Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138382e3235302e302f32342d3332203d3e203531313637.roa
File:                     3138352e3138382e3235302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          kK3mhUO6fwUByV/1q0hcY/whu84iOIkNcNxUS9IoGaQ=
Subject key identifier:   E5:38:0A:74:93:A3:11:B3:4B:F9:15:28:72:8D:9F:F3:61:1C:FA:AB
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4FCE796AC6982F745C59A13DE4561D83029EBADD
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138382e3235302e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:12 +0000
ROA not before:           Sat 22 Oct 2022 04:29:12 +0000
ROA not after:            Sat 21 Oct 2023 04:34:12 +0000
asID:                     51167
IP address blocks:        185.188.250.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ce:79:6a:c6:98:2f:74:5c:59:a1:3d:e4:56:1d:83:02:9e:ba:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:12 2022 GMT
            Not After : Oct 21 04:34:12 2023 GMT
        Subject: CN=E5380A7493A311B34BF91528728D9FF3611CFAAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:5e:41:9b:4f:bd:ba:cb:b5:d8:a7:4b:6d:
                    28:ac:b7:45:2c:ab:db:32:3d:fc:06:b2:fc:9e:f1:
                    bc:11:39:95:40:9d:24:c5:62:13:58:d2:d5:34:8d:
                    f1:40:aa:a0:f1:1a:dd:f5:b8:55:04:cd:cf:18:ba:
                    86:9c:3f:84:e7:7e:ac:93:c9:e3:4c:e9:69:6b:c6:
                    e9:67:74:f7:27:03:1d:b9:d5:2f:8c:3c:f8:71:14:
                    04:5e:e9:32:e0:5d:9f:55:f7:3c:68:40:f1:b4:d5:
                    4c:2c:f1:98:ad:62:43:10:f3:be:18:89:eb:ff:57:
                    fe:5e:1e:d2:50:93:d6:c5:d3:0f:60:7e:4d:c8:89:
                    55:f1:8d:c4:73:74:5e:de:e7:4d:a4:3c:60:9b:18:
                    7e:d1:33:23:13:d7:ac:59:da:a5:54:54:35:65:f0:
                    4c:fc:c5:6d:c7:e9:94:8b:82:11:af:53:61:06:bf:
                    ca:a3:f2:4f:e5:93:4f:ef:06:ec:ff:69:64:c9:71:
                    db:32:b0:b9:c2:f5:7d:02:43:1e:f8:92:fa:5d:82:
                    33:fb:46:d1:5a:e5:b2:99:50:3e:88:fa:6b:91:51:
                    25:32:1e:c4:c4:2d:02:c2:4b:c2:86:a2:35:a3:3a:
                    9e:5b:34:8f:36:ef:a8:d0:7b:77:41:a8:c0:04:b3:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:38:0A:74:93:A3:11:B3:4B:F9:15:28:72:8D:9F:F3:61:1C:FA:AB
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138382e3235302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:e8:49:fa:56:6c:52:17:9f:86:8f:e7:10:08:e7:88:ca:4a:
         74:5a:05:00:de:ff:3f:2f:b3:f0:1d:ed:b1:b1:d5:48:5e:0a:
         fe:8a:fc:a4:87:1c:7c:58:9b:25:d4:89:ce:45:ac:39:9f:84:
         b0:4d:76:7a:f8:9a:06:b2:0e:31:64:d2:ea:44:09:58:3b:05:
         87:f0:67:80:f1:bd:df:01:e0:41:8b:c3:be:83:ec:2f:8c:c5:
         de:bc:30:38:01:9a:5c:9d:5c:c6:51:dc:d2:5a:ec:a4:32:3b:
         5b:5a:44:16:26:c3:d1:92:dd:01:52:1b:7a:6c:74:d7:86:aa:
         40:9c:6a:4f:c0:db:f7:c6:95:21:05:f3:31:b8:49:54:e7:a0:
         82:c3:85:be:eb:9a:32:be:39:25:08:da:33:e9:4d:c1:f6:d7:
         84:42:3b:b5:e4:37:8c:1f:a4:95:0e:3d:8e:78:83:bf:0d:5a:
         6a:38:3d:7f:04:f4:14:d9:ab:d7:29:6b:5a:e0:9e:f6:68:fc:
         59:b1:1b:da:6c:0f:9b:a8:58:e1:53:10:f3:94:30:3c:2e:52:
         b1:c1:07:25:63:2a:f8:e8:be:19:a6:25:7b:20:a7:6a:0b:d2:
         3e:0e:d9:61:91:29:dc:ee:a3:a4:d2:61:81:7a:e6:b6:f2:b5:
         1a:d6:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net