Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39382e302f32342d3234203d3e20323036323634.roa
File:                     3138352e3139322e39382e302f32342d3234203d3e20323036323634.roa (raw, json)
Hash identifier:          I5dsH4tcqDCrjnqnye0/GGvR/QBhlFobD8xNI57V994=
Subject key identifier:   0B:E6:8C:37:54:36:17:CA:12:46:36:50:40:59:C6:FA:DC:DB:D7:46
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1E42AECA3A4DFB848CEBA271C0C0DF67179D44F2
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39382e302f32342d3234203d3e20323036323634.roa
Signing time:             Sat 22 Oct 2022 04:34:36 +0000
ROA not before:           Sat 22 Oct 2022 04:29:36 +0000
ROA not after:            Sat 21 Oct 2023 04:34:36 +0000
asID:                     206264
IP address blocks:        185.192.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:42:ae:ca:3a:4d:fb:84:8c:eb:a2:71:c0:c0:df:67:17:9d:44:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:36 2022 GMT
            Not After : Oct 21 04:34:36 2023 GMT
        Subject: CN=0BE68C37543617CA124636504059C6FADCDBD746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:73:f6:62:1f:55:a9:0a:f2:3a:52:86:47:
                    e0:6b:6d:80:13:19:59:92:ba:d2:78:9b:8b:43:cd:
                    7c:2c:b2:31:58:7a:e3:ee:2e:a3:6d:c0:e5:80:ed:
                    09:e2:dc:11:2d:2d:94:fd:90:f6:80:ef:02:9e:28:
                    9e:e1:2a:cd:b1:de:13:94:07:20:0e:7e:9b:7d:08:
                    63:6f:19:7c:54:62:c8:6a:45:28:b5:77:b7:e5:31:
                    b8:70:4b:04:8e:6e:bd:45:24:59:4d:41:d6:c9:ba:
                    94:10:a0:fb:21:ee:e6:c0:f1:5c:a8:fa:b1:e3:59:
                    69:16:d1:91:49:3b:aa:07:ed:76:4c:b2:3e:60:b6:
                    dc:74:98:26:7e:15:b3:12:05:a7:1f:07:3f:83:7e:
                    fd:10:63:11:63:87:73:05:ce:ae:9a:6b:bd:d7:2e:
                    29:83:98:c9:83:dd:e3:87:a0:bd:ea:88:c9:49:2f:
                    b5:52:76:30:f3:9f:65:8e:55:82:3b:fd:75:79:0f:
                    84:54:2e:dc:90:b3:79:b3:a4:20:9b:69:62:ac:12:
                    28:39:66:39:2c:4e:19:14:6e:4d:ad:de:3e:0f:a3:
                    35:a5:06:0a:cc:61:01:ef:1a:e7:00:1c:72:a1:d7:
                    78:4b:ac:74:01:f8:fb:88:0c:6d:d0:ce:c4:ef:9e:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E6:8C:37:54:36:17:CA:12:46:36:50:40:59:C6:FA:DC:DB:D7:46
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39382e302f32342d3234203d3e20323036323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:47:f7:45:54:75:03:69:d4:b8:c5:d9:c7:aa:47:a1:73:be:
         20:85:82:98:86:26:62:97:12:f7:f1:95:01:48:0a:70:fc:41:
         b4:74:ca:21:43:f2:34:01:b2:9e:0b:ed:d5:73:8e:4b:7e:3d:
         b8:ab:b4:0b:a6:59:82:6e:e2:48:57:99:5b:3d:dc:81:0f:b0:
         5b:02:29:71:2c:a1:d3:1b:eb:03:2b:af:b6:21:13:a5:63:44:
         3f:46:26:10:31:2a:13:13:df:44:cf:e7:9b:09:af:58:6f:f0:
         24:eb:f4:2e:ed:0c:5d:26:28:aa:9d:72:f8:22:b8:a7:55:f9:
         c6:5d:40:f3:12:8b:d1:ff:b6:9d:0e:90:b0:75:dc:1f:b2:77:
         55:94:88:c2:33:d7:96:bf:07:96:39:39:bd:c7:eb:11:2e:f2:
         f3:ed:9f:0c:76:a1:34:a9:e5:ba:42:00:a0:eb:32:27:c8:f7:
         95:e6:46:c9:77:84:1f:3b:ae:94:af:0d:54:68:d1:f4:30:1e:
         ea:ba:f0:8f:5e:94:f8:d7:c9:78:7b:c6:d7:4c:aa:aa:ef:65:
         ff:47:83:49:1f:6a:eb:23:4c:95:4f:5e:bc:73:4b:a9:33:fd:
         70:9f:15:67:47:93:08:67:8a:05:ea:bc:ef:66:c1:08:a3:b3:
         bd:60:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net