Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39392e302f32342d3234203d3e20323130343339.roa
File:                     3138352e3231342e39392e302f32342d3234203d3e20323130343339.roa (raw, json)
Hash identifier:          fPC61J+ioI2bYaPwU7WaWwSm8oaH9NomJWAGp15sla8=
Subject key identifier:   8F:4A:75:21:D9:80:EE:C3:1B:54:FA:4B:A3:18:42:0B:AA:A7:22:20
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2D1FD67BBED4C7B65AF701688B93C7CF7CB80B33
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39392e302f32342d3234203d3e20323130343339.roa
Signing time:             Mon 16 Jan 2023 09:30:40 +0000
ROA not before:           Mon 16 Jan 2023 09:25:40 +0000
ROA not after:            Mon 15 Jan 2024 09:30:40 +0000
asID:                     210439
IP address blocks:        185.214.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1f:d6:7b:be:d4:c7:b6:5a:f7:01:68:8b:93:c7:cf:7c:b8:0b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 16 09:25:40 2023 GMT
            Not After : Jan 15 09:30:40 2024 GMT
        Subject: CN=8F4A7521D980EEC31B54FA4BA318420BAAA72220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:53:b9:b0:ae:fb:e3:63:02:a6:6e:76:0f:
                    e7:cb:25:e7:3f:6d:e3:0c:3d:e9:84:9a:e7:33:b8:
                    c6:aa:06:cb:bb:05:5a:97:0d:86:f4:db:d4:f4:a0:
                    74:ab:90:42:e9:f3:50:a0:a1:b1:6a:eb:66:a7:42:
                    7f:a8:4e:57:25:46:12:82:a6:de:ca:e6:07:0f:6b:
                    b5:fc:69:20:12:41:5c:53:36:35:85:ef:e2:3b:2d:
                    74:ac:03:e7:09:4c:cc:c0:80:50:10:d8:4f:ec:a3:
                    34:3b:5e:e8:bd:df:d2:4e:94:ce:ae:ae:0b:f6:db:
                    52:7a:0f:15:2b:2f:ec:c6:70:da:a3:a7:6b:f9:43:
                    8f:7f:a6:38:83:26:0a:3e:36:d0:17:95:4b:8c:97:
                    af:14:62:f2:50:d8:8e:d2:70:9b:16:18:8f:87:d0:
                    7f:2a:50:cc:11:33:97:1e:aa:4c:e0:74:8e:52:c2:
                    f1:d8:16:15:a2:51:15:90:6c:4f:05:12:27:58:04:
                    f8:58:55:0b:67:a9:ec:6d:b6:2b:20:b0:3c:91:54:
                    d8:3b:54:1f:42:be:9f:d6:29:32:95:04:7a:74:15:
                    21:69:5b:ab:fb:3b:b4:82:82:e6:4b:8e:ed:84:02:
                    e5:5f:07:f1:2d:0a:90:2f:eb:3e:d7:af:90:30:99:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4A:75:21:D9:80:EE:C3:1B:54:FA:4B:A3:18:42:0B:AA:A7:22:20
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39392e302f32342d3234203d3e20323130343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:68:25:2d:0d:6f:e2:8a:34:8d:b1:e8:12:0a:f0:b2:5f:54:
         04:56:86:d0:e0:b7:a1:61:6f:ac:5f:78:61:73:a5:f4:49:a3:
         b3:e3:3e:51:07:dd:be:29:91:3a:24:ec:f5:e0:a0:4d:48:a8:
         e5:2d:bc:b8:f4:3c:e1:f5:e5:89:ae:6e:ca:a3:dc:a1:5d:89:
         1d:bd:70:6f:b5:4f:24:57:82:ae:c1:29:79:a1:a7:cb:55:41:
         d5:a4:2f:ed:4b:5b:d7:f3:85:36:ef:99:6d:e0:52:57:1a:f2:
         3d:da:77:25:66:36:f9:93:62:b6:1b:49:37:cf:7a:82:0e:a4:
         cb:97:8e:e7:4f:02:87:5c:25:dc:75:06:78:78:0c:e0:e7:bf:
         94:15:4b:5a:52:46:26:5d:ab:33:97:97:0d:64:c1:91:de:09:
         ff:92:a0:60:14:ac:ef:33:76:7e:a3:b3:ad:ff:fb:7e:b8:d0:
         e6:2a:e6:5a:db:89:87:e1:e4:23:31:62:aa:c0:ee:7f:a1:06:
         8f:ac:92:b8:67:0b:1d:24:e5:52:46:4b:0f:12:ea:05:52:5f:
         44:21:52:47:9b:22:d1:97:f2:3a:8f:54:29:fa:14:6b:6e:df:
         84:8b:ca:a4:93:71:c5:6d:1c:0e:51:b7:81:93:d1:3f:0e:2a:
         51:64:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net