Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa
File:                     3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          D4pKK8KUgk/Pan6/tkI4N6JRKodG62zWUfLcDTg6ygI=
Subject key identifier:   E0:E8:84:F1:B1:37:E3:AF:64:01:F8:7E:10:8A:CB:EE:F5:95:EB:6B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       17B0C4D0D806956424E1829124C464AC0EAE4592
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:34 +0000
ROA not before:           Sat 22 Oct 2022 04:29:34 +0000
ROA not after:            Sat 21 Oct 2023 04:34:34 +0000
asID:                     51167
IP address blocks:        185.197.249.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b0:c4:d0:d8:06:95:64:24:e1:82:91:24:c4:64:ac:0e:ae:45:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:34 2022 GMT
            Not After : Oct 21 04:34:34 2023 GMT
        Subject: CN=E0E884F1B137E3AF6401F87E108ACBEEF595EB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fc:7a:4d:be:01:b6:59:f0:4a:a0:07:86:57:
                    63:64:ad:6d:98:0c:96:2d:47:af:d5:59:92:cc:03:
                    75:5f:51:2b:06:36:ff:ca:6b:41:4c:3a:8f:ce:60:
                    46:c4:1f:bc:26:40:8d:a7:cf:aa:24:ae:b0:51:48:
                    f8:b6:c3:3f:6a:ff:9b:9e:a6:21:3f:e2:68:4b:44:
                    ee:5a:33:bc:72:ac:42:fa:87:df:a5:7d:a3:34:5f:
                    76:c8:d4:44:19:d4:33:c8:84:fc:16:2c:b2:c8:62:
                    ff:2e:0e:0e:d3:1b:9d:f8:a0:f7:e2:f1:04:ef:fb:
                    af:94:34:84:1a:cc:37:ae:20:ff:c0:30:a5:6b:c6:
                    52:94:35:1e:9e:73:5e:87:6b:c8:1d:0d:82:e7:24:
                    5a:2e:78:c2:a4:28:ea:fc:bc:5a:36:83:07:80:ea:
                    0c:61:cb:3b:6e:0d:e1:84:c1:cf:99:d0:78:e3:34:
                    a0:35:8e:3a:1b:e9:11:64:ac:a2:4c:4c:f9:47:c7:
                    7d:0c:36:98:9f:38:21:15:c8:43:c6:c8:b2:9a:6d:
                    80:cc:35:9b:7a:dc:cb:3a:23:c2:0a:2a:ed:d0:a0:
                    77:1a:5b:85:3e:42:2f:fa:0c:98:83:b1:71:dc:a0:
                    27:b4:05:e3:60:d2:84:8f:8b:fd:8d:be:ef:e9:31:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E8:84:F1:B1:37:E3:AF:64:01:F8:7E:10:8A:CB:EE:F5:95:EB:6B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:62:65:95:7d:47:aa:48:db:6a:a3:d2:13:57:2f:8f:b3:ab:
         ae:f6:fa:e5:8d:92:c3:ef:08:1b:33:6f:5f:49:ce:66:21:a5:
         5d:cc:d3:14:5c:9b:db:c6:39:3a:09:98:19:60:01:a2:2f:02:
         d8:9e:ce:0a:31:4d:04:aa:13:fa:51:31:da:4b:f0:c4:d5:0d:
         fc:0a:4e:bd:22:2e:a6:cd:b1:3b:06:b1:ca:a3:2e:38:20:93:
         f7:3a:e0:bf:db:93:a3:e1:07:a6:ae:f6:47:a1:cc:68:72:3f:
         66:51:ed:7e:b1:2f:f4:16:28:79:e8:6e:5e:9a:54:cf:34:17:
         08:1a:e0:d3:6c:88:8a:45:4c:cb:e7:32:03:ea:90:44:5c:55:
         21:c3:bd:a4:ed:4a:44:32:a4:f3:e9:72:ee:91:36:79:b9:57:
         e4:33:0b:40:43:02:e2:06:90:ea:01:a6:67:1e:2d:a9:90:db:
         1e:4a:80:42:1a:bc:73:e9:7d:10:19:c3:4b:08:14:9c:b5:5d:
         78:3f:ca:0d:5f:74:24:99:3e:0e:6d:77:94:1e:de:97:f7:f6:
         f0:41:32:42:79:d5:50:8e:51:f3:f6:ff:01:d8:e6:7f:e5:00:
         3e:86:0a:65:31:34:85:30:b5:98:38:5a:06:02:99:4f:48:3a:
         88:da:ce:c9
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUF7DE0NgGlWQk4YKRJMRkrA6uRZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MzRaFw0yMzEwMjEwNDM0MzRaMDMxMTAvBgNV
BAMTKEUwRTg4NEYxQjEzN0UzQUY2NDAxRjg3RTEwOEFDQkVFRjU5NUVCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi/HpNvgG2WfBKoAeGV2NkrW2Y
DJYtR6/VWZLMA3VfUSsGNv/Ka0FMOo/OYEbEH7wmQI2nz6okrrBRSPi2wz9q/5ue
piE/4mhLRO5aM7xyrEL6h9+lfaM0X3bI1EQZ1DPIhPwWLLLIYv8uDg7TG534oPfi
8QTv+6+UNIQazDeuIP/AMKVrxlKUNR6ec16Ha8gdDYLnJFoueMKkKOr8vFo2gweA
6gxhyztuDeGEwc+Z0HjjNKA1jjob6RFkrKJMTPlHx30MNpifOCEVyEPGyLKabYDM
NZt63Ms6I8IKKu3QoHcaW4U+Qi/6DJiDsXHcoCe0BeNg0oSPi/2Nvu/pMUqrAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU4OiE8bE3469kAfh+EIrL7vWV62swHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMxMzkzNzJlMzIzNDM5MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIw
MzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnF+TANBgkqhkiG9w0BAQsFAAOCAQEAhmJl
lX1HqkjbaqPSE1cvj7Orrvb65Y2Sw+8IGzNvX0nOZiGlXczTFFyb28Y5OgmYGWAB
oi8C2J7OCjFNBKoT+lEx2kvwxNUN/ApOvSIups2xOwaxyqMuOCCT9zrgv9uTo+EH
pq72R6HMaHI/ZlHtfrEv9BYoeehuXppUzzQXCBrg02yIikVMy+cyA+qQRFxVIcO9
pO1KRDKk8+ly7pE2eblX5DMLQEMC4gaQ6gGmZx4tqZDbHkqAQhq8c+l9EBnDSwgU
nLVdeD/KDV90JJk+Dm13lB7el/f28EEyQnnVUI5R8/b/Adjmf+UAPoYKZTE0hTC1
mDhaBgKZT0g6iNrOyQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net