Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e3231302e35382e302f32332d3233203d3e20323033303938.roa
File:                     3139352e3231302e35382e302f32332d3233203d3e20323033303938.roa (raw, json)
Hash identifier:          AmKsXuAUnQjL6RNi0YZjFBIH6h1XPl64nxfOrL4WMdU=
Subject key identifier:   9B:25:A1:55:C2:23:AD:CB:99:A6:02:47:F4:9F:A4:B6:0A:9C:46:65
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6A762F762E570F298AF317A9976A2CD90F68EA39
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3231302e35382e302f32332d3233203d3e20323033303938.roa
Signing time:             Sat 22 Oct 2022 04:34:11 +0000
ROA not before:           Sat 22 Oct 2022 04:29:11 +0000
ROA not after:            Sat 21 Oct 2023 04:34:11 +0000
asID:                     203098
IP address blocks:        195.210.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:76:2f:76:2e:57:0f:29:8a:f3:17:a9:97:6a:2c:d9:0f:68:ea:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:11 2022 GMT
            Not After : Oct 21 04:34:11 2023 GMT
        Subject: CN=9B25A155C223ADCB99A60247F49FA4B60A9C4665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:5f:57:cf:2f:5e:fa:65:6c:79:a7:fc:bb:
                    cc:54:ac:a4:72:38:c9:18:1e:c8:d7:90:bf:02:b9:
                    a4:bc:2a:bf:29:4a:7b:19:0b:15:3b:07:7c:4d:4c:
                    3f:05:6a:b7:4f:eb:a7:80:cb:bd:e8:dd:85:0d:8b:
                    82:d1:3e:a5:a2:fc:36:27:14:c7:fb:5c:d0:f8:03:
                    7b:6a:30:95:f6:82:77:c5:62:1d:d6:37:6a:d1:f6:
                    16:b4:a1:eb:78:eb:07:c9:b3:2b:6f:20:cb:cf:e1:
                    a2:9d:6b:15:79:fa:3e:de:04:3b:bf:bd:af:9b:49:
                    74:b8:56:41:38:6b:1f:b7:c0:b9:56:08:29:98:3c:
                    27:1f:45:ec:63:67:e6:9e:ea:40:37:9a:57:b1:87:
                    0c:55:cf:e2:3d:d7:dc:74:de:1a:64:2e:7f:d4:17:
                    34:58:d5:10:79:9e:37:6d:ac:fe:ff:aa:55:db:75:
                    8e:13:ea:ad:a7:94:ef:7b:7c:23:78:b8:77:d4:4b:
                    e9:e5:5b:98:34:ba:f0:5b:6a:eb:1b:52:d3:67:87:
                    b3:a0:1a:f5:46:8f:0d:18:fe:e2:d9:fa:a1:8c:03:
                    df:0f:6a:ac:7d:92:1c:3b:4e:5b:3a:a1:76:29:24:
                    2d:5f:b2:2a:b0:a5:47:51:74:b3:fd:6b:de:b0:dc:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:25:A1:55:C2:23:AD:CB:99:A6:02:47:F4:9F:A4:B6:0A:9C:46:65
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3231302e35382e302f32332d3233203d3e20323033303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.210.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:9e:a6:57:8f:dc:b7:5e:20:5c:9c:e5:26:06:e6:4e:82:d0:
         29:ff:2c:99:be:a6:a1:9d:6f:a0:2d:4b:eb:98:97:0f:4a:4a:
         77:10:db:cf:be:6e:94:fb:4b:fa:8f:4c:71:ef:43:94:7c:3a:
         b4:4a:64:c1:e1:19:ba:23:8d:a0:c0:3a:7e:1d:eb:ab:d4:bc:
         d7:f6:10:e6:c3:bb:71:ac:5f:81:0e:9b:ac:c3:71:9e:36:05:
         7a:38:78:e6:02:02:43:39:be:96:0d:d4:0f:43:bf:ed:ae:80:
         2d:b9:b0:d6:93:db:84:d3:4c:b9:f8:03:59:90:71:a7:b9:ab:
         17:29:00:73:9b:94:de:1a:e2:6b:63:40:20:a0:29:68:da:8e:
         74:88:9b:a1:0a:a1:17:9c:b7:71:7a:40:18:eb:78:f1:1d:6c:
         60:36:a8:10:b3:e5:3e:2d:ce:e0:aa:f8:17:3f:5f:7a:0d:fd:
         93:ed:47:41:6b:a9:5e:d3:d9:a7:6f:86:1f:1c:eb:ca:0d:9e:
         4b:fe:16:a2:7e:4f:1f:ec:f5:da:e0:ea:46:09:f5:d9:51:a6:
         65:81:00:9a:61:c1:15:0e:41:17:9a:3f:4d:dc:bb:29:e9:4d:
         ec:33:eb:bb:33:91:94:af:4c:21:34:ce:ef:a3:f6:7c:4f:e6:
         a9:b0:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net