Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa
File:                     3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          BakUrVL3DRMSSptMjg0RrNYofaGZBUSFPfQPaz0jEjk=
Subject key identifier:   09:20:90:C5:B7:F4:73:BA:80:36:F5:CE:ED:0B:3B:51:10:73:B1:4A
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       65FB7FF358E3995AC575024BD7ECF90149D97957
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa
Signing time:             Fri 24 Feb 2023 07:42:33 +0000
ROA not before:           Fri 24 Feb 2023 07:37:33 +0000
ROA not after:            Fri 23 Feb 2024 07:42:33 +0000
asID:                     147049
IP address blocks:        185.229.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fb:7f:f3:58:e3:99:5a:c5:75:02:4b:d7:ec:f9:01:49:d9:79:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb 24 07:37:33 2023 GMT
            Not After : Feb 23 07:42:33 2024 GMT
        Subject: CN=092090C5B7F473BA8036F5CEED0B3B511073B14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d5:b3:6a:d2:5e:f7:f9:77:e0:94:55:8a:35:
                    f1:34:f4:ff:0d:ba:5b:31:eb:05:6c:1d:4b:34:ca:
                    c5:3f:bf:00:2f:2c:c1:19:d1:3f:8e:55:c1:7a:dc:
                    0c:c0:34:fd:c3:c5:38:47:88:b3:9c:8d:c7:38:a9:
                    00:03:45:a8:a2:21:5f:f2:08:1f:a0:55:55:78:1d:
                    2b:35:d7:ff:e9:ae:1d:99:a2:83:82:4d:45:97:f4:
                    74:48:7a:a9:c6:e3:51:d5:2e:e4:18:74:a3:b6:73:
                    d1:75:05:78:30:ce:eb:f8:37:7e:fc:da:64:fb:80:
                    ac:b8:3b:66:aa:c9:4c:1d:e1:6d:a3:bb:a9:dc:06:
                    c6:58:7d:88:ae:cd:c1:5e:c9:09:a8:b9:37:44:2a:
                    71:c1:1a:0b:a8:97:2e:7e:11:95:07:47:64:30:c7:
                    48:12:3f:92:e0:12:74:b6:4e:37:52:9b:7d:8a:37:
                    0c:49:9d:9b:a0:4e:ae:db:d0:14:d9:4d:de:4f:13:
                    ad:2d:e4:a6:fd:62:7f:0c:f9:24:b9:da:86:49:59:
                    96:15:cd:50:56:e5:ff:99:9c:b1:77:ba:99:e1:39:
                    2e:57:54:73:c5:44:8f:f7:7a:66:e5:d6:21:eb:d7:
                    84:6e:a9:bc:1a:22:ac:b9:16:63:c2:a2:e2:48:95:
                    f8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:20:90:C5:B7:F4:73:BA:80:36:F5:CE:ED:0B:3B:51:10:73:B1:4A
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:50:f9:43:a3:0a:84:c8:46:96:6c:c6:d9:7a:7d:87:b0:69:
         1d:8e:19:7c:95:eb:2a:2c:7c:71:2b:05:88:79:6b:aa:10:63:
         ea:74:1d:e5:9b:aa:52:87:47:82:97:39:d7:4c:bd:de:c4:d9:
         1f:8f:79:6f:ef:58:16:66:e3:76:60:ae:83:00:22:16:cb:60:
         4f:8c:2a:90:ef:78:f7:5b:f5:95:a2:bf:34:e6:bd:a4:75:f4:
         b2:6e:dc:c9:d8:d3:79:e6:49:74:73:12:53:5c:9c:21:26:35:
         0e:84:d9:21:d5:09:37:a5:89:30:bc:44:85:f4:1a:38:85:5d:
         b3:6b:1d:b1:fb:a4:df:8e:7d:e6:6a:2a:12:dd:c6:38:0d:28:
         c8:3f:b6:a2:37:fb:39:98:76:f9:5c:f7:28:68:a5:ea:9a:ef:
         2c:9c:ac:c1:48:9e:0c:66:9f:fa:1e:15:8a:bc:78:d9:5e:4b:
         13:d4:04:f6:59:52:9b:61:67:80:39:d4:08:c5:d5:a7:dd:1a:
         4c:d9:7a:83:8a:1c:1a:ef:70:3d:08:64:09:83:3c:63:f0:e0:
         84:ba:ef:ba:e9:70:46:74:ca:77:a2:97:7e:b2:8c:b8:86:e9:
         2a:f9:92:b3:f3:d8:9a:bb:9b:fd:67:c6:bf:61:db:cc:82:c5:
         a2:ed:1a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net