Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134372e302f32342d3234203d3e2030.roa
File:                     3138352e3232362e3134372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          rsLqvDOIQju6o/iffhxIN7NjIYtcqw3qJdHMGCIGuzY=
Subject key identifier:   ED:A5:29:40:F9:78:68:D4:BC:75:F6:A9:96:93:5E:D7:5F:E7:7A:80
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       121D3F8061B01E6023C5C3DD81B4578180698177
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134372e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:38:51 +0000
ROA not before:           Fri 03 Mar 2023 15:33:51 +0000
ROA not after:            Fri 01 Mar 2024 15:38:51 +0000
asID:                     0
IP address blocks:        185.226.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1d:3f:80:61:b0:1e:60:23:c5:c3:dd:81:b4:57:81:80:69:81:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar  3 15:33:51 2023 GMT
            Not After : Mar  1 15:38:51 2024 GMT
        Subject: CN=EDA52940F97868D4BC75F6A996935ED75FE77A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:85:d6:a5:ec:62:57:98:18:7a:a7:95:88:
                    d4:7e:bf:c2:9b:fc:27:09:7d:60:1b:c7:b7:92:fd:
                    4b:60:9b:6b:89:bc:4b:ce:bd:10:fd:70:b3:48:7f:
                    0d:c1:09:d3:a6:3b:ee:4d:70:d0:ef:89:69:16:1f:
                    5c:10:65:f9:48:c0:62:91:54:33:5c:f7:2a:18:bc:
                    6b:cb:e3:58:4b:8e:3d:05:56:80:f7:9f:f2:26:36:
                    24:6e:13:f5:2a:93:53:bc:e3:13:62:45:8a:7d:a6:
                    46:52:d7:be:d6:f8:f1:14:30:2d:22:1a:cd:d1:63:
                    98:40:82:fb:f5:55:b6:c2:12:d4:30:fb:10:74:f7:
                    04:19:72:fb:d9:ba:82:69:d4:a5:65:28:46:09:49:
                    a5:f6:b9:f6:65:fc:8f:51:c1:b3:56:28:58:81:55:
                    db:b1:b2:6a:8b:25:c6:26:a2:87:39:02:49:0c:d4:
                    84:09:d5:97:3b:f6:58:99:a2:e6:f3:1f:89:cc:ee:
                    5f:ef:82:f1:9a:59:1c:59:09:5e:14:83:5a:1b:29:
                    fb:8f:ad:50:f5:65:1a:ee:14:d9:5b:8c:3a:ff:8b:
                    22:1b:0d:18:36:9f:3f:81:2b:a1:75:bd:69:2d:ef:
                    aa:54:17:81:86:70:62:ab:29:7f:b6:ed:da:d8:28:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A5:29:40:F9:78:68:D4:BC:75:F6:A9:96:93:5E:D7:5F:E7:7A:80
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134372e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:2b:11:2f:ab:0c:a0:71:ae:e0:f4:d4:46:ad:50:7e:19:5d:
         7c:e1:8a:e7:93:8a:3a:e4:0c:3a:a7:8d:d5:b9:29:07:78:95:
         b0:e2:75:14:06:9a:c0:88:d5:07:df:5a:af:f6:10:b8:2b:d5:
         40:a8:1f:8e:9d:41:4c:10:02:69:dc:f4:41:fe:a3:fe:68:30:
         6c:ae:54:e4:d0:a1:df:1d:4e:c6:19:86:62:87:5a:8b:0e:50:
         3b:d7:e2:6b:97:98:af:c9:8e:f8:d5:97:40:30:58:ec:0f:05:
         63:4b:51:86:8d:93:86:ae:fc:3f:b3:ee:44:24:d2:56:52:f4:
         b0:5c:62:a1:dc:94:12:c0:93:65:84:59:db:64:93:cc:c4:e6:
         12:d0:8b:87:e1:ac:7d:bd:33:b4:11:0e:65:02:ee:7a:9b:7b:
         7c:2d:7f:79:df:c3:8e:06:cc:fc:8d:91:12:57:36:bf:ba:f9:
         c4:0b:19:18:1e:d4:e1:fc:e2:57:5e:8f:c6:7c:8d:86:09:06:
         18:c2:76:53:e0:cd:7a:4b:46:2a:6a:b2:52:44:88:cd:50:01:
         4b:5e:f7:aa:34:2c:11:83:28:79:3d:f1:03:ee:63:09:16:2f:
         79:74:ca:cc:5c:2a:7a:cf:c6:f1:af:c1:7d:c8:cc:25:88:79:
         46:ed:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net