Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39322e302f32342d3234203d3e203437353833.roa
File:                     3139342e3139352e39322e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          5zu3Ju0ybukkCnSL0+3Z/RBeBCLiT491NW6BoheH6gI=
Subject key identifier:   CF:A5:27:EE:B2:16:B6:DA:BF:56:C4:62:0C:35:94:FC:CE:90:5D:A8
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       32A1A2D6B5F72A9C8B1960E5DB5019FB00C0D40F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39322e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:25 +0000
ROA not before:           Sat 22 Oct 2022 04:29:25 +0000
ROA not after:            Sat 21 Oct 2023 04:34:25 +0000
asID:                     47583
IP address blocks:        194.195.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a1:a2:d6:b5:f7:2a:9c:8b:19:60:e5:db:50:19:fb:00:c0:d4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:25 2022 GMT
            Not After : Oct 21 04:34:25 2023 GMT
        Subject: CN=CFA527EEB216B6DABF56C4620C3594FCCE905DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:73:c7:31:fc:42:96:2f:7b:2b:a2:77:52:
                    4e:98:8b:b3:9a:1c:06:e2:53:50:8a:a1:94:48:5a:
                    1b:64:af:d7:e3:69:a1:7b:3e:fa:51:48:1a:23:9a:
                    1b:58:a8:f5:ee:06:90:81:fb:12:71:ae:f2:3b:6c:
                    88:7e:9f:ca:49:2c:c6:03:e9:be:25:e9:c4:bc:89:
                    81:60:45:db:77:80:89:cd:26:da:9c:dc:59:cd:40:
                    05:03:92:ac:d8:6c:55:78:e8:1c:6a:0f:2a:e1:d3:
                    86:18:c0:7b:e1:30:39:54:7d:77:75:9c:86:8d:fd:
                    1f:84:90:ac:fa:5d:15:58:f3:d4:dd:78:7c:6b:77:
                    f3:e2:b1:fb:45:e2:9a:8d:61:da:50:a9:b3:14:5c:
                    ff:e8:98:1e:22:79:d0:a4:89:bd:e3:7a:a0:93:72:
                    0f:19:56:12:d8:6a:ce:5a:da:b6:38:14:d7:5e:65:
                    bf:71:51:fc:fc:a6:60:e8:d5:72:c5:18:ee:f4:e6:
                    df:48:9f:b6:2b:5e:bf:19:a4:e6:03:88:13:a4:e9:
                    b1:0b:64:b7:65:8e:41:51:a7:a1:54:33:8d:87:06:
                    8e:79:1f:42:48:d2:8f:f5:7e:3f:22:2d:39:4b:8e:
                    22:07:35:bd:2a:77:f1:0d:2f:0c:a6:e5:08:c6:84:
                    29:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A5:27:EE:B2:16:B6:DA:BF:56:C4:62:0C:35:94:FC:CE:90:5D:A8
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39322e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:bb:f7:b8:42:c2:f0:b0:2e:ee:2c:05:98:1b:d6:c0:1c:1e:
         b2:fa:65:f3:40:fc:06:ca:ab:88:63:7a:13:65:1d:a3:f2:dc:
         ab:88:22:f2:2d:bb:c6:ad:2c:66:a7:ec:7f:91:5b:58:54:2b:
         20:fe:0a:4f:70:18:0f:b5:60:a2:b8:f9:5f:93:28:84:cc:d0:
         b6:68:af:04:74:2a:8e:ff:10:1a:fa:f1:8b:d2:a1:70:4c:1d:
         05:6f:62:de:e5:39:7b:af:7b:fb:61:e8:e7:68:92:ff:32:58:
         9d:0b:71:7f:bf:ba:b6:8f:8a:1a:aa:01:3d:44:6b:45:e7:92:
         2d:8b:a8:e4:c8:e3:65:b1:09:d6:52:df:97:54:33:26:06:39:
         44:d7:f9:a3:31:a1:83:3e:8f:eb:90:fb:75:2e:82:41:81:bb:
         15:ea:d3:88:d6:d3:e3:2d:cb:39:cc:41:c8:fb:1d:ee:b3:04:
         68:9f:d7:db:a1:6c:df:25:52:f2:0e:7e:b5:8e:f5:d2:61:b5:
         6d:fc:5c:f8:17:a5:05:08:6a:c4:38:89:57:c3:1a:d9:f3:a3:
         f9:de:90:dc:be:e2:19:ed:c2:d7:8a:52:6c:5f:1a:cc:b5:b2:
         82:73:3d:ad:bf:f9:fd:a1:24:22:60:be:55:dd:c4:37:6e:62:
         d3:14:60:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net