Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e3133362e31362e302f32332d3234203d3e203631333137.roa
File:                     34352e3133362e31362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          6vrEteodivxQqSk7T5XUhMFm3lJbWDrNLbOaPfub5zM=
Subject key identifier:   09:36:36:1F:F9:E0:E0:E5:95:38:76:D8:F7:68:0C:3B:A5:4B:83:9F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5499C56D39DD95FE30A72B0D2EB8021E3B0B781E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3133362e31362e302f32332d3234203d3e203631333137.roa
Signing time:             Thu 26 Jan 2023 11:48:43 +0000
ROA not before:           Thu 26 Jan 2023 11:43:43 +0000
ROA not after:            Thu 25 Jan 2024 11:48:43 +0000
asID:                     61317
IP address blocks:        45.136.16.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:99:c5:6d:39:dd:95:fe:30:a7:2b:0d:2e:b8:02:1e:3b:0b:78:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 26 11:43:43 2023 GMT
            Not After : Jan 25 11:48:43 2024 GMT
        Subject: CN=0936361FF9E0E0E5953876D8F7680C3BA54B839F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:d1:79:62:12:f5:4e:82:8f:ed:b8:05:e2:
                    33:32:88:a3:39:a7:21:42:ce:f6:35:48:1c:ff:82:
                    00:35:d2:db:9c:8d:5e:31:f8:df:03:84:31:d8:26:
                    b7:78:f1:e2:a3:bc:18:4b:76:e8:f9:f7:cf:5d:e9:
                    9e:91:62:2f:b8:e8:3a:ee:26:cd:a3:51:97:76:68:
                    5b:a1:6d:02:9a:69:81:9b:85:aa:6a:a2:08:64:da:
                    72:60:c5:e5:13:7a:f5:96:a1:84:21:ac:fd:84:74:
                    3f:ad:b1:dc:67:b6:6b:da:d2:f4:bc:1c:fd:5a:d5:
                    70:0c:32:5b:04:51:a7:93:e4:99:bb:98:e2:1b:5c:
                    4e:9a:92:ea:1d:10:e9:22:ca:fe:40:89:02:c7:e3:
                    ad:45:98:dc:59:94:48:1e:5c:d7:39:c8:40:fb:2b:
                    37:91:82:2f:96:92:55:6a:13:00:a4:34:d5:83:3c:
                    1f:e7:f3:c5:b6:ec:ec:21:61:ae:7e:75:36:39:b8:
                    ca:2b:07:26:0f:14:b2:4b:fd:4a:92:ae:33:59:79:
                    55:66:fa:ea:73:43:09:bd:af:33:cb:b6:c0:ee:20:
                    e4:e1:0e:ea:2f:7b:e3:2e:b5:af:30:98:10:d8:a6:
                    91:ce:7c:f2:76:a6:45:4c:96:cc:8a:63:9a:5a:aa:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:36:36:1F:F9:E0:E0:E5:95:38:76:D8:F7:68:0C:3B:A5:4B:83:9F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3133362e31362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:88:8d:96:59:57:cf:cd:70:d6:41:05:0d:c1:b7:a7:53:d5:
         62:b5:94:1e:bd:75:5d:a3:b3:91:bf:d9:3f:5c:e1:61:bd:e1:
         d0:ae:f4:10:3a:0d:12:28:e9:ef:3d:2b:af:b2:ec:d0:25:e9:
         b1:b6:a4:0d:55:40:0c:6d:dc:9e:54:40:94:c5:05:ad:95:27:
         62:bd:9e:44:64:b8:4f:81:44:00:02:3e:98:d4:73:4e:08:ed:
         48:d3:be:ef:27:a0:6b:16:71:8a:71:e9:77:17:58:97:33:3e:
         33:39:93:16:1e:55:56:eb:5d:20:80:5c:ba:eb:c8:9e:be:49:
         87:d5:aa:d2:29:b4:50:37:3b:b7:8b:ee:a3:97:60:24:8e:f0:
         3e:5b:0d:1c:05:c1:e2:c7:c5:f7:ed:a7:ae:fa:31:2f:39:9a:
         d0:98:5d:ed:08:14:fc:e7:be:4f:be:be:1b:bd:b1:26:78:f7:
         12:12:6b:a3:ad:8a:a3:95:bf:04:ac:d1:ac:2b:d5:16:2f:e6:
         ff:35:b1:2c:bd:25:95:ec:e8:3a:c3:38:a5:ce:41:01:5c:a7:
         c9:50:4f:a5:72:e5:22:19:12:17:53:3b:19:0b:44:5f:fc:e1:
         ed:9e:e7:ed:f1:86:77:da:67:8f:d5:62:ea:60:bf:d7:8c:51:
         09:9f:1e:09
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUVJnFbTndlf4wpysNLrgCHjsLeB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAxMjYxMTQzNDNaFw0yNDAxMjUxMTQ4NDNaMDMxMTAvBgNV
BAMTKDA5MzYzNjFGRjlFMEUwRTU5NTM4NzZEOEY3NjgwQzNCQTU0QjgzOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLadF5YhL1ToKP7bgF4jMyiKM5
pyFCzvY1SBz/ggA10tucjV4x+N8DhDHYJrd48eKjvBhLduj5989d6Z6RYi+46Dru
Js2jUZd2aFuhbQKaaYGbhapqoghk2nJgxeUTevWWoYQhrP2EdD+tsdxntmva0vS8
HP1a1XAMMlsEUaeT5Jm7mOIbXE6akuodEOkiyv5AiQLH461FmNxZlEgeXNc5yED7
KzeRgi+WklVqEwCkNNWDPB/n88W27OwhYa5+dTY5uMorByYPFLJL/UqSrjNZeVVm
+upzQwm9rzPLtsDuIOThDuove+Muta8wmBDYppHOfPJ2pkVMlsyKY5paqm3FAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUCTY2H/ng4OWVOHbY92gMO6VLg58wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zNDM1MmUzMTMzMzYyZTMxMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjMx
MzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLYgQMA0GCSqGSIb3DQEBCwUAA4IBAQCziI2WWVfP
zXDWQQUNwbenU9VitZQevXVdo7ORv9k/XOFhveHQrvQQOg0SKOnvPSuvsuzQJemx
tqQNVUAMbdyeVECUxQWtlSdivZ5EZLhPgUQAAj6Y1HNOCO1I077vJ6BrFnGKcel3
F1iXMz4zOZMWHlVW610ggFy668ievkmH1arSKbRQNzu3i+6jl2AkjvA+Ww0cBcHi
x8X37aeu+jEvOZrQmF3tCBT8575Pvr4bvbEmePcSEmujrYqjlb8ErNGsK9UWL+b/
NbEsvSWV7Og6wzilzkEBXKfJUE+lcuUiGRIXUzsZC0Rf/OHtnuft8YZ32meP1WLq
YL/XjFEJnx4J
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net