Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231382e3133322e302f32322d3234203d3e20333935383030.roa
File:                     3138352e3231382e3133322e302f32322d3234203d3e20333935383030.roa (raw, json)
Hash identifier:          /xXzVUkBZ8A70HTbFGZxf1mhZ3lxklRP8iqivBfKw34=
Subject key identifier:   18:F9:95:8A:86:64:05:6D:28:72:3B:51:28:79:6C:F2:41:0B:82:87
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       71A3D06291214E7E4B619F63AF41B4C72333AF99
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231382e3133322e302f32322d3234203d3e20333935383030.roa
Signing time:             Tue 28 Jun 2022 04:40:42 +0000
ROA not before:           Tue 28 Jun 2022 04:35:42 +0000
ROA not after:            Tue 27 Jun 2023 04:40:42 +0000
asID:                     395800
IP address blocks:        185.218.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a3:d0:62:91:21:4e:7e:4b:61:9f:63:af:41:b4:c7:23:33:af:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:42 2022 GMT
            Not After : Jun 27 04:40:42 2023 GMT
        Subject: CN=18F9958A8664056D28723B5128796CF2410B8287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:8c:31:d0:34:36:08:6c:37:e1:06:96:90:
                    83:3b:20:1e:fc:03:24:df:c5:35:70:56:2a:9e:56:
                    61:59:c8:83:75:8a:4f:4a:f0:b1:be:b5:cf:2d:a9:
                    a8:9a:1f:5f:69:24:36:c6:76:38:b2:6a:ce:37:ca:
                    62:06:0c:d6:a2:8a:e7:c5:81:fc:8f:e8:f0:57:da:
                    d9:09:8f:25:cf:29:78:bf:93:f1:52:22:f7:3f:10:
                    78:1f:b3:06:64:99:67:30:c6:a1:97:66:e5:b5:96:
                    a7:14:f1:05:d8:3f:4d:5d:3e:8d:f8:09:dd:3b:94:
                    4a:44:16:52:56:c2:5c:59:42:3f:73:86:da:3f:5b:
                    55:a1:09:9e:48:ee:da:3d:70:73:7a:e5:06:ce:37:
                    9d:12:ce:90:53:23:f5:e0:84:b2:59:82:78:6e:3e:
                    ed:bb:63:5d:ba:5d:e2:41:af:b4:b9:b6:d6:5b:82:
                    e4:59:e6:b8:fe:ea:a2:2c:a7:d1:0e:8c:c8:38:3d:
                    56:19:d7:0b:11:1a:1f:d0:5f:c0:bb:23:b8:d5:96:
                    c3:f6:24:52:96:84:d9:3e:d7:b7:a2:6f:24:7f:d2:
                    ec:d3:f2:58:38:f5:5f:11:4f:05:81:1e:4c:65:63:
                    f0:08:f6:c3:12:2c:63:7c:fa:9f:05:a9:fe:ff:2a:
                    45:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F9:95:8A:86:64:05:6D:28:72:3B:51:28:79:6C:F2:41:0B:82:87
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231382e3133322e302f32322d3234203d3e20333935383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:d9:c8:4f:6c:96:ef:b6:de:02:74:52:c0:45:fd:92:b0:1a:
         7e:c9:7e:8a:54:8d:cd:31:41:3d:0e:7b:3b:fc:13:77:4c:71:
         b6:0d:29:ff:e5:dd:79:f0:50:38:26:0e:de:06:ab:8d:0d:b1:
         74:a6:3d:94:a6:79:6e:0e:ee:85:ba:74:a3:d2:50:04:81:d0:
         86:a5:80:6b:5e:22:d1:5f:28:ad:db:a0:48:99:08:44:86:25:
         cd:40:e5:4a:40:b5:c6:05:54:9b:fb:41:45:8e:e2:db:39:9e:
         82:51:16:fc:5e:9a:d5:4a:47:4f:f3:56:09:e9:df:0d:2d:e5:
         a3:f2:9f:34:ef:d2:23:3f:d9:04:36:b3:39:76:de:e3:1b:ed:
         9f:a5:2a:00:cd:07:fe:38:05:79:a0:6e:ec:38:a0:3a:90:1f:
         22:85:1a:60:ff:5d:fe:d9:7d:9c:91:ae:5a:1b:13:23:d6:75:
         71:76:15:21:cf:a2:75:0e:98:a5:e1:78:e5:0a:27:5b:87:bd:
         d7:64:3e:9c:33:4d:d4:92:de:30:67:9b:de:b4:3c:fa:97:8b:
         4a:b2:d9:4d:28:5b:1b:22:7f:29:0d:8d:f5:42:0e:6f:e9:bf:
         94:49:55:8e:7d:b4:b4:f7:f9:77:04:55:78:b0:9f:56:70:66:
         4c:64:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net