b0:97:66:45:3b:51:f2:58:10:da:68:3f:
         cf:09:25:ff:80:ee:ed:dd:df:86:51:4a:12:b3:17:a6:e0:f8:
         7c:42:0c:46:80:df:63:40:31:61:b5:74:e5:31:b5:df:c4:71:
         f6:b1:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net