Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231362e3230312e302f32342d3234203d3e203235333639.roa
File:                     3138352e3231362e3230312e302f32342d3234203d3e203235333639.roa (raw, json)
Hash identifier:          SJY3z44UhZLwzL72T+6sFIj+NBhoux0oyCcswWIQwSM=
Subject key identifier:   77:B9:37:C9:F1:14:C9:1E:4A:52:23:8B:DE:3B:49:8D:48:1F:33:1E
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0EB48390E40DF842C9BFB8A8A5859085002E32EF
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231362e3230312e302f32342d3234203d3e203235333639.roa
Signing time:             Tue 28 Jun 2022 04:40:47 +0000
ROA not before:           Tue 28 Jun 2022 04:35:47 +0000
ROA not after:            Tue 27 Jun 2023 04:40:47 +0000
asID:                     25369
IP address blocks:        185.216.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b4:83:90:e4:0d:f8:42:c9:bf:b8:a8:a5:85:90:85:00:2e:32:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:47 2022 GMT
            Not After : Jun 27 04:40:47 2023 GMT
        Subject: CN=77B937C9F114C91E4A52238BDE3B498D481F331E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:3d:32:61:d5:ad:32:e0:dc:a6:de:5a:17:
                    7a:14:00:55:40:62:41:07:da:b7:ab:14:ee:02:30:
                    0e:62:b1:8e:fb:84:3a:19:f9:58:32:b9:31:3e:c9:
                    e5:42:ef:ed:41:d0:08:fd:82:09:78:61:1c:c5:10:
                    81:8c:0c:53:39:f6:cb:f2:25:64:ce:7a:3c:c5:0a:
                    9c:84:98:ef:7e:7a:a2:98:9c:38:28:93:44:e9:b7:
                    67:b9:7b:8f:3d:76:03:03:8b:cb:69:e8:11:58:86:
                    98:17:76:d9:bd:9b:a1:e1:4e:15:79:31:d3:64:99:
                    fd:f6:9f:fa:1a:bc:57:6b:a2:c3:e9:34:c6:c0:66:
                    1f:e5:73:eb:a7:cc:10:37:6b:84:59:b2:41:05:45:
                    a1:28:0b:f0:9e:9b:12:05:fc:be:19:f1:90:00:8d:
                    f5:d5:4d:88:d6:c7:97:2e:04:05:97:e7:18:34:07:
                    7e:5f:1b:8c:ad:ff:fe:3d:36:10:e2:2c:c1:7f:bc:
                    74:4c:4a:a0:9f:91:42:a7:5c:c4:63:4d:6c:72:10:
                    ba:3c:7a:f5:df:5c:52:d4:bc:07:18:e4:88:d0:f3:
                    fe:82:e8:cd:94:d9:57:77:63:4f:a9:84:8a:fc:f6:
                    17:61:07:19:5c:29:8f:b8:a1:e5:f1:3e:e8:91:4f:
                    44:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B9:37:C9:F1:14:C9:1E:4A:52:23:8B:DE:3B:49:8D:48:1F:33:1E
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231362e3230312e302f32342d3234203d3e203235333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:aa:c8:7b:03:56:b1:8d:b5:1e:52:53:c8:f5:b3:dc:ea:a1:
         89:61:15:68:b9:d6:a0:c3:db:7b:bc:c6:d2:ca:62:dc:89:83:
         a3:6b:e5:52:05:d5:5c:a0:e6:42:90:6f:a2:4f:76:4b:14:58:
         47:71:6f:84:d9:51:62:27:cb:a3:f1:ff:4a:5f:68:a3:2b:23:
         e5:d7:68:cb:3f:c0:bf:14:98:a7:92:06:d8:e4:c4:e3:e4:bc:
         33:aa:b2:c6:40:85:d4:4c:88:ef:3b:10:0d:bb:ee:d2:01:fd:
         0c:e7:5a:a8:e7:a7:d4:7b:32:ff:ff:65:9a:8d:f0:7d:51:10:
         a7:0e:24:0f:8b:a3:5b:fd:22:09:4d:dc:4c:7b:83:85:64:57:
         6a:cb:27:ca:e5:8f:85:95:a5:53:eb:55:3f:40:87:7c:bb:60:
         f7:ee:1d:d4:e4:2e:40:f3:7f:82:98:ed:56:ff:6e:10:1b:6d:
         5a:ad:e6:b8:aa:3e:8f:82:5c:ec:a3:27:0e:6e:06:15:6a:55:
         14:b9:30:73:85:c6:b1:b9:7b:64:32:d8:a8:db:39:a2:ac:cf:
         e4:2d:e1:41:81:e0:6d:b9:18:3b:f3:d7:08:a1:b8:6f:ea:8c:
         28:c9:8b:49:07:b4:d2:d4:fa:b4:c8:05:e5:a5:d0:e3:21:7f:
         fb:df:5e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net