Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3234203d3e2037303239.roa
File:                     3138352e3230362e3234302e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          kmSXYioOh8yc7nfPHpYXsFpCcI9GIrEB+G/hx2XVlVs=
Subject key identifier:   65:26:D1:25:8D:90:C5:8F:88:31:7F:6E:9F:B6:C7:26:B9:7B:BF:95
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       099EE5DF008D059C1812AD3F69E633602162C16D
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3234203d3e2037303239.roa
Signing time:             Tue 28 Jun 2022 04:40:46 +0000
ROA not before:           Tue 28 Jun 2022 04:35:46 +0000
ROA not after:            Tue 27 Jun 2023 04:40:46 +0000
asID:                     7029
IP address blocks:        185.206.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9e:e5:df:00:8d:05:9c:18:12:ad:3f:69:e6:33:60:21:62:c1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:46 2022 GMT
            Not After : Jun 27 04:40:46 2023 GMT
        Subject: CN=6526D1258D90C58F88317F6E9FB6C726B97BBF95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:43:25:fe:b4:55:9f:77:98:a9:d0:3c:19:
                    18:16:95:8a:eb:14:6d:5e:f7:17:cc:9b:1e:dc:dd:
                    81:24:fd:56:c8:0c:64:05:56:e5:16:15:78:c5:a1:
                    ae:92:0f:a8:ab:5a:09:31:15:2c:94:3a:a1:36:d8:
                    b7:de:ab:0c:43:15:38:41:a8:1e:4f:08:23:54:35:
                    eb:ea:cd:24:0a:c5:41:03:ac:52:8b:0e:2b:ef:01:
                    b4:0f:3b:e6:5d:5d:45:dc:35:5d:ec:0f:44:0b:97:
                    87:61:8a:eb:48:95:fb:9d:29:56:64:48:01:0d:ff:
                    3e:e3:d4:43:cd:eb:b1:2f:43:b2:22:7e:06:2a:4b:
                    df:ea:5f:49:02:7f:cd:45:85:00:99:6a:2f:60:06:
                    20:5d:25:18:32:39:3a:43:e1:c1:4c:16:ac:07:f2:
                    65:cd:a9:29:6c:6d:88:68:5b:86:25:4a:4b:49:a2:
                    61:f8:14:a3:42:4f:c6:b2:50:9d:a3:9e:0c:bf:4e:
                    8a:25:06:fe:d0:0b:7e:1a:94:b1:a1:a3:0b:30:1c:
                    74:59:9e:fc:fa:dd:92:cb:99:05:45:43:e1:8d:aa:
                    16:15:48:66:15:69:ee:d6:4f:eb:6e:b7:cf:01:70:
                    53:6b:6c:01:1c:e2:51:0d:2a:fd:d1:39:c0:0d:54:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:26:D1:25:8D:90:C5:8F:88:31:7F:6E:9F:B6:C7:26:B9:7B:BF:95
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:2c:3c:fe:00:06:68:e1:00:c6:81:84:38:6c:84:35:96:26:
         78:33:e3:50:22:37:50:93:cf:16:41:da:f3:99:7e:2c:04:10:
         43:5c:e0:13:c0:e7:38:66:e4:23:e9:8b:b2:78:c7:f2:a0:de:
         bc:e9:c4:0c:2a:1c:93:b5:f6:fe:39:d9:fe:77:c6:69:1b:39:
         21:31:38:cf:f0:09:3d:3c:f9:4f:08:ef:dd:32:e6:d3:c5:6a:
         e6:4c:4e:64:5e:f8:b2:96:72:cf:17:ce:1d:e0:0f:a4:ec:9c:
         0e:7d:a1:04:f2:32:54:69:c3:22:94:11:a7:d9:cd:10:91:42:
         c7:c7:f2:e0:8e:c9:44:d7:1f:1c:a3:00:48:78:56:40:ea:ca:
         dd:4c:65:2d:5e:63:65:d7:2c:da:4f:04:f7:1c:f5:e4:b7:34:
         04:c9:b3:e2:ed:19:b8:6a:68:17:0a:6c:96:ce:e3:de:d0:14:
         66:39:24:ca:c7:7c:e6:b8:fb:79:6e:47:d8:4c:e0:c5:87:5d:
         9f:4c:9c:94:e5:1b:a0:f5:6c:f3:47:4a:2d:ea:cd:7e:74:4a:
         ad:f1:1f:eb:cd:45:b8:e4:9e:23:16:74:5e:ca:4e:a2:fb:86:
         f4:b1:aa:fe:65:76:70:e8:4e:3d:6f:33:4d:7e:64:2e:f2:a7:
         17:5b:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net