Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230312e31302e302f32332d3234203d3e203437353833.roa
File:                     3138352e3230312e31302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          guWx4PojgpQuWDdBeuPHQ+YVrEnVX7a+hXhGnAi+PQA=
Subject key identifier:   2E:46:9C:62:E1:68:C5:1A:E0:07:54:89:FC:AB:88:67:17:BB:FC:7C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       72AC598331419387194C3832730178E3D3D24F69
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230312e31302e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:18 +0000
ROA not before:           Sat 22 Oct 2022 04:29:18 +0000
ROA not after:            Sat 21 Oct 2023 04:34:18 +0000
asID:                     47583
IP address blocks:        185.201.10.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ac:59:83:31:41:93:87:19:4c:38:32:73:01:78:e3:d3:d2:4f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:18 2022 GMT
            Not After : Oct 21 04:34:18 2023 GMT
        Subject: CN=2E469C62E168C51AE0075489FCAB886717BBFC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:43:cd:93:6f:6c:45:74:62:93:8c:de:25:b7:
                    df:ac:aa:9c:b8:0b:93:bc:d1:16:b6:72:44:96:74:
                    d9:73:54:3b:79:aa:df:85:b0:91:25:f0:1c:49:38:
                    63:1a:8c:20:29:6b:88:07:4c:ca:ff:c1:9e:1c:cf:
                    da:7b:8f:b9:6c:b6:89:60:31:47:5c:dd:d8:fe:19:
                    c2:58:1d:07:ec:0d:dc:6b:6e:6e:fe:2c:3a:41:7e:
                    f6:f3:4a:fe:bb:4f:aa:ad:f4:81:42:51:eb:11:0e:
                    a2:47:a0:a7:f2:64:c7:ea:20:0a:68:2a:f6:b1:24:
                    07:47:05:f5:64:3b:c9:c1:e5:55:2c:4a:2d:24:45:
                    e4:d8:7b:21:07:39:75:a8:ad:19:29:ba:7e:37:c1:
                    ee:cc:e6:fa:14:f9:98:7d:58:04:59:2a:a6:19:73:
                    47:86:0b:88:84:a4:e8:4b:07:01:a8:75:48:49:2f:
                    56:50:8b:7d:9d:b4:24:f6:61:2d:9a:43:89:db:15:
                    c4:b3:0b:ab:41:b6:ac:69:e1:fb:6d:32:74:10:b0:
                    1c:8d:ef:1a:c3:5a:e0:65:a4:b9:22:da:18:03:74:
                    b0:7a:7d:2b:54:1b:1f:1c:1c:12:f0:89:87:60:0c:
                    e4:5c:17:7e:b2:1d:d6:55:08:85:79:2a:af:98:fe:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:46:9C:62:E1:68:C5:1A:E0:07:54:89:FC:AB:88:67:17:BB:FC:7C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230312e31302e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:18:92:2d:b8:fc:fe:98:c2:3f:b3:0e:63:8c:41:44:ea:45:
         6d:c1:b6:97:fe:da:77:75:e6:de:67:66:4f:d4:38:7c:d4:a9:
         7b:1e:3f:22:d5:1d:38:b4:d7:4f:96:e8:b5:85:ab:ac:1d:d3:
         75:ab:c0:4c:9b:89:23:88:01:9a:3a:df:ac:6b:c0:7c:89:38:
         0f:5c:8b:fd:fc:6c:76:7a:ef:e3:25:cc:04:16:c3:95:ec:1d:
         85:f9:d0:fc:d6:bb:bd:be:de:a2:86:48:d2:6e:27:2a:99:38:
         2c:24:9a:a0:0e:11:0f:82:2a:4d:6c:9d:c0:14:31:fd:10:38:
         cb:18:78:8c:88:fe:ef:4f:4b:0b:db:09:e0:a7:24:ed:3f:85:
         2c:d4:41:6d:40:5a:6f:d0:a8:06:25:5e:e0:2e:88:05:b3:44:
         e0:2d:79:d5:41:ce:5c:58:2d:9e:3c:c0:ee:36:fe:e2:fe:d2:
         ab:7d:a5:1d:3b:fa:a2:63:f6:86:f2:02:78:9c:51:51:6a:ba:
         35:c6:a5:10:fc:49:0a:1d:9d:45:5a:dc:ec:eb:fc:0a:4a:6c:
         f3:75:99:65:03:c7:df:86:cc:f6:16:69:d0:72:48:5a:e5:31:
         ed:81:bf:7f:da:5f:59:8b:2b:b4:56:60:9f:41:92:34:71:1a:
         d4:c2:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net