Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa
File:                     34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier:          xXjMl9A7QSkL6nMnv/ZaFlxJ3valCKt5xdqVJ/L9MFo=
Subject key identifier:   1D:9E:10:4D:4F:04:03:F1:3E:7B:04:6D:65:D6:C2:F8:AC:1C:D2:DA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       15F586F1EBD664763232DDAA342E447B06AB5404
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa
Signing time:             Thu 26 Jan 2023 11:48:41 +0000
ROA not before:           Thu 26 Jan 2023 11:43:41 +0000
ROA not after:            Thu 25 Jan 2024 11:48:41 +0000
asID:                     201341
IP address blocks:        45.141.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f5:86:f1:eb:d6:64:76:32:32:dd:aa:34:2e:44:7b:06:ab:54:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 26 11:43:41 2023 GMT
            Not After : Jan 25 11:48:41 2024 GMT
        Subject: CN=1D9E104D4F0403F13E7B046D65D6C2F8AC1CD2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:fe:65:72:4e:65:a3:c0:a9:6e:15:47:1b:
                    f3:2d:65:64:e6:f1:2a:10:4f:a9:d2:93:1a:da:b6:
                    f8:62:de:20:73:46:0f:e4:65:23:40:42:d2:b4:64:
                    6a:36:2a:ca:43:f9:b9:1a:8c:a0:67:c0:89:43:e2:
                    65:45:fc:a8:4a:8f:5e:d5:8b:66:a3:43:08:a2:56:
                    9c:fe:da:47:4c:f7:e1:5b:dc:8e:a9:7e:d0:67:54:
                    b7:11:4c:b3:bf:b3:bd:71:e6:1b:eb:f2:f7:12:e9:
                    e2:63:df:a5:ab:ce:be:a6:30:89:d0:73:ae:d6:26:
                    7c:dc:90:ac:4b:a7:d3:ac:66:f1:6a:eb:8b:46:d4:
                    a3:2c:d4:bd:bf:96:7a:93:e2:f7:09:1c:8a:7b:64:
                    d1:78:47:da:27:39:ab:28:e1:7c:2d:a2:ef:89:42:
                    8e:f6:ec:07:f4:09:10:b2:ec:47:e8:46:6f:05:8a:
                    2c:a5:2a:bf:d7:f6:c3:a3:ac:a9:50:04:b2:cf:d7:
                    6d:fc:d1:c3:14:65:75:18:92:c5:77:1c:d5:3e:6b:
                    44:fa:0f:00:a9:0c:e2:1e:63:66:ba:79:83:9c:04:
                    ed:28:ef:7a:36:79:df:b3:f4:8e:16:00:1a:1f:30:
                    2e:b9:51:ae:ca:ee:f0:cc:6d:6f:63:d5:72:1c:40:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9E:10:4D:4F:04:03:F1:3E:7B:04:6D:65:D6:C2:F8:AC:1C:D2:DA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:42:be:27:66:6c:6b:23:c7:46:0b:88:81:bd:5a:fc:ad:
         56:2b:9d:fb:d6:23:f0:69:5b:e5:f7:b1:55:20:35:a9:b9:2a:
         96:fa:73:55:3c:11:f8:ba:64:fb:4d:72:c4:8b:7c:0e:71:3e:
         b7:5b:c3:c9:6a:d8:ee:44:b5:5a:34:53:6f:5a:9a:5d:40:14:
         00:e1:ed:7d:1d:27:43:36:13:f6:3b:02:12:11:ee:ae:f4:de:
         ad:0e:9b:92:95:29:0e:38:12:fd:f1:3a:6b:71:a1:7e:14:09:
         ee:2b:a3:40:7f:a5:21:93:7e:21:48:45:f8:16:15:15:b0:49:
         06:be:db:7d:1b:89:c3:29:c9:01:db:b6:f9:a6:53:7e:96:b1:
         91:e7:52:af:89:87:03:8b:fa:8e:25:5f:04:4c:1b:b3:19:db:
         1c:5b:2c:61:38:2d:f8:f4:39:56:1e:ee:44:2d:2f:50:a1:13:
         ef:44:66:59:a4:05:41:58:ed:ab:97:57:df:aa:90:62:be:82:
         c3:4b:19:6d:15:cf:e9:4f:e4:e9:1a:77:49:12:c5:23:64:6c:
         10:db:c5:13:e1:88:e5:f7:06:1c:2f:c7:3a:5e:20:43:1e:e4:
         ce:81:33:64:59:86:f0:1a:41:e7:46:50:4a:a0:51:18:50:e9:
         9f:23:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net