Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38322e302f32342d3332203d3e203531313637.roa
File:                     3138352e3138352e38322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          kSTNVVrd33wIqblYUi2BnfVobJrgbyYiqz34KyogpV4=
Subject key identifier:   9E:4E:F8:5E:A4:79:A9:2A:2E:65:B8:7A:B3:88:32:31:E0:ED:E9:B9
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       45B10090F33B9D3B6BA370CF58A4DA2D52D25DF8
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38322e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:25 +0000
ROA not before:           Sat 22 Oct 2022 04:29:25 +0000
ROA not after:            Sat 21 Oct 2023 04:34:25 +0000
asID:                     51167
IP address blocks:        185.185.82.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b1:00:90:f3:3b:9d:3b:6b:a3:70:cf:58:a4:da:2d:52:d2:5d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:25 2022 GMT
            Not After : Oct 21 04:34:25 2023 GMT
        Subject: CN=9E4EF85EA479A92A2E65B87AB3883231E0EDE9B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:e3:98:b9:f6:37:63:bd:f8:ee:fc:45:d3:
                    80:79:3a:b5:41:eb:c8:b9:9a:32:3a:0c:72:70:25:
                    d7:53:1e:c2:ce:5f:50:c7:8e:ba:b7:f0:45:48:67:
                    10:4d:77:68:b5:60:e7:9e:92:92:30:ce:6f:8b:36:
                    0e:ad:b4:31:85:e1:d3:95:63:82:92:85:7c:4d:20:
                    e6:2d:32:21:5c:a6:67:87:2a:14:f7:25:68:52:a3:
                    a0:b2:ae:1c:70:25:08:b9:87:f9:c8:35:23:83:e6:
                    a0:87:32:78:dc:6b:d9:bc:cb:a0:a2:49:d5:fb:6d:
                    fa:82:d0:e8:6a:9e:04:a5:0d:b7:e8:a1:ef:5b:e1:
                    30:e7:cc:1a:5c:d9:2d:77:d4:66:a8:5a:a7:d5:20:
                    cb:43:97:3f:12:5f:45:66:56:80:03:41:28:46:1b:
                    71:71:44:0c:f7:94:8b:80:82:6b:03:a7:0d:57:a0:
                    21:a2:ec:14:e8:00:aa:e5:8b:d0:0e:cc:c3:2f:ac:
                    1a:4e:b9:b1:15:11:e0:4c:79:68:fc:d5:48:13:9a:
                    f6:56:ac:10:59:57:ba:d1:a7:8d:fe:34:43:2a:b3:
                    08:f1:ee:81:66:a8:9a:86:2f:08:73:99:88:cd:b5:
                    b5:24:a0:f4:8a:16:dd:a1:d0:ef:30:1e:ac:db:85:
                    95:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4E:F8:5E:A4:79:A9:2A:2E:65:B8:7A:B3:88:32:31:E0:ED:E9:B9
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38322e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:9c:0e:fc:62:46:14:85:08:aa:c0:9d:bc:0a:9a:6d:12:df:
         95:9c:33:6d:17:ee:1b:89:ca:39:2b:19:94:e2:83:b1:25:7c:
         8d:14:da:a8:17:bc:e4:a0:90:21:6f:da:de:eb:3a:50:17:67:
         2f:84:5b:cd:2c:cc:00:87:0d:2b:17:52:00:61:13:ca:ef:21:
         05:b6:0a:a9:3e:e7:cf:08:d2:e5:9d:74:b2:47:a2:1c:9e:e9:
         bc:47:9f:06:55:55:98:c5:e6:01:72:d8:14:c4:ce:52:f1:c5:
         55:33:cb:31:79:bb:53:eb:ba:ad:60:64:11:9d:b3:db:af:55:
         7d:43:da:9c:a0:fb:61:53:05:24:59:6a:40:ab:25:0b:fe:77:
         a5:2e:57:54:33:bf:59:5f:05:38:4e:89:e5:4b:69:46:86:31:
         3d:5a:b9:6b:06:43:5b:fe:13:30:57:bf:b8:04:21:6c:ab:6d:
         5a:e7:d0:f6:a3:a9:3a:02:95:9e:3b:b4:a7:64:da:e6:e8:de:
         58:c0:ca:94:72:1e:d7:28:80:46:ea:87:95:be:58:e0:db:19:
         f2:af:6b:bf:79:f8:f8:cd:85:b7:29:38:37:3f:5e:3f:3e:75:
         09:06:88:66:8d:22:6d:0b:ce:57:39:b1:2a:93:48:0c:c5:dc:
         3f:f1:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net