Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323131383331.roa
File:                     3139332e34322e302e302f32342d3234203d3e20323131383331.roa (raw, json)
Hash identifier:          76l+gpu6N+U4tJmdevOzU4KMFvB7Fy0xk5AjFlRns+E=
Subject key identifier:   07:21:9B:E3:F0:63:7C:88:62:94:93:84:B2:DE:5E:44:99:B9:EA:0B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6B263D9F3948C54AD889AE84EC58872EDD143CC0
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323131383331.roa
Signing time:             Tue 28 Jun 2022 04:40:47 +0000
ROA not before:           Tue 28 Jun 2022 04:35:47 +0000
ROA not after:            Tue 27 Jun 2023 04:40:47 +0000
asID:                     211831
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:26:3d:9f:39:48:c5:4a:d8:89:ae:84:ec:58:87:2e:dd:14:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:47 2022 GMT
            Not After : Jun 27 04:40:47 2023 GMT
        Subject: CN=07219BE3F0637C8862949384B2DE5E4499B9EA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7b:23:af:ba:f9:df:0c:f8:c4:59:65:ae:2d:
                    39:f4:0d:f3:18:b2:ce:a0:f4:5f:3d:d2:32:1b:ad:
                    18:e1:80:06:b6:8e:f1:bb:fb:42:40:ec:b8:44:7f:
                    f2:3b:c3:d2:30:2a:ad:11:c5:05:eb:43:cd:1f:62:
                    0a:00:1d:a7:e8:f2:68:11:a6:19:54:43:1c:07:c9:
                    8f:9f:fc:a3:5e:45:57:89:db:81:e3:79:e2:5c:a2:
                    1c:be:79:31:3c:74:90:b0:1e:85:60:52:a7:70:24:
                    3c:f2:31:ec:4f:1d:77:3f:46:c5:91:04:93:98:c0:
                    cd:88:20:95:8a:ac:5a:89:33:b6:24:f2:f3:0d:c4:
                    a6:12:49:03:06:9d:b9:a7:e1:88:c2:f9:76:a7:b9:
                    ef:1c:7a:ac:73:d8:db:1a:05:0c:34:91:a9:3c:52:
                    a5:5f:42:08:dd:cd:31:47:90:08:0a:71:7a:df:3b:
                    a8:e9:86:a8:99:1b:77:b9:4c:5d:cd:3f:47:29:22:
                    3b:4d:a3:4e:55:3a:03:29:54:08:10:df:d8:c6:33:
                    60:ae:25:e3:d3:fb:21:69:4b:3f:e3:3a:eb:14:85:
                    60:86:22:12:44:1e:f9:6e:49:1b:92:ac:29:d1:09:
                    1a:4f:de:84:c2:6e:a7:f1:99:0f:f8:96:9f:e6:10:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:21:9B:E3:F0:63:7C:88:62:94:93:84:B2:DE:5E:44:99:B9:EA:0B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323131383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:c6:b8:3f:e0:e1:bc:f2:1f:10:5a:02:b0:13:da:d2:49:56:
         69:82:13:e2:1a:6b:96:70:27:c5:1a:17:76:ab:51:b5:e6:0b:
         7d:49:a1:1a:5e:33:43:3d:87:11:5c:81:92:eb:21:61:cc:a2:
         01:ff:bb:6b:74:cf:b6:a2:b7:15:14:72:e9:c4:47:25:4e:15:
         8a:ed:1b:57:b0:41:1f:e9:09:a6:8d:63:13:05:12:ba:a2:5c:
         96:12:45:d3:3e:fe:4c:41:eb:7d:22:53:40:fc:3b:27:a8:d2:
         6f:6c:54:61:b0:36:60:e7:40:2a:db:8a:5b:62:86:2e:23:f9:
         e9:31:df:88:2c:da:30:d6:67:7e:14:1f:d0:5f:b5:9b:bb:e6:
         1d:ec:57:1d:10:60:a4:2e:87:55:2b:4d:b1:7d:04:8c:98:24:
         60:3c:57:66:36:41:b8:c6:e9:ef:94:78:97:3a:da:e4:ad:51:
         62:43:4e:1b:83:3a:8f:f0:67:9e:76:b7:1b:01:0a:d5:88:89:
         f9:5e:1f:ca:92:2b:5f:62:d3:b8:61:82:23:d1:2e:62:51:01:
         66:44:b7:d4:26:03:d3:f4:35:7a:80:6e:a9:d1:e0:18:56:3c:
         87:40:80:78:77:78:40:ee:99:07:a5:e1:db:62:a8:1d:63:35:
         84:c9:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net