Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/352e3138312e3231362e302f32332d3234203d3e203437353833.roa
File:                     352e3138312e3231362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          xpAoCBelZClKMctQZicVCQBn4rQDM8ITVYloPYucilk=
Subject key identifier:   C9:80:AC:9C:C1:51:1E:83:75:5E:63:4D:5F:07:0B:15:D9:94:BC:AB
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1CD44B9D8A4C05DAF9686A166FD4B93CAEF47D31
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/352e3138312e3231362e302f32332d3234203d3e203437353833.roa
Signing time:             Thu 26 Jan 2023 11:48:40 +0000
ROA not before:           Thu 26 Jan 2023 11:43:40 +0000
ROA not after:            Thu 25 Jan 2024 11:48:40 +0000
asID:                     47583
IP address blocks:        5.181.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d4:4b:9d:8a:4c:05:da:f9:68:6a:16:6f:d4:b9:3c:ae:f4:7d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 26 11:43:40 2023 GMT
            Not After : Jan 25 11:48:40 2024 GMT
        Subject: CN=C980AC9CC1511E83755E634D5F070B15D994BCAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:09:f3:d0:9c:28:4d:61:17:1f:7b:aa:00:
                    db:e1:88:73:bc:0b:ef:5c:be:31:43:16:56:99:c8:
                    af:6d:e0:94:41:9d:1a:a8:a6:d6:a2:40:ae:14:15:
                    96:79:89:96:61:a3:8a:a8:3d:2e:1e:78:33:7d:e8:
                    46:a3:50:84:99:11:01:fa:c5:46:ec:02:23:4f:64:
                    32:8e:f7:13:d6:3a:78:86:ee:15:6e:95:fa:f0:62:
                    c3:a4:b0:c4:b3:6c:9f:80:41:a9:18:cd:3e:84:75:
                    dc:a6:7a:b6:9c:f7:f1:f6:0f:fc:4d:38:d4:15:f8:
                    bc:b4:d8:7f:d7:30:c0:e4:1c:73:c1:fc:3b:9b:c6:
                    8f:56:89:56:9d:93:fa:65:22:25:d1:b6:dc:87:9b:
                    78:6c:f8:6a:1e:11:d0:11:d3:17:b7:c2:cb:89:04:
                    c4:15:a2:cb:1b:cb:5d:47:ed:67:19:2d:dc:66:bb:
                    28:49:7b:02:75:77:84:6f:d2:e4:95:ea:79:b8:b8:
                    3d:00:e2:c9:c0:64:b0:30:31:21:4e:de:06:7d:1c:
                    5d:e7:20:3a:fd:eb:2a:f0:43:d2:08:44:8f:e8:fd:
                    03:c1:07:a2:26:9b:87:f3:84:41:a7:b1:19:c0:11:
                    a5:3c:60:08:7c:70:6b:18:83:55:37:40:8e:81:95:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:80:AC:9C:C1:51:1E:83:75:5E:63:4D:5F:07:0B:15:D9:94:BC:AB
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/352e3138312e3231362e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:03:2c:58:af:06:90:06:d0:91:d1:08:cc:a4:80:7a:67:93:
         31:ca:c5:36:6b:9c:48:c4:56:bf:3a:be:df:c3:3f:c8:9b:8b:
         8a:52:9e:bc:69:4b:7c:f5:7b:c6:9c:f6:98:3b:37:31:f8:a9:
         c8:49:59:f5:87:f7:71:b2:65:b6:44:2f:b5:16:55:58:ad:6c:
         13:21:f5:ff:d6:4b:2c:fc:01:7b:9e:50:96:49:17:a9:69:f2:
         29:25:0f:4f:ea:14:f1:5b:76:f7:50:c6:14:f8:59:3b:d2:be:
         c5:7e:05:2c:74:44:12:e6:28:f1:94:c8:58:f9:15:8f:fb:2f:
         6c:dc:6e:d3:ba:0b:c5:ad:5c:24:d7:69:ba:d2:3b:92:88:85:
         1d:74:ad:5e:ff:92:9e:25:5f:8e:9d:53:87:da:f4:16:62:c4:
         6d:52:ed:07:23:0f:c7:59:cd:b3:1e:d3:f5:a7:8a:28:55:d2:
         9b:62:47:7a:64:58:12:ae:40:82:b0:9e:07:d2:07:b1:da:ed:
         0d:25:4c:7f:05:33:2d:f4:ff:9e:6a:66:89:9e:22:c4:6e:06:
         81:f8:7c:97:f1:1f:eb:55:91:1e:c9:78:6f:49:76:c0:59:2e:
         85:22:6b:82:db:38:bc:a4:39:d7:50:c2:89:42:2c:bc:81:89:
         da:ae:d0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net