Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20313431303339.roa
File:                     3139332e34322e302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          /qqR3HxNlwUC9y07t4dJYa7c1Tt5Ic1zxpWGdRCY5hs=
Subject key identifier:   44:E2:DD:66:86:28:E9:92:AD:A7:8E:53:A9:EF:7B:81:5D:6E:0A:EE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       26C990BE48709E69A0F09417B4FD6286EF310EB5
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20313431303339.roa
Signing time:             Sat 22 Oct 2022 04:34:29 +0000
ROA not before:           Sat 22 Oct 2022 04:29:29 +0000
ROA not after:            Sat 21 Oct 2023 04:34:29 +0000
asID:                     141039
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c9:90:be:48:70:9e:69:a0:f0:94:17:b4:fd:62:86:ef:31:0e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:29 2022 GMT
            Not After : Oct 21 04:34:29 2023 GMT
        Subject: CN=44E2DD668628E992ADA78E53A9EF7B815D6E0AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:3f:3b:b1:6f:aa:10:a2:55:9c:0a:82:01:
                    cd:0c:79:3c:8c:f1:cc:82:14:71:0f:8b:74:47:29:
                    71:44:54:f3:e4:3b:a5:6b:88:0c:0a:05:8e:47:52:
                    94:9f:f8:1c:21:69:bc:fc:17:e1:cd:96:a4:04:e0:
                    2d:cb:fe:e0:24:34:74:e5:d0:e6:34:4a:08:b6:fb:
                    d2:85:20:bc:ad:c6:90:90:69:ab:92:c4:63:a6:7f:
                    19:54:68:9d:da:59:5b:c8:6c:44:25:15:03:1d:2e:
                    2f:25:c9:dd:8b:87:45:93:38:8a:f4:d1:21:d3:0b:
                    70:cc:5c:6a:98:eb:43:68:77:47:6a:e4:9f:53:d3:
                    8e:80:78:77:17:96:bf:25:70:ef:58:9a:9c:59:22:
                    e1:31:ed:f3:59:ea:b5:78:68:14:3c:dd:db:0c:98:
                    df:52:72:ec:a3:2d:a7:0d:dd:f4:5a:56:03:2f:1b:
                    7f:84:41:44:2b:3d:e5:88:ad:13:fb:11:cd:77:53:
                    14:27:49:20:c8:7e:bc:de:a4:b3:22:66:c6:8c:9c:
                    8d:02:29:7d:58:32:7a:1b:bb:08:ec:50:40:bd:be:
                    af:7a:28:25:20:7e:8b:ea:12:f7:0d:c5:95:38:86:
                    51:02:29:c5:95:fb:b2:37:33:9f:7e:50:9f:51:9f:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E2:DD:66:86:28:E9:92:AD:A7:8E:53:A9:EF:7B:81:5D:6E:0A:EE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:bf:03:ea:f4:6e:75:cf:54:7d:40:d1:e4:55:50:b9:53:fb:
         6a:24:b1:6a:78:12:ff:b2:ca:95:89:2a:df:31:00:f6:84:44:
         9d:83:18:aa:ec:a3:7e:ca:31:e6:c3:32:6c:64:b7:f8:b1:80:
         98:61:10:ef:50:5b:18:40:88:10:10:e4:b3:ca:8f:fb:61:77:
         5e:16:55:a6:03:88:07:de:10:d3:67:d4:c1:bf:c4:6e:27:d1:
         0f:cf:74:64:8f:0d:27:2f:a4:84:0c:88:b7:ac:1f:26:da:20:
         da:eb:59:8f:89:1c:fa:f5:cb:18:15:5f:3b:bd:15:2f:dd:c2:
         3b:a1:17:1b:8a:48:c5:6b:78:17:83:06:7a:98:21:25:84:b1:
         bf:86:01:f4:7f:18:a9:e0:f9:d7:ca:f3:64:ee:89:20:bf:46:
         7f:04:6d:35:bf:ae:e4:0e:f2:25:cd:23:c9:c7:7d:86:8b:b4:
         f2:38:9e:75:70:7e:96:95:93:c7:24:a3:7c:4e:c1:35:8e:ad:
         1e:6b:ed:24:09:b1:12:2a:f2:8f:83:a3:32:2a:8e:e1:c7:c8:
         c9:d6:a0:96:25:1a:ae:f6:71:5f:3c:c3:f5:b5:17:51:52:0e:
         5d:2c:14:fd:db:6f:58:49:b5:c7:a4:11:d8:e7:74:a0:07:8f:
         00:57:b5:ea
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUJsmQvkhwnmmg8JQXtP1ihu8xDrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MjlaFw0yMzEwMjEwNDM0MjlaMDMxMTAvBgNV
BAMTKDQ0RTJERDY2ODYyOEU5OTJBREE3OEU1M0E5RUY3QjgxNUQ2RTBBRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjT87sW+qEKJVnAqCAc0MeTyM
8cyCFHEPi3RHKXFEVPPkO6VriAwKBY5HUpSf+Bwhabz8F+HNlqQE4C3L/uAkNHTl
0OY0Sgi2+9KFILytxpCQaauSxGOmfxlUaJ3aWVvIbEQlFQMdLi8lyd2Lh0WTOIr0
0SHTC3DMXGqY60Nod0dq5J9T046AeHcXlr8lcO9YmpxZIuEx7fNZ6rV4aBQ83dsM
mN9ScuyjLacN3fRaVgMvG3+EQUQrPeWIrRP7Ec13UxQnSSDIfrzepLMiZsaMnI0C
KX1YMnobuwjsUEC9vq96KCUgfovqEvcNxZU4hlECKcWV+7I3M59+UJ9Rnw6hAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUROLdZoYo6ZKtp45Tqe97gV1uCu4wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM5MzMyZTM0MzIyZTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDMx
MzAzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAwSoAMA0GCSqGSIb3DQEBCwUAA4IBAQDHvwPq9G51
z1R9QNHkVVC5U/tqJLFqeBL/ssqViSrfMQD2hESdgxiq7KN+yjHmwzJsZLf4sYCY
YRDvUFsYQIgQEOSzyo/7YXdeFlWmA4gH3hDTZ9TBv8RuJ9EPz3Rkjw0nL6SEDIi3
rB8m2iDa61mPiRz69csYFV87vRUv3cI7oRcbikjFa3gXgwZ6mCElhLG/hgH0fxip
4PnXyvNk7okgv0Z/BG01v67kDvIlzSPJx32Gi7TyOJ51cH6WlZPHJKN8TsE1jq0e
a+0kCbESKvKPg6MyKo7hx8jJ1qCWJRqu9nFfPMP1tRdRUg5dLBT9229YSbXHpBHY
53SgB48AV7Xq
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net