Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/322e35392e3135302e302f32342d3234203d3e203437353833.roa
File:                     322e35392e3135302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          x6ung3VGteTilkbLyOSMwZ2M0P/45/hk4TMooZi5liA=
Subject key identifier:   4E:24:DF:C2:33:A1:03:C8:D7:E8:46:AB:F1:B1:78:4B:3B:5C:3D:46
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       21BBB103907E81BAD759AA98E78D3197891653EC
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/322e35392e3135302e302f32342d3234203d3e203437353833.roa
Signing time:             Thu 26 Jan 2023 11:48:40 +0000
ROA not before:           Thu 26 Jan 2023 11:43:40 +0000
ROA not after:            Thu 25 Jan 2024 11:48:40 +0000
asID:                     47583
IP address blocks:        2.59.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:bb:b1:03:90:7e:81:ba:d7:59:aa:98:e7:8d:31:97:89:16:53:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 26 11:43:40 2023 GMT
            Not After : Jan 25 11:48:40 2024 GMT
        Subject: CN=4E24DFC233A103C8D7E846ABF1B1784B3B5C3D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3b:a1:83:64:63:67:63:b6:7c:ef:dd:92:fd:
                    d2:b6:0a:8d:a8:de:c8:e8:cb:f0:42:59:03:de:f8:
                    58:64:dc:6a:9d:ee:d9:4f:c4:cf:83:53:18:cc:b3:
                    46:55:79:49:b8:1c:db:03:28:bd:37:1d:2f:66:bd:
                    07:36:8c:29:40:5b:2b:e8:c0:8a:8e:59:b6:a5:39:
                    6e:66:69:23:72:21:78:c6:4a:1b:29:f8:8b:5b:40:
                    4a:34:80:26:b7:a7:84:10:56:64:af:07:27:f3:ec:
                    39:93:b4:fa:7d:72:e7:f8:8e:ae:61:18:25:a7:b8:
                    e7:3b:79:59:9b:7f:f8:4b:cd:ce:ec:92:01:60:26:
                    a3:c4:51:b3:0f:e3:79:a3:af:8e:9f:a4:7b:12:f2:
                    1c:5a:2b:3b:d1:b2:a9:11:86:ce:af:f2:22:0e:8b:
                    99:0a:15:32:b2:8c:e8:88:b3:31:15:5d:18:da:da:
                    06:f2:c5:bc:e7:7c:aa:84:9d:b1:4a:59:a6:df:8f:
                    27:d3:ce:05:bc:3b:82:45:a5:1c:c1:c5:30:c3:cf:
                    c6:cf:13:82:12:15:7c:9f:1d:59:11:85:08:11:cd:
                    0b:df:9e:ea:64:8a:fa:b8:54:d6:14:4b:5c:65:bb:
                    14:8d:ea:30:ac:43:27:7e:f7:09:11:78:21:52:32:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:24:DF:C2:33:A1:03:C8:D7:E8:46:AB:F1:B1:78:4B:3B:5C:3D:46
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/322e35392e3135302e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:4a:9b:9d:40:e8:1b:39:bd:66:94:91:c9:3c:23:05:38:32:
         ef:29:8b:32:f5:17:ab:d4:88:c9:3b:35:ca:96:80:c4:3b:27:
         67:c7:7c:89:40:aa:9d:43:74:dc:e4:b4:34:30:b8:0d:71:c1:
         16:82:d9:73:d8:59:44:53:fe:18:a2:c5:35:3d:87:e2:4b:96:
         18:cc:53:90:f2:d8:4f:8b:c2:7d:47:64:22:a4:86:b3:18:f0:
         cb:a2:24:85:fc:6a:f5:20:20:f1:5c:4c:1e:4f:5b:0c:19:5b:
         73:16:b1:25:13:9f:af:43:5c:38:03:d9:8c:6f:69:93:ef:94:
         5d:84:be:0a:5f:33:a6:40:1f:85:d4:75:41:b5:de:dd:fd:8f:
         4d:5d:ec:cc:68:7d:f0:4a:29:40:9d:fd:48:e1:10:ea:df:b2:
         cd:c5:e7:20:1a:e3:d5:c8:89:eb:fe:7c:17:d4:f5:4c:20:55:
         bc:e0:1b:db:e3:ca:12:dc:da:3b:ae:27:8a:66:f7:94:68:d2:
         7d:fa:fc:56:25:ef:42:84:d6:3c:fb:65:1a:6c:68:4d:5f:6c:
         d5:4f:30:ec:f6:65:97:a3:0f:ee:f1:69:b7:6d:f2:e7:af:c3:
         46:c8:3a:f1:69:94:37:4f:16:41:06:89:69:85:cb:6d:63:95:
         a0:7f:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net