Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3231372e32312e38302e302f32302d3234203d3e203437353833.roa
File:                     3231372e32312e38302e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier:          4y6Jw6gPwzAeISFTq+xqW3Gi3VH6DbWDgCLzsNd0uUU=
Subject key identifier:   98:32:9E:F8:C5:1F:8A:E2:DB:5C:EC:1E:A0:A8:D5:33:41:59:0E:F9
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       218A1F25D3ABCCE1EAF2D32E1AEFC789D21A78D9
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3231372e32312e38302e302f32302d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:33 +0000
ROA not before:           Sat 22 Oct 2022 04:29:33 +0000
ROA not after:            Sat 21 Oct 2023 04:34:33 +0000
asID:                     47583
IP address blocks:        217.21.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8a:1f:25:d3:ab:cc:e1:ea:f2:d3:2e:1a:ef:c7:89:d2:1a:78:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:33 2022 GMT
            Not After : Oct 21 04:34:33 2023 GMT
        Subject: CN=98329EF8C51F8AE2DB5CEC1EA0A8D53341590EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:41:bd:2c:7f:e4:46:86:a2:5b:b6:4a:5f:
                    27:0c:a7:44:98:ce:0e:ae:ab:48:3e:f1:5f:fe:a6:
                    c8:60:4e:7d:c1:62:09:d8:ad:8b:d1:7a:6e:dc:38:
                    cb:48:be:25:89:b5:9e:fc:97:a1:d6:0e:86:db:fe:
                    b0:15:7d:c1:bb:38:0e:f6:0d:fc:d7:3c:57:2c:59:
                    2f:a7:a5:86:fe:10:b1:60:c9:1b:b2:14:98:db:cd:
                    74:bc:6e:54:23:91:92:07:f7:d2:6a:df:8f:c6:e1:
                    97:90:d8:ad:af:6f:f9:65:01:e7:2e:20:f4:95:0e:
                    b0:54:ea:0f:e5:d1:b5:8d:0d:5a:c5:5f:42:e0:55:
                    e9:0f:2e:e7:90:88:15:cf:01:af:7d:74:03:4a:59:
                    a1:1d:91:4b:2a:0e:5d:ea:29:3b:5e:f8:f6:69:2f:
                    78:af:f9:38:f4:91:fa:4b:61:31:8c:f7:fc:03:9c:
                    c3:f6:c4:4f:d6:63:9f:0d:10:b9:5b:7a:0c:64:cb:
                    41:9c:50:8f:f6:d9:a2:67:cf:33:ed:c6:c1:d3:59:
                    ce:9e:28:49:11:2b:ea:ae:34:29:74:60:00:2c:9a:
                    e7:b0:29:34:4e:12:6a:69:33:91:ac:d6:f1:92:19:
                    37:f6:19:8b:f1:d1:ee:0e:e8:bf:50:a6:1e:37:f9:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:32:9E:F8:C5:1F:8A:E2:DB:5C:EC:1E:A0:A8:D5:33:41:59:0E:F9
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3231372e32312e38302e302f32302d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.21.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         be:9e:91:9f:fc:4f:71:ae:23:d8:04:6b:d8:f2:42:5f:c2:e4:
         f5:e2:3f:15:08:d6:4f:18:45:6e:f3:bd:08:8e:08:6a:b4:ff:
         3c:aa:52:b7:49:ea:5c:70:e6:03:52:07:15:1a:37:c9:b4:7e:
         f2:8c:e1:d0:85:24:43:7c:7b:0b:24:ff:fc:c6:73:c6:90:71:
         ee:99:86:ed:f7:46:06:c6:8e:05:81:4c:35:5a:53:dd:93:19:
         36:12:5e:89:f9:f3:74:4a:7f:99:93:a8:e8:14:ce:84:03:13:
         34:9e:4d:3e:eb:6a:b7:3a:51:65:4a:60:71:0a:8b:20:8c:15:
         ef:a7:f0:53:89:2e:71:db:5e:94:ef:cd:1b:ef:96:90:2c:1b:
         b4:c6:00:cb:94:b1:2f:fc:5c:b4:6d:fe:54:93:d2:ec:4f:07:
         1c:a9:08:69:6e:f9:74:d3:b0:9f:c6:2e:46:f5:6d:e9:4e:f9:
         39:7f:38:19:38:7a:16:83:14:d9:d9:d5:dc:ff:2c:bd:b1:cb:
         2a:ec:66:a6:69:96:2a:ce:30:d1:c5:e4:9b:21:93:b7:18:6b:
         76:a8:f4:f6:e5:dc:df:e0:3f:6d:f7:5c:e0:1d:1a:aa:d0:03:
         5a:c5:73:90:17:18:81:bd:8b:f9:f0:4f:85:48:11:c9:a1:87:
         f1:b5:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net