Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234342e302f32342d3234203d3e20323132303737.roa
File:                     3138352e3230352e3234342e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier:          vWQ9iNlqmuAS6bWBV0tGloxa4CJQPj6n8/hZYM4azA0=
Subject key identifier:   C1:81:CC:A9:28:96:5C:AE:4C:F8:C8:B5:A8:C3:3C:03:7C:81:9B:F3
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       11B7A0882FC420DE7FD4FB6235F44EEB9DD388BA
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234342e302f32342d3234203d3e20323132303737.roa
Signing time:             Thu 02 Dec 2021 19:00:00 +0000
ROA not before:           Thu 02 Dec 2021 18:55:00 +0000
ROA not after:            Thu 01 Dec 2022 19:00:00 +0000
asID:                     212077
IP address blocks:        185.205.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b7:a0:88:2f:c4:20:de:7f:d4:fb:62:35:f4:4e:eb:9d:d3:88:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec  2 18:55:00 2021 GMT
            Not After : Dec  1 19:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:96:0b:12:35:eb:b1:19:b5:84:dd:09:ec:
                    e1:df:e4:6d:c6:a8:64:58:85:dc:0a:d4:80:70:d8:
                    89:c4:66:99:ba:c2:2b:c4:55:bf:91:28:98:14:5f:
                    18:33:10:8a:e2:dc:97:9c:31:ad:5c:ef:c1:d6:41:
                    31:2b:81:dd:bb:9c:e6:86:5d:51:13:bd:96:88:92:
                    61:01:c2:01:4f:9f:eb:d9:8a:5b:12:a3:14:18:ba:
                    53:c5:2f:61:6e:41:c2:77:89:15:9c:1f:60:b2:65:
                    8c:0e:73:b1:d6:e9:12:79:a7:59:47:88:c2:a1:6d:
                    e8:cf:26:89:ce:69:00:2e:59:04:2b:cd:9f:38:e4:
                    57:3d:32:3a:51:10:8c:30:18:50:f6:50:23:f6:b8:
                    ea:4b:35:2b:e6:13:2d:d1:a3:6d:48:c5:20:f6:64:
                    92:17:1e:58:3d:6c:ec:c3:de:1d:1b:4a:29:b8:c4:
                    82:4d:af:69:3a:57:26:43:c3:b8:46:cd:6c:27:3d:
                    a3:fa:b7:82:a5:dc:1a:ff:f7:80:30:8a:be:1f:1c:
                    f5:5c:20:85:91:60:b6:72:1e:71:19:2f:ad:14:aa:
                    c1:f0:5c:1e:3a:eb:56:83:d2:ea:e1:b4:fe:9b:7a:
                    45:6f:71:09:05:3b:ec:ac:33:97:e6:82:d3:e5:22:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:81:CC:A9:28:96:5C:AE:4C:F8:C8:B5:A8:C3:3C:03:7C:81:9B:F3
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234342e302f32342d3234203d3e20323132303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:8b:d2:14:db:61:44:c2:2c:7b:da:b1:c4:7e:ea:d0:f1:
         4b:b1:5b:f8:7b:5b:f8:6e:0a:68:19:08:dd:59:cf:e3:61:9d:
         b0:37:db:b0:39:81:1b:ee:9e:77:80:e1:71:a7:af:1c:f4:ca:
         40:3e:b7:7f:41:86:6f:37:46:22:78:81:b2:1d:c9:39:83:1f:
         3a:23:9d:73:50:50:b4:cd:5f:9b:23:c5:4c:c2:d0:21:48:85:
         2c:b2:48:f6:e5:f1:0b:8f:c2:fe:17:f3:5f:ec:36:2a:6c:a5:
         13:ed:66:5a:ea:70:d3:12:43:fd:b4:65:4e:1c:a8:68:4d:b9:
         62:10:57:bc:ca:af:90:37:da:3c:97:1d:4c:1d:af:1f:fb:df:
         06:fb:a9:93:2e:d9:3c:21:c0:46:45:15:00:07:31:cc:4f:58:
         49:16:f4:24:26:f7:70:83:f8:39:12:9d:00:02:88:7a:39:07:
         3b:68:de:f6:0a:8c:d9:cc:e2:7b:8c:fb:56:ea:c1:64:79:92:
         62:41:35:6a:1e:14:e9:1a:ed:5c:69:17:c7:2e:f1:84:61:05:
         a2:f7:3f:4d:c7:a2:22:84:27:ab:6f:6e:0b:29:f2:49:37:6b:
         3d:6a:75:45:47:08:28:bb:87:93:69:af:f4:24:ba:5b:b0:e8:
         bb:2e:ab:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net