Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39342e302f32332d3233203d3e203433323630.roa
File:                     3139342e3139352e39342e302f32332d3233203d3e203433323630.roa (raw, json)
Hash identifier:          ixMiBAqlc07b9vKqnbldmz4pC37QbOEAizLywDNNYco=
Subject key identifier:   33:8C:B6:7C:C0:A1:B3:47:2C:A1:82:6D:38:4E:61:5F:52:BC:F1:0C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1F8390E5F1DFAAC59EE0B5A5660E257BB50B01D3
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39342e302f32332d3233203d3e203433323630.roa
Signing time:             Sat 22 Oct 2022 04:34:24 +0000
ROA not before:           Sat 22 Oct 2022 04:29:24 +0000
ROA not after:            Sat 21 Oct 2023 04:34:24 +0000
asID:                     43260
IP address blocks:        194.195.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:83:90:e5:f1:df:aa:c5:9e:e0:b5:a5:66:0e:25:7b:b5:0b:01:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:24 2022 GMT
            Not After : Oct 21 04:34:24 2023 GMT
        Subject: CN=338CB67CC0A1B3472CA1826D384E615F52BCF10C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:9a:a6:2d:24:b1:d9:6c:83:ca:18:9f:41:
                    0f:09:9d:be:3f:a3:9e:8b:56:29:1f:fe:cd:77:3b:
                    d3:7d:87:30:2b:b3:0f:a3:51:d4:8c:b7:b4:2c:63:
                    79:79:45:6e:f0:82:14:67:4f:d5:74:66:c2:f5:1c:
                    72:9a:47:e5:11:21:8d:cc:fe:ce:a0:f3:7c:8c:00:
                    a2:c9:f2:85:43:87:9e:f9:47:c2:a6:2a:f3:7b:e5:
                    35:20:33:e4:55:d3:16:f1:a2:7e:7b:07:19:ad:32:
                    3c:c6:f8:e3:35:27:5e:03:f5:a9:6c:41:19:ed:c7:
                    91:2f:a3:2c:af:b4:c1:5e:91:2a:d5:3b:f8:97:c1:
                    e9:3b:2d:00:71:81:a2:3b:42:52:22:e2:e5:18:03:
                    ae:f8:6c:1a:ac:b5:8a:f1:c9:c3:53:ff:89:11:f2:
                    9a:b7:40:d3:32:8e:9d:22:9c:08:21:53:22:bf:cc:
                    5f:49:78:3b:ac:89:ad:44:21:e7:65:ee:db:c1:48:
                    8d:ab:c2:45:49:fd:ae:0e:2e:04:a2:a4:4f:d1:11:
                    c1:0c:bc:a3:99:41:25:a1:10:75:eb:db:63:b3:96:
                    93:80:c4:01:b6:4a:35:f7:43:92:c5:0e:4d:71:db:
                    8f:b6:f6:38:5d:ef:cb:3c:71:ac:54:85:7e:69:f6:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8C:B6:7C:C0:A1:B3:47:2C:A1:82:6D:38:4E:61:5F:52:BC:F1:0C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39342e302f32332d3233203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:78:ba:ce:69:91:43:06:7b:09:f9:83:d4:e4:70:53:ec:9e:
         86:b7:0d:92:cb:8c:53:29:cf:4d:f5:25:1d:3d:95:01:b7:c8:
         44:b3:ec:91:fe:4f:ce:d7:48:f2:97:f0:1f:35:2a:11:94:6a:
         17:f8:df:5c:b5:8a:de:30:2e:00:a7:c2:b2:a6:cc:bd:55:c8:
         c8:a3:aa:3f:a3:cc:00:90:ca:12:78:4f:9d:d2:df:90:e2:71:
         20:78:94:d4:ce:00:03:78:c4:ea:09:99:8e:1a:cd:67:0b:c2:
         61:d7:e3:0d:67:e5:b7:8c:56:ab:7f:a4:4d:46:c5:06:2d:de:
         69:e1:3a:e6:12:da:89:76:67:ae:4e:d7:1f:80:38:62:3c:d1:
         ab:be:6a:a0:5a:a3:25:a4:03:18:54:04:bf:e5:30:13:c4:e3:
         1b:75:77:20:1d:75:68:d2:ff:f5:12:d4:d6:e7:52:9e:06:08:
         a7:65:ee:ce:55:ff:08:16:72:ee:7e:67:95:d9:b2:2f:d4:fa:
         5c:66:db:7a:19:3e:e0:6b:dc:b0:bd:25:1a:03:4b:02:9d:84:
         c0:cc:78:db:86:6a:f3:a2:a9:e2:7b:72:97:17:45:32:21:9e:
         84:02:25:b2:26:f4:43:a4:6b:4f:a4:b6:bf:f3:09:61:d3:24:
         6a:f2:5f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net