Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e203632323430.roa
File:                     3138352e3231352e3138312e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          +H4YmRpKrwtvuaqUQptai3qS4UGYQwcwltw0JmvZFWQ=
Subject key identifier:   18:BA:8B:96:03:DA:06:0A:9B:78:6B:FD:00:CD:44:7D:B4:10:6B:F6
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       37623545F5BF0DC111B078C130EDD06E10EDD519
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e203632323430.roa
Signing time:             Sat 22 Oct 2022 04:34:19 +0000
ROA not before:           Sat 22 Oct 2022 04:29:19 +0000
ROA not after:            Sat 21 Oct 2023 04:34:19 +0000
asID:                     62240
IP address blocks:        185.215.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:62:35:45:f5:bf:0d:c1:11:b0:78:c1:30:ed:d0:6e:10:ed:d5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:19 2022 GMT
            Not After : Oct 21 04:34:19 2023 GMT
        Subject: CN=18BA8B9603DA060A9B786BFD00CD447DB4106BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:0c:b8:79:b2:96:e0:1d:d8:aa:0b:60:75:
                    8f:4b:88:77:bd:f2:e1:39:e8:84:4b:2d:a8:01:24:
                    ad:a4:10:ac:92:f0:36:bb:87:79:b3:96:fe:a1:61:
                    f6:92:50:e7:e2:ec:48:b1:09:73:93:de:d0:11:df:
                    7b:aa:9d:f4:b5:f7:d0:6f:dc:8f:b8:82:67:38:87:
                    d4:c0:12:0d:6e:df:58:20:2e:a5:12:f7:76:d0:58:
                    3f:08:80:2a:35:a2:d4:52:0a:42:ce:c7:31:b4:66:
                    13:41:30:10:c2:9f:db:3b:2b:d5:29:fa:83:cb:35:
                    d5:78:28:6c:4d:61:a0:f8:7e:6f:95:04:d0:c4:74:
                    cd:41:31:52:50:85:53:46:6f:6b:af:1f:a7:d6:12:
                    56:6c:73:fe:0e:37:41:e1:16:4e:32:29:1d:ab:c9:
                    5a:81:d8:3c:e1:a3:e2:2d:41:05:bd:8e:92:0a:f1:
                    89:50:6b:35:b4:09:12:cd:9d:db:06:88:b6:c4:85:
                    6d:4d:c1:03:67:ce:7d:b3:27:34:da:82:68:4a:a2:
                    fb:25:82:39:2d:48:84:52:f5:24:2e:68:eb:cd:e6:
                    d7:12:f6:0a:da:41:c7:44:ec:cf:e8:91:72:03:6c:
                    05:09:ac:9d:f0:62:d5:a2:84:09:94:b0:0d:71:40:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BA:8B:96:03:DA:06:0A:9B:78:6B:FD:00:CD:44:7D:B4:10:6B:F6
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:31:a1:67:d8:6f:fb:41:e0:f1:fb:d1:a0:74:bf:c8:80:
         65:f5:25:6b:b4:b0:30:22:47:39:ac:1a:3c:83:90:4d:55:89:
         72:c4:d2:be:4a:6c:fa:02:86:97:46:10:a9:2f:9e:cc:0d:e1:
         0e:f1:60:7a:f5:ef:88:30:79:47:fb:f2:73:92:4c:90:59:73:
         92:00:86:af:a9:ef:a7:db:d5:fb:bc:48:9a:97:4b:59:27:64:
         5d:cc:43:37:49:0e:c6:b4:c2:70:9b:3f:d7:72:45:a7:e0:2a:
         c5:00:3b:31:9e:84:22:0c:9b:dc:53:d1:87:6b:7a:e2:d7:fd:
         fb:44:c8:61:26:77:63:b6:ce:b9:54:4c:03:6c:bb:d3:05:4f:
         11:04:fd:98:d0:50:f5:dd:fa:b7:c5:63:60:f3:17:2c:84:39:
         23:a0:6e:d0:ca:21:14:20:93:d4:72:a3:36:30:26:98:b9:c6:
         de:a8:e9:7d:14:55:32:23:6e:20:4e:c9:aa:0e:92:f4:3f:fc:
         52:dc:25:ef:f5:2d:bc:9d:b3:96:8d:f3:40:08:a6:13:cb:18:
         e9:e2:d4:4e:38:75:2e:cb:e4:f1:a0:ee:de:ec:c2:fb:6a:a8:
         7a:f1:2a:11:d8:6a:76:7b:ea:d6:74:36:4c:ed:04:d4:c5:0f:
         89:0c:55:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net