Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e203631333137.roa
File:                     3139332e34322e302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          UKUHPVRnLtdCambYfCdgE+9rvJ8ISHewb8IZorigUF4=
Subject key identifier:   B5:E3:D0:6E:1E:5E:D8:F5:85:C7:DF:CA:4D:B0:25:96:A6:19:39:62
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       797987C832AF2CD3D979F413DA15BE21A8B4CFBD
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:52 +0000
ROA not before:           Tue 28 Jun 2022 04:35:52 +0000
ROA not after:            Tue 27 Jun 2023 04:40:52 +0000
asID:                     61317
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:79:87:c8:32:af:2c:d3:d9:79:f4:13:da:15:be:21:a8:b4:cf:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:52 2022 GMT
            Not After : Jun 27 04:40:52 2023 GMT
        Subject: CN=B5E3D06E1E5ED8F585C7DFCA4DB02596A6193962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a7:d7:8d:0f:5c:be:15:81:45:91:22:61:eb:
                    3e:2b:3d:11:db:eb:3a:2f:f8:94:9f:da:0a:03:a6:
                    9c:ff:11:e9:ae:69:92:15:65:f2:78:83:cc:06:2e:
                    fb:97:e6:2a:01:e4:94:1f:eb:3c:94:52:49:b9:46:
                    1a:8f:41:1f:37:f0:63:69:32:4c:18:01:52:2a:13:
                    8d:7a:f9:0c:64:c4:fb:5e:14:94:46:a5:0a:e9:44:
                    27:05:e7:54:d9:f4:f2:f7:ed:68:8c:a9:33:ca:92:
                    e2:1c:67:65:9f:d0:c3:b1:af:8c:f3:f9:9b:a3:1b:
                    28:f5:21:37:79:b0:f3:5c:ba:6f:79:fa:92:d1:30:
                    7b:c4:19:b4:0e:18:b1:93:3f:5f:9c:48:cd:3c:f8:
                    1b:fb:bf:c2:d6:2a:9c:86:24:12:47:e9:c6:be:42:
                    df:42:81:43:08:99:be:eb:d3:8c:45:f4:f5:c4:d0:
                    14:ef:7e:53:0c:61:5b:fb:1c:d5:9a:04:2a:a8:91:
                    6a:3a:cc:d1:74:35:da:be:55:0b:1f:23:4b:79:80:
                    a6:44:9e:a3:8d:7e:48:77:58:78:5c:d7:fc:90:b1:
                    48:5e:d1:24:7e:72:fb:fa:66:08:ef:ed:85:53:76:
                    14:0e:ce:a5:b2:e8:32:a2:1f:6b:ff:5b:31:a2:d3:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E3:D0:6E:1E:5E:D8:F5:85:C7:DF:CA:4D:B0:25:96:A6:19:39:62
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:cb:65:33:77:29:3f:67:16:86:2f:c0:40:a3:ad:22:e1:95:
         4b:85:30:10:26:e8:4e:38:d6:eb:eb:a4:6f:9e:18:de:a6:69:
         67:ed:7f:dd:da:12:da:7f:77:5a:7c:36:96:2a:4b:f4:a9:a0:
         fe:58:42:b2:30:9a:78:28:fe:85:9b:e2:c7:a9:34:b7:8a:1c:
         ac:c2:7b:df:3c:9b:a2:64:ea:dd:b9:8c:78:9b:7e:2a:65:88:
         6a:a0:1e:55:25:08:d6:56:bc:ed:5c:8c:c7:b9:5a:70:cc:43:
         6c:9b:49:82:dc:f4:f8:65:5d:a1:05:6c:9d:b6:53:d6:f3:c6:
         77:b6:8e:ed:ab:38:15:40:40:81:0f:0a:e4:ac:2a:d8:ff:7f:
         a9:ed:0c:39:14:d6:77:a3:82:66:85:6e:b8:96:88:2f:d2:f7:
         d8:50:83:f1:af:23:1d:13:3f:83:82:85:07:65:3d:fa:86:48:
         63:43:53:17:9b:42:57:d6:9b:15:ff:9d:0d:2f:5a:89:93:d7:
         68:bd:25:97:aa:ef:17:4b:d1:b7:66:75:21:68:e5:86:b3:73:
         4c:ff:b2:d1:b5:67:d1:f0:92:33:6e:dc:de:0c:f5:f9:86:bb:
         68:ad:3c:f6:a5:c3:49:b9:b5:2f:ed:25:2b:9d:8c:9f:06:a1:
         fe:88:1a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net