Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3232203d3e2037303239.roa
File:                     3138352e3230362e3234302e302f32322d3232203d3e2037303239.roa (raw, json)
Hash identifier:          v3A31pWJuxc1PRAGT+r2k2qnZKgCeNbIJ71GDsD6n5s=
Subject key identifier:   37:B7:5C:AC:AF:EB:0A:D6:B9:1B:00:CB:93:AF:2E:BE:C9:44:81:3A
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       63E49060A3DB6CA98F8A541273943494D8D39B29
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3232203d3e2037303239.roa
Signing time:             Tue 28 Jun 2022 04:40:43 +0000
ROA not before:           Tue 28 Jun 2022 04:35:43 +0000
ROA not after:            Tue 27 Jun 2023 04:40:43 +0000
asID:                     7029
IP address blocks:        185.206.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e4:90:60:a3:db:6c:a9:8f:8a:54:12:73:94:34:94:d8:d3:9b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:43 2022 GMT
            Not After : Jun 27 04:40:43 2023 GMT
        Subject: CN=37B75CACAFEB0AD6B91B00CB93AF2EBEC944813A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:11:45:9b:94:bc:c1:a0:65:5e:0e:1e:03:
                    89:73:d5:17:da:1f:ce:2f:e1:06:1d:e0:9e:dd:60:
                    22:db:e2:ea:e8:9e:1e:84:c0:4e:e2:3e:8c:f0:f9:
                    06:0f:12:f4:e1:28:99:f4:c8:73:1d:0f:da:3b:14:
                    f5:1f:d4:63:6f:92:15:88:fd:45:46:42:d7:df:f6:
                    4c:3d:19:e5:8c:ea:96:8e:b9:0d:29:b6:74:bf:7c:
                    5c:6a:37:44:ca:bd:51:26:da:e5:66:01:73:cb:1f:
                    09:41:82:d3:b1:60:eb:01:6c:20:cb:4e:d6:4a:1e:
                    28:6a:48:34:1f:f8:41:28:76:ce:ba:77:1a:3f:7e:
                    6e:ea:03:89:e5:93:88:14:a4:4c:7c:8a:2f:bb:26:
                    86:3f:66:de:8c:0f:b8:5f:7e:3a:23:1c:af:84:5f:
                    4a:7d:a8:f6:7a:10:ca:9f:16:56:21:af:fb:f8:0c:
                    96:e1:e1:18:d1:46:e9:1f:9e:f8:f1:fd:ee:40:6d:
                    e2:9f:f4:2e:39:0f:f1:f4:39:0b:2a:8f:58:62:71:
                    a3:be:b0:cd:17:04:84:88:4d:c8:ef:b9:3c:2f:54:
                    5f:66:24:13:c5:cd:2a:36:43:0f:1c:35:91:77:1a:
                    d7:ba:ac:0f:04:75:8b:61:66:5f:b7:83:10:40:2d:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B7:5C:AC:AF:EB:0A:D6:B9:1B:00:CB:93:AF:2E:BE:C9:44:81:3A
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3232203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:62:b5:5d:d2:ba:e0:cb:8d:82:0b:1c:ed:b7:34:b6:b6:2f:
         8e:3e:6a:26:11:81:12:21:5c:a9:5f:cc:10:8d:06:b3:2b:31:
         a9:65:1b:fc:d3:24:8d:33:95:0a:fe:96:41:01:45:ec:5b:53:
         63:55:de:ba:31:28:ca:9f:b6:6b:7b:3b:c4:e5:48:f4:ff:fc:
         e3:e1:4c:c1:40:bd:f9:74:79:83:85:8a:28:1a:a8:ca:d9:50:
         d8:8a:f3:ab:1c:41:c2:e9:64:69:44:95:44:ea:8b:77:0b:c7:
         54:c0:39:e9:9c:92:e9:d2:96:06:5f:05:85:e6:01:b9:4c:ae:
         c5:2d:a1:58:66:69:cf:3e:e5:f1:13:57:89:ab:82:bf:b6:a6:
         51:6e:76:9d:78:be:60:7f:99:7f:29:02:22:9e:5a:93:99:b2:
         9c:ef:64:36:e7:48:cf:71:81:19:b5:59:dc:df:6f:8e:a6:99:
         03:cb:9c:1a:b0:8d:94:c2:d8:7e:29:ad:d1:b4:05:22:83:2c:
         8a:70:9c:7e:8d:79:0b:2f:d6:9f:ff:e1:52:46:65:df:47:ee:
         bb:af:c6:d5:bf:87:c7:2b:9c:ac:1f:f6:ce:58:93:6b:63:6f:
         65:4c:87:37:5c:7a:e8:8d:60:11:55:a4:d9:54:a4:22:35:c5:
         fb:23:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net