Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39352e302f32342d3234203d3e203433323630.roa
File:                     3139342e3139352e39352e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          iixbpZppKaD4F71l74y9XAr8jZ6Pv7HV4v9PgmGzkfI=
Subject key identifier:   F2:D0:42:A9:3F:41:D3:39:D2:60:23:2E:65:01:DC:FE:C9:75:DB:8D
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3AA78FCAAFF4F678F03770A3A30FA974DDB7910D
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39352e302f32342d3234203d3e203433323630.roa
Signing time:             Sat 22 Oct 2022 04:34:11 +0000
ROA not before:           Sat 22 Oct 2022 04:29:11 +0000
ROA not after:            Sat 21 Oct 2023 04:34:11 +0000
asID:                     43260
IP address blocks:        194.195.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a7:8f:ca:af:f4:f6:78:f0:37:70:a3:a3:0f:a9:74:dd:b7:91:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:11 2022 GMT
            Not After : Oct 21 04:34:11 2023 GMT
        Subject: CN=F2D042A93F41D339D260232E6501DCFEC975DB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:9e:03:c4:ea:5b:a5:e4:d3:66:68:b0:f6:
                    36:00:a4:7b:f4:96:6b:4c:30:4d:46:d9:06:d0:cf:
                    98:5a:03:a3:b0:e8:fe:e6:68:a9:1c:96:e4:7e:f1:
                    7d:74:03:31:bc:7a:c4:14:a6:80:11:04:b1:91:26:
                    c9:d0:08:9d:13:01:fd:2c:43:9b:db:95:8c:29:23:
                    8f:c2:43:4c:2c:09:69:8c:1c:45:d7:08:a0:87:c0:
                    c8:9e:d4:ab:0f:7e:65:20:78:4b:54:8a:83:07:03:
                    34:cd:7d:5f:42:1c:78:7d:54:d7:6f:b8:4b:b4:01:
                    32:52:75:49:4b:54:63:d4:cd:99:fc:ed:34:6b:e3:
                    46:a9:56:91:24:00:7b:e3:22:ac:c1:10:0e:d4:1e:
                    6e:f0:4e:83:77:a0:0e:ab:d9:41:d6:14:61:0d:1a:
                    f7:80:f6:3d:8c:b6:ce:09:e2:8e:87:ca:c0:28:07:
                    6f:25:1b:36:6c:52:4e:1d:e1:f7:53:67:90:41:0d:
                    50:1a:55:f2:eb:0f:bb:43:d0:b5:b6:92:2d:a8:09:
                    ec:42:f8:73:91:ad:d0:24:f5:0c:58:c5:f0:0c:3f:
                    09:a3:58:66:b3:63:4a:6d:5f:ee:86:64:6c:19:4f:
                    7d:df:56:82:72:7c:89:0b:cd:68:40:33:33:ad:48:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D0:42:A9:3F:41:D3:39:D2:60:23:2E:65:01:DC:FE:C9:75:DB:8D
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39352e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:60:97:12:39:ff:80:e2:8a:fb:7e:85:9a:b2:4f:40:3a:c5:
         ec:91:e2:3e:7a:66:8f:31:8a:fb:ba:0c:a8:e1:71:33:24:ca:
         0a:65:bd:96:a2:18:17:8f:cc:4e:78:8f:55:6c:3a:73:1c:70:
         b5:d9:96:63:8f:a1:f3:22:52:16:06:bc:d6:a6:64:20:1c:33:
         22:4d:80:93:c1:24:e7:df:7d:2e:9e:ce:2f:27:d7:bb:44:ff:
         75:b9:0b:1e:f0:03:5c:3d:d0:97:40:ee:8a:36:5c:f2:53:68:
         05:97:7d:a3:07:ae:fc:20:35:16:15:7b:d6:76:a7:7c:20:51:
         1f:e2:65:b9:f9:b5:d6:5f:8b:b8:a1:55:ba:50:b5:a2:fe:03:
         eb:82:10:78:af:33:24:44:e7:39:1d:29:47:d3:19:56:61:e8:
         9d:62:c9:ed:2f:28:0d:a9:da:56:6c:2e:68:38:e4:3d:89:1f:
         b0:63:ef:da:41:68:87:a4:f5:0d:b5:31:4c:cc:20:5a:2b:8d:
         e2:96:13:de:3c:f9:b3:9a:f6:04:ab:25:c9:b4:e0:f6:8e:b3:
         33:fa:a3:72:cd:be:56:6e:39:f2:a2:68:24:93:64:73:a0:e3:
         75:60:68:24:cd:9f:86:e2:8b:8f:b4:68:6b:66:9d:70:8c:95:
         6f:8b:35:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net