Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231302e3134342e302f32322d3234203d3e203437353833.roa
File:                     3138352e3231302e3134342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          +dGd4nnndAwV5A1c/cYynlWFP4l/7qlg6Vr4rZe/rnY=
Subject key identifier:   66:4D:41:D6:68:06:72:89:C7:13:B2:25:D8:72:C7:E6:26:BB:9D:19
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1785082B142670A382337E76AC065008450217BC
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231302e3134342e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:14 +0000
ROA not before:           Sat 22 Oct 2022 04:29:14 +0000
ROA not after:            Sat 21 Oct 2023 04:34:14 +0000
asID:                     47583
IP address blocks:        185.210.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:85:08:2b:14:26:70:a3:82:33:7e:76:ac:06:50:08:45:02:17:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:14 2022 GMT
            Not After : Oct 21 04:34:14 2023 GMT
        Subject: CN=664D41D668067289C713B225D872C7E626BB9D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:61:2f:3b:74:08:4b:44:77:cf:4a:72:64:
                    48:a8:6a:bc:be:66:11:f8:fe:7c:d7:07:df:93:d5:
                    4c:e3:7a:36:c9:66:01:6a:e3:19:fd:0f:cd:a7:02:
                    09:24:6c:e3:42:c3:2a:4e:02:4b:31:73:74:ed:c9:
                    0a:c8:f0:c8:33:59:d4:09:34:6b:ee:76:2f:a9:85:
                    50:d4:9c:57:36:6d:b4:40:59:0e:3e:a4:d1:67:20:
                    2f:33:88:65:f9:58:4f:81:5b:90:15:a1:93:1b:4c:
                    85:6f:2a:bd:0f:aa:af:1f:80:6e:f4:70:3e:24:53:
                    b1:4f:10:a5:a1:81:e8:5b:9b:28:cb:13:e0:4e:69:
                    fd:4b:6c:d4:03:45:7b:99:4d:21:c0:92:02:21:a0:
                    bd:41:10:3c:cb:f1:f3:e9:15:08:fa:36:85:a5:88:
                    19:ac:4e:5b:6d:c6:63:90:0f:83:46:69:68:52:0f:
                    71:ba:5b:a8:f0:e8:30:fe:0b:10:c0:3d:97:30:bc:
                    7a:1e:40:37:9b:a0:61:df:82:e4:ea:96:52:e0:f4:
                    01:d4:e6:02:d7:51:75:98:b2:5b:e8:a6:e0:c9:52:
                    3b:ff:17:a4:63:53:a8:e3:39:75:e2:81:16:b8:81:
                    46:33:c4:06:18:83:8c:fb:7b:df:2b:d1:e0:a0:29:
                    83:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4D:41:D6:68:06:72:89:C7:13:B2:25:D8:72:C7:E6:26:BB:9D:19
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231302e3134342e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:bb:dd:12:3d:cd:a3:02:47:05:73:ef:17:a1:73:bc:37:13:
         68:5a:df:61:d7:0a:82:ab:7b:66:fd:87:cb:db:47:b7:76:ea:
         97:d1:0d:1c:6a:d8:93:3e:7f:ff:8e:16:98:c5:e0:df:ff:ba:
         9b:64:a4:ff:b0:4a:e0:81:9d:9f:8f:34:7b:00:a0:fc:4c:0f:
         90:4b:2d:60:6a:d0:98:8d:76:72:c3:67:d8:4f:53:48:15:8d:
         73:ac:8c:d9:0f:b1:d6:e7:31:f3:4c:ed:fb:93:93:b0:09:30:
         7c:c9:00:59:9c:94:99:10:75:1c:a2:67:a1:0e:e1:2a:5e:f8:
         6f:dd:43:15:f1:fc:1f:b1:90:61:6e:1c:87:c9:88:70:a8:5d:
         7a:d5:c2:63:dc:81:cc:43:c4:05:fd:8d:0c:55:17:d5:ba:17:
         81:ef:e5:8d:42:02:3a:9f:72:ef:2b:32:5a:4c:12:c2:11:53:
         4e:fa:14:25:06:39:c2:17:9f:36:0d:c5:36:bf:b3:f3:19:70:
         5c:ae:d3:0d:2a:f0:5f:f7:d7:1f:c1:5a:09:7f:17:0e:6f:30:
         96:c8:4f:f1:ae:16:b1:62:92:18:36:95:92:38:31:5d:fe:ca:
         bc:61:82:ba:47:52:f4:8a:7a:ce:14:da:d0:53:48:c2:27:65:
         5d:76:81:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net