Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3134302e3139362e302f32322d3332203d3e203430303231.roa
File:                     3139342e3134302e3139362e302f32322d3332203d3e203430303231.roa (raw, json)
Hash identifier:          lqQxR6346/oOVhrRJrVXgfv3FD1qbUBBUMYY0hUqq8c=
Subject key identifier:   41:A7:DC:EB:0B:D2:3C:F7:50:EA:EB:88:B4:48:3E:A6:89:CA:A3:B6
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       051975B2E7C8AEA4DF1F671657063132A9F1027F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3134302e3139362e302f32322d3332203d3e203430303231.roa
Signing time:             Sat 22 Oct 2022 04:34:19 +0000
ROA not before:           Sat 22 Oct 2022 04:29:19 +0000
ROA not after:            Sat 21 Oct 2023 04:34:19 +0000
asID:                     40021
IP address blocks:        194.140.196.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:19:75:b2:e7:c8:ae:a4:df:1f:67:16:57:06:31:32:a9:f1:02:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:19 2022 GMT
            Not After : Oct 21 04:34:19 2023 GMT
        Subject: CN=41A7DCEB0BD23CF750EAEB88B4483EA689CAA3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:4b:62:22:2e:82:be:0c:b6:5b:30:54:be:
                    5d:1f:e3:76:73:e5:db:9c:ed:ce:9a:68:95:74:10:
                    33:73:5d:f5:05:0c:d6:4b:03:fc:b6:14:9d:86:c7:
                    c0:17:53:c1:0d:27:a8:2e:21:7d:41:d4:c9:a3:9a:
                    60:ff:df:02:b4:1e:5d:57:11:bd:65:3e:76:43:59:
                    18:29:9a:0e:29:a7:b5:76:b8:c7:b6:e6:17:24:cb:
                    37:a7:cd:e7:f9:f9:32:bb:85:47:0f:37:80:3e:ac:
                    3f:db:29:1c:02:4f:5b:6b:e1:97:bc:55:39:b4:92:
                    a4:a8:d7:34:fd:b0:a3:44:c0:34:8c:d0:04:06:f8:
                    fc:64:a0:da:e2:03:b7:e5:c0:50:76:a4:0a:cd:02:
                    13:2e:f3:67:21:cc:9f:f0:33:a6:30:dd:55:ae:e1:
                    36:e4:0d:ba:1f:9b:84:4a:fb:7e:bf:b6:3b:0e:a6:
                    57:5e:a0:da:51:5f:ae:a2:26:c7:74:cf:31:af:58:
                    fb:d5:a9:d2:83:77:58:97:be:59:70:3b:0a:ef:3d:
                    61:86:0b:b7:bc:76:4a:1d:79:f3:a4:4c:e7:6b:b7:
                    25:b1:5a:67:65:fb:5f:46:87:78:7b:9d:fb:86:2c:
                    46:1f:8f:0b:46:ff:4f:4d:1d:29:be:f8:aa:c0:f1:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A7:DC:EB:0B:D2:3C:F7:50:EA:EB:88:B4:48:3E:A6:89:CA:A3:B6
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3134302e3139362e302f32322d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.140.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:70:e2:61:73:99:f4:b1:19:35:e3:58:64:d5:b2:7c:02:bf:
         e7:b0:b1:c3:22:3f:ab:13:b8:da:34:61:6a:85:9c:dc:4d:f0:
         24:9f:85:38:e4:1c:0d:af:4a:55:e8:7e:44:3b:b9:0b:58:fe:
         81:92:30:e7:15:df:c5:dd:04:2a:ed:5f:88:a1:c5:4f:94:58:
         f7:b4:93:a7:4c:05:d9:18:d3:4b:e4:a6:fe:6b:4d:e4:fd:12:
         26:77:96:6d:75:7f:9a:87:ed:3a:e8:08:a2:1c:c1:90:77:82:
         b9:72:bd:bf:73:f2:29:8f:b7:42:3d:8e:38:86:bd:fe:63:85:
         16:74:05:a2:1b:06:a9:3b:56:2d:7e:d7:10:3c:9f:fd:bd:59:
         25:8c:49:68:94:cf:a9:94:c6:ab:a5:d2:27:65:08:0c:42:37:
         46:51:a7:b9:af:a1:fd:c1:b6:6e:ff:c0:54:3f:61:f4:1d:12:
         4c:d4:63:10:f9:ec:c9:f7:49:c7:fe:d9:a7:9c:b2:ef:52:c5:
         2b:55:43:52:39:9e:00:17:9b:62:58:ae:75:f9:ac:48:15:90:
         0e:e3:0d:88:0f:63:29:a8:0d:ae:63:22:4b:cf:62:c6:44:e7:
         12:71:ee:4c:90:2d:ee:65:6c:20:9e:e0:ec:a0:fd:5c:a4:94:
         98:b2:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net