Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa
File:                     3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          l3HkazxZs1OJ9MsNeVdPgNS3OXujaJ/qTM5BMslamvc=
Subject key identifier:   2E:9D:C8:BB:06:BB:FB:54:9C:A8:95:D9:A8:D4:E2:11:CD:0F:B1:51
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       023678C68BAB9A5EA4E48A4F6975888229F6303A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:29 +0000
ROA not before:           Sat 22 Oct 2022 04:29:29 +0000
ROA not after:            Sat 21 Oct 2023 04:34:29 +0000
asID:                     51167
IP address blocks:        185.188.249.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:36:78:c6:8b:ab:9a:5e:a4:e4:8a:4f:69:75:88:82:29:f6:30:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:29 2022 GMT
            Not After : Oct 21 04:34:29 2023 GMT
        Subject: CN=2E9DC8BB06BBFB549CA895D9A8D4E211CD0FB151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:b3:e4:d2:a2:a3:65:08:57:4c:e7:95:78:
                    50:59:87:ad:af:d9:be:53:b1:d5:b2:4d:89:56:e7:
                    18:d2:d4:84:ce:84:3b:c1:45:24:5a:d0:ec:9f:b8:
                    ca:7e:29:5b:b5:e1:c7:b6:09:d1:a8:4f:3d:15:df:
                    6b:56:6e:3e:a7:2b:3b:2e:5f:1f:48:12:5f:04:dc:
                    81:f5:86:cd:0f:f4:22:0b:e0:4a:23:47:00:1c:1e:
                    15:78:7c:9e:bc:9c:72:58:72:ad:e4:02:53:c5:55:
                    7e:a9:57:f0:f6:61:0e:93:3b:a2:fb:16:44:8e:9a:
                    b9:2b:12:ca:82:40:f3:33:f9:2e:35:df:ac:d5:48:
                    d4:bc:96:7c:d3:d6:6c:c3:f6:37:2c:a3:b9:cf:80:
                    5b:cd:04:61:9c:f3:88:09:eb:82:51:fa:95:e7:52:
                    5f:af:63:78:1f:7d:b6:57:a6:a0:4e:c1:e7:1e:c0:
                    66:49:14:a3:cc:44:a4:8e:c8:28:d6:69:0c:d3:6b:
                    ea:7f:d7:38:a8:cd:6d:1f:7c:f0:9b:51:f0:f5:d8:
                    0f:ab:51:ae:b8:dd:0b:95:f5:df:7b:f2:21:ad:c6:
                    17:89:7b:c7:52:44:a5:da:45:40:d2:ca:5f:88:22:
                    6e:5f:c5:d9:d4:68:8f:32:73:19:55:99:7c:de:45:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9D:C8:BB:06:BB:FB:54:9C:A8:95:D9:A8:D4:E2:11:CD:0F:B1:51
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:37:c1:cc:92:2a:69:54:1a:80:ac:37:32:7c:0a:e1:30:bf:
         30:fe:9f:7f:02:31:83:fe:1a:3b:89:12:94:d5:bc:9d:59:cc:
         54:8e:de:08:a0:ec:df:eb:be:a8:79:59:1f:ea:de:e0:78:50:
         a0:49:b3:2e:60:51:ce:98:5f:d8:83:91:63:b6:c9:0d:1e:fd:
         8f:46:57:aa:e9:ec:02:75:0a:51:14:63:9c:ca:e8:45:cd:39:
         31:a7:60:af:47:7c:c4:88:9e:da:c9:50:da:c9:6e:7a:ae:09:
         93:be:96:5b:ef:e9:62:45:4c:57:9c:ce:71:42:b1:06:11:8a:
         e6:a3:78:ff:ff:34:85:4f:3a:b6:7b:e1:3d:9b:86:35:10:06:
         dd:34:b5:5b:73:19:9a:f5:20:c8:14:49:92:3d:da:86:13:9b:
         ca:92:54:a3:54:7f:5b:c3:45:64:84:64:be:ef:53:d3:45:91:
         5c:91:40:0f:e9:3d:5e:b8:56:b5:e6:7d:e6:7a:30:7f:c9:5f:
         7c:c0:6b:6a:87:21:b3:42:82:bd:ca:0c:08:81:9d:41:1d:01:
         10:57:31:b6:d2:0e:94:dd:44:bb:93:a6:4c:94:21:64:69:e0:
         b8:b0:2d:e7:e4:d1:e0:1d:27:b1:25:cb:27:92:a0:37:b2:03:
         b4:70:de:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net