Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230332e3132322e302f32342d3234203d3e20313437303439.roa
File:                     3138352e3230332e3132322e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          cgYsjXwm3FAMeUGAkrBjW4MfqmGvtAxLK+KeFQS9x2w=
Subject key identifier:   38:A8:7A:58:1E:CC:AA:6E:64:68:08:8B:8A:19:36:4D:75:A8:F7:81
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       60C234E247A76F0A32873D085B29490D0EF1A8B1
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230332e3132322e302f32342d3234203d3e20313437303439.roa
Signing time:             Tue 28 Jun 2022 04:40:36 +0000
ROA not before:           Tue 28 Jun 2022 04:35:36 +0000
ROA not after:            Tue 27 Jun 2023 04:40:36 +0000
asID:                     147049
IP address blocks:        185.203.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c2:34:e2:47:a7:6f:0a:32:87:3d:08:5b:29:49:0d:0e:f1:a8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:36 2022 GMT
            Not After : Jun 27 04:40:36 2023 GMT
        Subject: CN=38A87A581ECCAA6E6468088B8A19364D75A8F781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:c8:57:46:7f:c4:a8:b0:83:4c:5d:ee:a3:
                    e0:5f:32:6c:87:59:63:3b:2b:79:d8:65:b4:57:d3:
                    93:ed:62:e4:f9:d3:30:09:b4:f6:5c:15:b7:b7:4c:
                    7a:e4:3b:95:25:b0:b0:79:63:e8:1f:37:4c:3f:9e:
                    1c:ae:2d:30:dd:e4:25:3a:67:c0:b9:93:01:0a:68:
                    61:2a:8a:39:68:ea:46:fb:1a:de:8e:c5:93:15:12:
                    5b:f9:e1:9f:49:dc:96:c7:98:68:a7:55:98:1b:22:
                    b2:91:28:e9:36:72:8d:a1:1d:28:65:07:18:21:7a:
                    81:c3:51:82:5d:c2:bf:59:08:b2:3f:76:30:06:3f:
                    88:57:7e:31:a2:8b:77:d1:73:54:e1:48:b2:9a:e6:
                    03:49:d2:35:45:c2:c3:e0:c2:6c:7a:0a:8f:95:27:
                    81:88:8e:e7:60:c1:86:9e:7c:67:33:8d:0f:66:ad:
                    e7:c9:57:aa:05:9b:6e:40:51:0e:31:78:11:9e:b5:
                    3d:eb:75:1e:e7:86:c4:21:0a:f7:05:e0:b8:f9:b0:
                    83:fe:f2:67:86:66:91:6f:3e:6b:ec:48:63:d1:ed:
                    1f:b3:e1:dc:51:a4:1d:39:2d:2c:aa:14:89:cf:af:
                    88:eb:1b:3c:fc:d8:f3:cd:4d:96:d1:c4:7f:dd:a0:
                    da:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A8:7A:58:1E:CC:AA:6E:64:68:08:8B:8A:19:36:4D:75:A8:F7:81
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230332e3132322e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:db:4d:91:e5:04:db:fa:bd:9b:e6:c4:20:54:6d:16:76:
         8c:78:6f:96:11:10:22:54:80:9a:83:55:ac:a1:f9:a2:51:8c:
         06:35:ef:9f:57:93:21:13:a9:d3:55:35:36:f1:6a:18:a8:ad:
         d3:cf:7e:99:53:84:53:14:22:1c:f5:47:1d:6d:47:30:18:b2:
         14:1c:66:54:cf:1e:f8:4a:ba:57:14:ce:86:4e:f1:80:99:a7:
         3e:98:c6:11:83:f3:0e:b9:2c:7f:15:cb:03:1f:87:e8:18:21:
         80:4d:d7:e6:db:c7:b0:b7:02:a5:93:28:2a:de:b4:3f:a9:e2:
         f2:a4:80:7a:56:04:ab:87:5e:01:4c:34:5b:4a:02:6d:1a:75:
         d4:ad:ae:24:b5:60:15:07:39:a5:2b:84:59:a3:9d:6c:f5:81:
         4a:a4:7b:d2:d2:a1:ac:64:71:fa:90:38:ee:7e:04:82:74:b9:
         7b:fe:d8:d7:50:ca:9d:e2:50:00:c3:1b:6a:cf:48:3e:1a:87:
         e1:d5:62:98:ee:5d:27:3f:42:a0:16:2e:78:e5:54:bb:61:2f:
         2e:a2:15:b3:12:6c:b6:09:6f:fa:c5:e9:49:ac:d6:11:c6:06:
         b8:35:53:72:51:ee:77:d4:8b:2f:52:37:22:54:fa:37:d0:03:
         86:0f:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net