Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39312e302f32342d3234203d3e2039303039.roa
File:                     3139342e3139352e39312e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          OSx+zKklzceUhSpktjPAo3AT/B5aJ38/sYzLZEIVTxg=
Subject key identifier:   06:62:4C:77:05:6E:B6:B9:A5:FF:C7:92:DE:B6:11:83:8B:8A:F9:9B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       705D660508C92F7B415009B8DD6B18D49095EB0C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39312e302f32342d3234203d3e2039303039.roa
Signing time:             Tue 28 Jun 2022 04:40:54 +0000
ROA not before:           Tue 28 Jun 2022 04:35:54 +0000
ROA not after:            Tue 27 Jun 2023 04:40:54 +0000
asID:                     9009
IP address blocks:        194.195.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5d:66:05:08:c9:2f:7b:41:50:09:b8:dd:6b:18:d4:90:95:eb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:54 2022 GMT
            Not After : Jun 27 04:40:54 2023 GMT
        Subject: CN=06624C77056EB6B9A5FFC792DEB611838B8AF99B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:14:3e:ca:45:72:67:83:3c:08:57:65:01:77:
                    c1:f2:28:bd:eb:36:75:07:66:a4:54:e0:08:c0:87:
                    12:75:39:87:ce:c6:7f:9b:cf:c0:f0:e6:c8:bc:74:
                    ba:11:01:6b:89:c0:54:d0:c4:28:0c:42:7f:fc:5b:
                    56:da:ea:da:ac:2d:fe:51:7b:9f:fc:d8:f5:0e:23:
                    d5:16:23:44:2c:01:9b:07:7d:67:e2:d9:4f:0a:2c:
                    6f:ff:c1:31:f6:50:82:5f:24:a7:fe:48:af:54:87:
                    ff:69:14:9a:3b:a4:cb:e5:8f:aa:40:de:c8:34:b0:
                    46:27:08:27:47:bb:2a:c5:6d:fd:49:5b:21:1e:b4:
                    01:01:08:c8:1a:bc:87:04:de:b7:90:b8:da:27:88:
                    ae:d6:37:8d:6d:77:22:18:f1:a2:ef:4b:94:98:1c:
                    ca:d6:c3:3e:3a:fa:26:79:01:e2:7f:0f:a2:dd:43:
                    70:32:75:c1:f4:bd:c5:53:89:a5:eb:a4:1a:5b:0a:
                    ee:33:0d:9a:ec:ba:be:8d:f9:33:47:fc:d8:52:08:
                    ee:3d:92:16:b6:9a:c3:88:ee:43:0b:67:56:bf:cd:
                    4f:5c:b1:b5:ec:c4:96:b6:85:c7:5b:67:5b:5b:ba:
                    e1:ab:58:8a:cf:e5:8f:b6:ee:92:5d:f3:55:50:25:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:62:4C:77:05:6E:B6:B9:A5:FF:C7:92:DE:B6:11:83:8B:8A:F9:9B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39312e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:c3:9f:50:f3:25:26:77:83:99:3f:62:e2:3a:d0:a0:9c:32:
         dc:be:8d:43:35:b2:cc:9e:5a:28:91:62:84:0c:d6:af:73:8a:
         21:9c:20:10:9b:66:63:d5:c1:f7:0b:80:b9:49:93:a7:f6:3d:
         85:35:de:00:8a:fa:e6:b2:bb:f0:3a:68:22:d5:aa:c8:94:01:
         87:9e:31:64:59:48:e8:3c:36:33:de:4d:cb:82:3d:88:4d:87:
         d4:68:47:73:8f:2d:e8:3d:b9:a5:5a:a2:b5:e9:c6:41:a7:fc:
         72:7c:7d:44:4e:76:13:55:f9:16:e2:ec:2c:60:fe:cd:f3:74:
         da:96:38:28:cd:a4:47:0b:96:b8:34:66:e0:d6:f3:e7:1d:fb:
         96:27:6d:e5:5e:15:b4:aa:24:20:84:f6:f8:24:a2:9f:5b:fe:
         65:6a:28:8a:7e:af:23:90:79:1c:c0:06:4e:10:d0:47:0c:e4:
         fc:dc:5b:34:f2:b1:18:3b:69:f2:50:e5:1c:94:f7:e1:73:f8:
         e0:11:71:56:f4:0a:7b:3b:e3:af:25:19:95:6e:b3:6d:ab:f7:
         6f:da:cf:7d:38:1c:95:4b:8a:e1:ae:63:1a:54:5b:c6:9b:ff:
         67:e3:17:7f:ce:d9:bc:45:08:b4:a3:95:f6:a1:95:27:d6:66:
         d4:57:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net