Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          oLHCYLdFBGJcz2mgAoyJK7YLpLqJds/UfeUW7SepkeI=
Subject key identifier:   5E:20:41:7A:74:11:87:D8:02:6A:07:93:C3:35:6A:7F:02:71:73:ED
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6F1D029ADEB02E0844F5CA681113365A0F7C9AE7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa
Signing time:             Wed 07 Dec 2022 21:42:28 +0000
ROA not before:           Wed 07 Dec 2022 21:37:28 +0000
ROA not after:            Wed 06 Dec 2023 21:42:28 +0000
asID:                     136787
IP address blocks:        185.226.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1d:02:9a:de:b0:2e:08:44:f5:ca:68:11:13:36:5a:0f:7c:9a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec  7 21:37:28 2022 GMT
            Not After : Dec  6 21:42:28 2023 GMT
        Subject: CN=5E20417A741187D8026A0793C3356A7F027173ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b0:ca:61:0a:34:3b:7e:6d:f2:79:30:d3:eb:
                    76:a4:22:b3:88:39:7f:1c:d1:ef:7f:e5:19:81:31:
                    e1:b9:d1:7d:fc:97:0c:92:fc:c6:f3:24:60:c0:4c:
                    ca:8e:37:15:15:36:c0:7b:94:12:03:ba:19:31:3b:
                    96:99:6a:93:19:7f:7d:84:20:4d:fe:44:2f:a0:9a:
                    5d:b3:ab:62:d6:db:39:78:17:62:fe:81:75:df:aa:
                    41:0a:59:d0:a4:14:58:8c:cb:ba:4c:8e:8f:8c:db:
                    76:ce:20:7e:76:05:91:a6:69:3e:53:7e:4e:cb:b9:
                    6d:a8:b1:90:72:ed:d6:49:01:5c:31:3d:3c:84:3c:
                    77:97:0f:b0:3d:d0:d1:da:0a:c3:01:a9:8f:71:23:
                    98:6d:ae:6e:6f:49:73:b1:64:de:00:c6:71:d3:db:
                    9d:60:2c:d2:c4:19:b9:9e:e3:c0:64:a3:e4:88:53:
                    15:24:70:d3:cc:87:49:37:9c:be:53:f1:cd:d7:6b:
                    e3:3a:e6:28:01:a7:18:da:d9:b7:1d:09:fa:e0:98:
                    9b:22:6f:2d:cd:bb:fd:d5:66:89:66:fe:18:5c:e2:
                    6c:30:c2:ac:38:08:6f:f0:de:32:be:12:05:68:37:
                    01:09:dc:de:c6:5b:8e:67:32:53:5c:06:db:77:7f:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:20:41:7A:74:11:87:D8:02:6A:07:93:C3:35:6A:7F:02:71:73:ED
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:e4:3d:d3:57:52:ef:cb:42:c8:d1:ba:85:5a:3f:75:da:26:
         1f:83:bd:17:c8:7f:8c:d6:cb:92:46:9f:5a:5c:d9:b3:a7:81:
         13:ed:5e:ba:15:b3:2b:84:4e:3e:65:42:de:d8:b2:c4:49:56:
         98:9e:d8:08:d7:3b:5d:f0:f2:73:54:7f:27:4d:b6:cf:d8:5d:
         e0:d3:54:ae:f8:39:b4:91:59:c2:00:06:c5:96:9d:54:57:93:
         b2:58:10:b0:51:3f:0d:19:c3:8e:e4:1c:13:32:d9:f8:02:4b:
         f4:74:bc:89:8a:43:43:ba:34:b8:c2:4e:cf:2e:0c:ed:84:69:
         de:bd:21:41:9f:24:25:83:da:af:c1:43:23:b7:b5:be:8f:18:
         e7:4d:fb:ec:75:e7:0e:41:a7:e0:fc:3a:d6:ec:1f:2f:2a:94:
         e9:c0:60:5f:3d:45:02:6b:ab:ce:e9:b9:6d:3c:2d:0f:5c:ad:
         77:61:f2:ed:88:95:41:0a:57:fc:1e:32:4c:1d:57:93:ba:11:
         fc:21:8c:60:80:65:5e:74:61:3d:e2:00:47:4f:bf:fc:c4:01:
         f0:9f:c0:31:bb:64:05:eb:45:07:ca:bc:1e:44:6e:81:2f:0d:
         18:e2:de:81:05:0d:06:22:89:d7:95:2b:11:aa:fe:ac:7a:99:
         b2:88:6b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net