Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39392e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3231342e39392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          dNEs1HSCd2obOkx4QI0X71W+Z9EKfeuCiiX7VIs1tF0=
Subject key identifier:   7C:DA:42:72:22:CB:6C:51:2E:C0:40:D4:C6:DE:58:B2:D7:6E:8B:5A
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       25AA2FC822FC853002428B7FABB822309A0205D3
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39392e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 11 Nov 2022 06:37:21 +0000
ROA not before:           Fri 11 Nov 2022 06:32:21 +0000
ROA not after:            Fri 10 Nov 2023 06:37:21 +0000
asID:                     136787
IP address blocks:        185.214.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:aa:2f:c8:22:fc:85:30:02:42:8b:7f:ab:b8:22:30:9a:02:05:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 11 06:32:21 2022 GMT
            Not After : Nov 10 06:37:21 2023 GMT
        Subject: CN=7CDA427222CB6C512EC040D4C6DE58B2D76E8B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:6d:00:0e:16:e1:93:39:c8:20:a6:1c:93:
                    51:1b:da:59:46:86:42:b4:ec:66:a7:3d:c8:c6:93:
                    47:44:22:5c:82:db:67:a6:ed:67:ae:f1:1b:e7:21:
                    ae:ed:16:23:49:25:b7:b8:83:4c:96:74:e0:ab:4c:
                    47:8e:d8:3d:e0:45:e5:c3:69:05:9f:cd:b7:9f:69:
                    87:9b:f1:76:db:4c:f7:47:bd:fd:5c:3e:91:ba:fe:
                    7b:af:37:b1:f3:21:f6:06:7a:b4:4a:31:63:36:28:
                    bb:7e:27:2b:d6:f1:ce:d8:3d:01:0d:3e:b4:f0:5a:
                    2f:8b:39:08:2d:ef:e8:ad:2e:f3:36:3d:69:e2:ad:
                    d5:be:30:29:a3:01:1f:e7:33:e0:8c:7d:fb:94:de:
                    48:04:cb:d4:8b:15:2a:b5:d2:36:69:f2:dd:19:ce:
                    5b:a9:d4:bb:a9:c7:3f:c5:ca:b4:51:39:f6:d8:b1:
                    0f:3e:d0:e9:1c:a5:58:23:db:fd:14:e4:ca:ca:08:
                    d7:b3:5c:4a:f2:19:5e:30:7a:30:87:d9:f1:7b:db:
                    c6:f8:5f:87:b1:78:ae:b7:bb:11:40:98:de:74:39:
                    c2:ed:d3:28:de:4b:7c:e4:c7:b5:09:35:ca:1f:a1:
                    35:36:26:07:67:9c:98:3b:40:7c:ad:16:a0:77:50:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DA:42:72:22:CB:6C:51:2E:C0:40:D4:C6:DE:58:B2:D7:6E:8B:5A
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39392e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:cf:3c:b4:51:1f:ba:d1:3e:ad:ba:d4:fc:d5:bf:86:27:28:
         ba:33:17:99:b6:49:16:e5:18:ba:be:91:a1:9e:c4:22:27:a7:
         b5:45:13:88:bd:1d:2d:f9:aa:c8:a9:12:50:86:01:23:6f:ab:
         d6:04:cd:99:cd:e6:3d:65:da:ab:65:13:22:e8:52:78:99:f4:
         42:d6:9e:bd:5e:65:7e:6c:d8:61:24:b6:23:6e:9b:03:38:ac:
         d2:74:53:b3:20:44:c2:0b:86:fb:21:bd:2f:93:36:ee:c5:e7:
         8a:aa:f7:ad:31:1d:09:02:26:0f:7c:5a:fd:3d:d2:34:48:34:
         cd:9a:bc:19:f6:35:9f:02:28:aa:0a:e0:2c:b0:04:31:97:8e:
         be:46:65:04:03:9c:aa:87:85:75:a1:2d:db:f6:ad:91:c5:72:
         90:4c:77:49:09:4e:9a:44:cd:4f:1e:35:c0:30:10:c8:0f:2a:
         17:0b:46:7d:bf:8f:ad:f5:4a:93:ba:4d:f8:dd:09:83:dc:7b:
         6d:51:02:04:a1:48:ca:15:2e:29:71:af:ce:30:0e:8a:cf:e1:
         42:ad:86:45:5b:8a:c7:f4:88:13:87:52:4d:39:02:d3:c2:76:
         6c:6f:4a:45:d7:5a:ad:d2:85:c8:f0:b2:0d:8e:32:4c:1b:4d:
         c8:98:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net