Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39332e302f32342d3234203d3e203330383233.roa
File:                     3139342e3139352e39332e302f32342d3234203d3e203330383233.roa (raw, json)
Hash identifier:          QUOYYJ1iTj+wwgCXtFWA+9GC0RMVgI2XcnKUaZElFHc=
Subject key identifier:   46:67:49:E0:12:52:FE:4E:97:45:99:B1:12:76:0E:9B:D1:BE:F3:DD
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6940325AC3F48E4E9D2E4E55EA31A6FC693B6ABE
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39332e302f32342d3234203d3e203330383233.roa
Signing time:             Tue 28 Jun 2022 04:40:48 +0000
ROA not before:           Tue 28 Jun 2022 04:35:48 +0000
ROA not after:            Tue 27 Jun 2023 04:40:48 +0000
asID:                     30823
IP address blocks:        194.195.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:40:32:5a:c3:f4:8e:4e:9d:2e:4e:55:ea:31:a6:fc:69:3b:6a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:48 2022 GMT
            Not After : Jun 27 04:40:48 2023 GMT
        Subject: CN=466749E01252FE4E974599B112760E9BD1BEF3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:78:81:99:0e:17:dd:d2:3f:f9:48:ee:c5:e1:
                    2e:b6:62:5a:ad:5d:84:70:49:88:ce:bc:59:2a:2c:
                    86:f4:ae:ae:00:b1:be:81:2c:f9:9f:70:bd:a2:19:
                    c8:35:94:f2:16:de:03:c0:7b:f2:19:72:26:8f:20:
                    9e:04:38:84:63:bd:72:8b:1d:cd:fd:29:89:b8:64:
                    4c:0c:cc:3c:62:b6:82:21:d3:03:1d:5e:91:6f:2e:
                    57:f0:f1:c4:d0:d1:af:fa:e7:df:ad:76:49:3c:19:
                    44:a5:43:46:d2:94:79:06:fa:03:70:29:75:b7:c5:
                    db:b2:07:c1:3d:21:a4:fe:b6:96:5e:79:8a:79:ee:
                    b1:e6:b8:bc:2c:f9:72:fb:38:e6:48:e4:3c:fc:ab:
                    32:18:b3:64:cf:3e:46:d9:fb:3f:74:e0:c2:90:af:
                    64:83:19:43:3c:0e:03:82:9a:21:3c:8f:da:ce:e6:
                    ad:f0:cb:7b:c3:a4:d1:fa:23:c5:78:d4:58:b1:e9:
                    06:d4:f8:ea:32:08:ed:ab:40:4b:90:db:db:5f:0d:
                    4d:27:96:17:2b:fc:a7:86:69:94:66:7e:9b:64:77:
                    99:2f:e4:a9:fa:49:0d:97:f4:c7:0c:a1:21:80:04:
                    07:65:a6:ca:66:9b:20:e6:ef:0d:57:4c:e0:58:fd:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:67:49:E0:12:52:FE:4E:97:45:99:B1:12:76:0E:9B:D1:BE:F3:DD
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39332e302f32342d3234203d3e203330383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b4:34:44:87:7b:29:ee:bf:d3:87:71:ac:5e:80:ed:92:29:
         c6:37:c2:21:62:65:c6:77:d9:4a:59:b2:6f:08:0e:9f:74:de:
         69:6d:5d:91:6a:b5:44:c0:c7:20:13:72:68:a7:93:83:cd:a2:
         65:fa:be:92:ec:c5:58:95:65:31:85:4c:42:dd:2d:dc:e0:84:
         e6:19:cd:6d:d0:a2:7a:ce:05:b2:66:59:4d:7e:0a:3a:f7:15:
         b1:85:09:44:49:cb:f0:19:a7:b4:b1:75:80:3a:ce:db:93:82:
         e5:83:84:71:13:6c:c4:76:0c:ad:22:e3:81:44:01:6a:98:b7:
         95:3e:d9:e3:f1:71:08:5a:10:62:52:27:68:65:b5:a7:ca:af:
         ff:b1:67:89:0f:a1:f4:ac:ca:f0:a8:e5:63:84:7c:0a:36:85:
         35:43:a3:ed:68:67:d9:a9:34:0c:d1:0d:5b:f0:20:48:c0:23:
         9d:32:2b:bc:d3:85:22:e4:01:d8:cf:26:49:84:e2:2d:ec:c0:
         f7:93:79:11:d5:c7:25:f6:19:81:bd:11:7c:ac:65:29:dd:3f:
         dd:c7:e6:3b:f1:13:b0:f6:d0:79:0e:54:a3:c2:28:bb:dd:da:
         c6:df:fd:fc:d0:81:e1:14:ec:7f:94:a4:d1:92:17:0e:c9:17:
         28:5e:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net