Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3233203d3e2031323339.roa
File:                     3138352e3139372e3235302e302f32332d3233203d3e2031323339.roa (raw, json)
Hash identifier:          QIVjFdBq0WdaFw2VIozYWWO1+AqaM9D8mQrKFxR/MRo=
Subject key identifier:   D5:22:60:C2:88:7A:87:29:43:26:AA:5C:F4:61:46:44:D4:EB:D6:3F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4EF82D1B0F2CDBF44FE4FC78DE4E09F3EE384003
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3233203d3e2031323339.roa
Signing time:             Tue 28 Jun 2022 04:40:40 +0000
ROA not before:           Tue 28 Jun 2022 04:35:40 +0000
ROA not after:            Tue 27 Jun 2023 04:40:40 +0000
asID:                     1239
IP address blocks:        185.197.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f8:2d:1b:0f:2c:db:f4:4f:e4:fc:78:de:4e:09:f3:ee:38:40:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:40 2022 GMT
            Not After : Jun 27 04:40:40 2023 GMT
        Subject: CN=D52260C2887A87294326AA5CF4614644D4EBD63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:25:87:b9:59:39:1d:4a:6c:2f:a1:5c:1b:
                    6e:c1:cb:58:20:3b:fa:c6:b5:f2:23:da:c3:ad:69:
                    1a:65:bc:7e:22:5d:17:56:46:db:05:35:87:ab:cf:
                    2d:bd:5f:af:3d:7f:cf:f6:88:7a:be:39:b6:cd:02:
                    03:4c:90:7e:f9:90:b4:03:be:9b:98:0f:75:c5:b2:
                    c7:eb:8c:35:d4:1f:fc:f1:98:9b:8b:e1:d1:94:94:
                    93:b9:b4:25:92:98:80:1f:42:3b:b8:2b:2b:a3:b6:
                    c6:d8:2b:4a:db:0d:c1:8b:08:4e:81:73:f1:b9:4f:
                    b8:f2:4d:79:e5:16:f1:1d:38:81:64:ff:8f:f3:15:
                    5d:6c:51:5d:59:e9:8e:e5:d9:cd:a3:95:98:7f:07:
                    9b:70:67:c7:61:9b:cb:f1:dc:61:fb:a8:fc:77:4d:
                    5a:0a:fa:d9:5c:a6:61:29:18:f4:a6:eb:cd:97:cb:
                    34:80:45:46:62:24:57:31:90:8b:df:0e:d0:e1:c8:
                    c5:07:3d:a2:88:f8:c2:00:a4:fc:22:4f:fb:26:4e:
                    b1:bb:03:7e:de:b5:b8:70:51:11:20:82:7c:62:87:
                    a1:75:49:7e:4b:c5:02:41:f1:f8:61:a3:e7:ee:de:
                    5f:ed:b1:5d:db:11:df:54:b0:0e:7d:6b:b3:af:c6:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:60:C2:88:7A:87:29:43:26:AA:5C:F4:61:46:44:D4:EB:D6:3F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3233203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:86:5f:2d:02:89:2e:fc:8e:29:36:ff:1f:df:1f:e6:a1:ce:
         fc:10:c5:6b:7c:e7:12:63:d0:e5:d1:27:6e:3c:88:6a:d0:de:
         7e:ad:69:d8:7f:05:bd:bc:23:aa:e4:6a:e2:3c:15:54:e1:71:
         e9:64:3c:53:87:31:28:39:b1:99:18:e9:47:27:fd:e9:28:cc:
         5b:63:eb:62:af:b7:91:0d:be:99:dd:6c:b4:aa:7a:f4:60:40:
         98:d4:40:56:ef:d7:dc:84:45:d4:f6:58:70:39:5d:f4:5f:b9:
         93:74:68:8d:84:0f:86:25:6b:9b:ea:5d:05:9b:8f:38:e4:27:
         71:9d:a0:77:04:b2:85:f2:9b:75:1d:e0:c7:ae:5b:0f:55:24:
         ed:22:49:c5:05:0f:ef:8d:f1:2c:0c:a4:2b:56:ef:b9:95:49:
         af:53:7e:d4:83:56:ef:42:93:90:1c:c6:20:62:65:d8:c4:26:
         e1:11:e7:5b:c3:0a:59:8d:23:3f:2a:a9:64:cb:35:14:26:5c:
         04:f2:73:8b:94:6f:92:fe:ff:90:ef:d7:39:f4:65:0c:f8:b9:
         58:5f:8b:95:ed:33:32:e0:2b:e1:fa:e3:b8:38:59:08:b3:21:
         e8:ce:1b:0a:c7:67:6e:ed:72:d7:01:c9:ef:78:f4:09:49:94:
         77:cd:31:bf
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUTvgtGw8s2/RP5Px43k4J8+44QAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1NDBaFw0yMzA2MjcwNDQwNDBaMDMxMTAvBgNV
BAMTKEQ1MjI2MEMyODg3QTg3Mjk0MzI2QUE1Q0Y0NjE0NjQ0RDRFQkQ2M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0syWHuVk5HUpsL6FcG27By1gg
O/rGtfIj2sOtaRplvH4iXRdWRtsFNYerzy29X689f8/2iHq+ObbNAgNMkH75kLQD
vpuYD3XFssfrjDXUH/zxmJuL4dGUlJO5tCWSmIAfQju4KyujtsbYK0rbDcGLCE6B
c/G5T7jyTXnlFvEdOIFk/4/zFV1sUV1Z6Y7l2c2jlZh/B5twZ8dhm8vx3GH7qPx3
TVoK+tlcpmEpGPSm682XyzSARUZiJFcxkIvfDtDhyMUHPaKI+MIApPwiT/smTrG7
A37etbhwUREggnxih6F1SX5LxQJB8fhho+fu3l/tsV3bEd9UsA59a7OvxpwpAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQU1SJgwoh6hylDJqpc9GFGRNTr1j8wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMxMzkzNzJlMzIzNTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIw
MzEzMjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG5xfowDQYJKoZIhvcNAQELBQADggEBAKGGXy0C
iS78jik2/x/fH+ahzvwQxWt85xJj0OXRJ248iGrQ3n6tadh/Bb28I6rkauI8FVTh
celkPFOHMSg5sZkY6Ucn/ekozFtj62Kvt5ENvpndbLSqevRgQJjUQFbv19yERdT2
WHA5XfRfuZN0aI2ED4Yla5vqXQWbjzjkJ3GdoHcEsoXym3Ud4MeuWw9VJO0iScUF
D++N8SwMpCtW77mVSa9TftSDVu9Ck5AcxiBiZdjEJuER51vDClmNIz8qqWTLNRQm
XATyc4uUb5L+/5Dv1zn0ZQz4uVhfi5XtMzLgK+H647g4WQizIejOGwrHZ27tctcB
ye949AlJlHfNMb8=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net