Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3230342e302f32322d3232203d3e2031323939.roa
File:                     3139352e3137392e3230342e302f32322d3232203d3e2031323939.roa (raw, json)
Hash identifier:          6u895QxYTDrVocxCATSCnufqJiIhzIO7/M0biakW7G4=
Subject key identifier:   74:46:C6:C4:BA:AD:A8:F6:77:3D:2B:2F:64:60:78:64:E3:DA:31:43
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7287CFBCEF22B5652123C290CF6BCADFC7237C84
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3230342e302f32322d3232203d3e2031323939.roa
Signing time:             Wed 11 May 2022 09:21:31 +0000
ROA not before:           Wed 11 May 2022 09:16:31 +0000
ROA not after:            Wed 10 May 2023 09:21:31 +0000
asID:                     1299
IP address blocks:        195.179.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:87:cf:bc:ef:22:b5:65:21:23:c2:90:cf:6b:ca:df:c7:23:7c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: May 11 09:16:31 2022 GMT
            Not After : May 10 09:21:31 2023 GMT
        Subject: CN=7446C6C4BAADA8F6773D2B2F64607864E3DA3143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:6b:e6:a3:c1:88:37:e3:b1:7c:83:7c:f2:
                    54:0d:b5:7c:72:56:6a:a4:6d:c1:09:94:85:29:8c:
                    11:04:73:78:b0:82:5e:03:b3:f4:47:e5:9f:dd:39:
                    bd:c5:3e:e6:15:a0:bb:91:94:63:24:99:27:81:3b:
                    ba:a4:00:82:e9:20:8a:1a:b4:ac:a4:f3:5a:f9:44:
                    62:2d:fd:23:20:3f:1d:c7:6c:dd:b6:b2:da:5d:ad:
                    65:9f:ef:d6:cd:60:e1:d9:1f:98:99:49:29:84:d5:
                    7a:d9:30:4d:9d:58:41:fd:fb:2b:c0:bc:1e:bd:5d:
                    7f:c7:2a:34:7f:62:60:87:ad:d7:86:20:5b:74:c3:
                    a6:9b:6c:6d:aa:be:f3:ca:c9:1c:13:b5:8a:5d:4a:
                    d8:85:99:8f:f3:3f:32:45:f3:7a:39:7d:8f:8a:ad:
                    88:7c:1f:12:f3:9e:f7:6b:e8:f5:76:a0:15:21:ac:
                    7b:42:82:fc:5a:82:c1:ad:01:25:7d:2f:20:4c:5f:
                    ea:86:b0:80:76:75:7f:a8:c1:9f:d3:2e:ea:61:6c:
                    24:e8:1a:7a:b7:93:1e:84:24:44:34:60:09:a9:2b:
                    fe:11:e9:cf:1f:1a:d5:27:07:29:b4:ea:30:28:ed:
                    31:d2:90:f1:61:6b:a2:00:97:72:58:0e:f6:e9:29:
                    b8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:46:C6:C4:BA:AD:A8:F6:77:3D:2B:2F:64:60:78:64:E3:DA:31:43
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3230342e302f32322d3232203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.179.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:18:03:8a:47:f9:b9:10:2a:c1:0a:20:68:62:e7:4d:81:77:
         79:71:41:e3:55:e4:b9:94:0f:af:b6:5f:f6:a8:c0:ce:05:2e:
         26:70:c6:8f:16:9a:ec:38:90:d1:d7:55:d5:79:94:5a:32:52:
         f4:82:0f:66:85:52:e2:13:74:49:c9:d7:30:90:b2:8f:a8:93:
         ad:99:84:b7:7f:eb:82:2a:32:20:9a:23:1c:09:8a:95:db:41:
         c5:26:10:cd:98:18:ed:ae:0a:c6:36:67:63:a5:ac:68:b3:d5:
         ac:73:ca:44:f4:af:46:c1:0b:57:49:75:79:fa:a4:44:bf:98:
         b3:ff:da:19:d4:93:ca:a6:d7:99:e5:cc:68:0e:7f:7e:90:fd:
         70:e2:86:05:83:5d:86:df:a0:ed:95:2c:b7:6e:35:b2:c6:b0:
         f9:ce:3b:10:b1:cf:a3:a0:e6:1b:f6:a0:23:d1:7e:d4:67:f0:
         f5:77:02:ac:b9:a3:09:93:de:32:3b:28:4e:31:8c:09:b0:aa:
         aa:c0:18:a2:80:01:bd:98:60:4f:9d:27:9e:cf:24:19:d2:ac:
         ac:55:19:2b:e2:b1:8b:b0:c3:39:a1:f5:dc:a0:8d:5f:66:1c:
         9e:2e:65:6c:d0:85:e5:99:03:f8:d6:65:52:68:b7:87:5c:b4:
         1f:4b:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net