Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323131383330.roa
File:                     3138352e3233302e3133362e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          z5SRjfqhz4Kcxpy0GRYLkG+/YI7otvH0RIjr4kDGDKk=
Subject key identifier:   34:13:D2:6D:12:D7:E1:DE:D3:46:EE:1A:D6:06:3E:FB:7D:E7:3B:1B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       36873D1887B3561CF0C1F48C814248FFB9F3424C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323131383330.roa
Signing time:             Sat 22 Oct 2022 04:34:16 +0000
ROA not before:           Sat 22 Oct 2022 04:29:16 +0000
ROA not after:            Sat 21 Oct 2023 04:34:16 +0000
asID:                     211830
IP address blocks:        185.230.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:87:3d:18:87:b3:56:1c:f0:c1:f4:8c:81:42:48:ff:b9:f3:42:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:16 2022 GMT
            Not After : Oct 21 04:34:16 2023 GMT
        Subject: CN=3413D26D12D7E1DED346EE1AD6063EFB7DE73B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:22:7d:a0:4d:d3:a0:23:cc:6e:d4:be:2b:
                    cb:5c:4f:19:11:60:e7:bf:49:2c:c0:69:d8:c4:d3:
                    61:4f:c4:74:74:7d:c5:ed:61:39:de:82:53:da:11:
                    3c:a1:54:99:e6:09:f5:db:9d:76:1f:ec:0b:88:22:
                    4e:a6:e7:e2:21:a5:48:f1:ac:49:6e:67:d8:02:f6:
                    ae:4f:81:35:25:ef:f0:d6:85:8a:ee:08:2e:39:dd:
                    a7:e8:9e:1a:29:c7:a5:69:a6:51:c0:21:59:b1:5d:
                    1c:6e:54:4b:e4:83:b8:25:42:6b:1a:f3:86:40:fc:
                    2a:15:54:5b:0c:ca:14:34:3e:2e:54:23:0b:b5:52:
                    ec:9d:2d:10:23:5c:98:57:7d:27:4e:60:85:67:27:
                    09:5a:bc:4c:93:c4:58:5e:bc:7b:76:3b:a7:fd:d7:
                    e4:1d:23:63:38:4b:94:89:8c:96:3f:c7:eb:e1:47:
                    62:bb:58:f6:43:58:b2:4f:77:fb:34:51:81:5b:4d:
                    ae:09:df:5d:49:e0:bc:3a:8e:ac:9f:18:cf:ec:ab:
                    5f:c8:cf:b8:e0:59:d2:e3:32:6c:05:1b:bb:49:3e:
                    a7:db:9e:c3:c0:60:da:ae:aa:fc:92:02:5b:f8:7d:
                    98:47:38:af:34:ca:aa:e3:5b:be:b2:95:cb:f4:2d:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:13:D2:6D:12:D7:E1:DE:D3:46:EE:1A:D6:06:3E:FB:7D:E7:3B:1B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b1:d2:75:ad:84:86:d0:2e:28:ae:d7:bc:2a:89:35:3c:ea:
         1e:0d:4a:34:de:43:da:e0:cc:19:7b:b7:05:64:08:4c:df:41:
         bf:96:4d:cc:0e:92:ea:50:5a:ec:a0:4e:4c:00:59:79:77:b3:
         2e:a5:62:9c:a7:32:3d:82:cb:e1:74:71:40:6f:4e:e1:e2:c6:
         f0:00:3d:e2:f4:ef:56:28:ce:59:f8:51:2d:c2:81:23:14:d0:
         36:69:a6:5c:b1:75:11:2d:5e:c0:07:a3:b5:8a:8f:32:bb:a3:
         68:9f:27:e7:fb:b2:8a:f0:8b:b9:4d:cb:ab:1e:d4:f1:ad:3c:
         49:3a:07:9e:60:c7:c8:53:df:2b:6f:61:6b:30:39:82:ac:d7:
         9b:8b:f8:6a:0c:08:2e:7c:71:45:16:cc:53:4d:d6:b2:dd:51:
         1c:a2:dd:62:74:e8:6a:68:45:fa:32:38:67:66:98:10:8f:7f:
         ac:36:d1:49:d7:41:ff:a7:42:9b:17:64:85:87:16:6e:1f:04:
         5f:92:00:45:f2:87:92:fb:e3:ed:fb:25:63:ec:13:c5:80:3f:
         93:65:ca:88:1d:16:21:ed:eb:84:61:4f:24:cf:b2:c0:83:35:
         74:2b:d8:9b:4a:80:9b:1c:82:a5:d7:21:6c:1a:49:ec:72:42:
         d4:af:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net