Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa
File:                     37372e37382e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          hP+8GfNTYGBt2e92ZIhfiIbOybtcheRYVQVKHrIsYCs=
Subject key identifier:   27:C5:29:B3:85:AA:45:6B:E2:05:AA:E2:80:BC:AB:8E:B0:E8:56:1C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2D277E3C2CF7090453ED98893CEF67A69C8EAF78
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 20 Jan 2023 12:25:41 +0000
ROA not before:           Fri 20 Jan 2023 12:20:41 +0000
ROA not after:            Fri 19 Jan 2024 12:25:41 +0000
asID:                     136787
IP address blocks:        77.78.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:27:7e:3c:2c:f7:09:04:53:ed:98:89:3c:ef:67:a6:9c:8e:af:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 20 12:20:41 2023 GMT
            Not After : Jan 19 12:25:41 2024 GMT
        Subject: CN=27C529B385AA456BE205AAE280BCAB8EB0E8561C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:18:5d:99:c2:49:b7:9b:ff:5b:ec:76:60:
                    01:a2:54:94:ac:74:fb:ee:24:0c:ba:3d:7d:10:e5:
                    ce:9e:1f:7b:f8:bd:62:d6:f8:66:f2:46:cc:03:0e:
                    1b:b6:8e:47:03:e7:b5:e7:38:d1:24:75:f1:93:02:
                    74:fa:9f:ab:6f:25:fc:aa:a0:20:5e:02:60:f8:a9:
                    3c:91:59:5b:09:c1:3d:4d:6b:00:71:97:bf:ab:98:
                    8e:02:f4:7e:31:fb:62:25:f6:50:0a:fd:0a:65:f2:
                    da:47:6d:10:c5:3b:67:c3:b0:18:e6:a2:ff:f3:8f:
                    86:ef:6e:3e:0e:d2:b5:0c:a0:ff:46:ac:f8:46:bc:
                    ce:c4:26:97:dd:02:d0:33:c4:a4:8a:d6:05:5d:81:
                    9b:fe:90:8f:03:99:51:44:8c:18:d2:b3:ad:36:fa:
                    d4:ce:53:8e:a6:93:54:83:d0:9c:9f:3a:4d:50:ef:
                    fa:3d:84:b9:fe:f9:16:86:ad:11:78:d4:9c:89:22:
                    51:e5:de:7c:d4:d1:39:73:3d:7c:ef:f8:e7:48:af:
                    7f:4a:02:6e:db:ad:8d:0a:68:40:d8:c9:1a:0f:9f:
                    6b:0d:1f:23:72:11:35:43:f6:44:25:9b:18:cf:f3:
                    ae:bc:0a:97:fd:10:be:cf:0a:61:26:85:dd:ad:ce:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C5:29:B3:85:AA:45:6B:E2:05:AA:E2:80:BC:AB:8E:B0:E8:56:1C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.78.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:0d:e6:e9:d2:80:c4:75:f4:81:27:87:92:21:90:34:54:ec:
         55:fb:cf:0a:00:d5:98:ba:08:dc:6f:09:a8:16:57:2e:35:1b:
         df:34:9e:89:25:c0:df:60:37:c7:d3:58:30:76:d8:8b:47:09:
         4c:28:da:a4:2b:37:6e:45:94:35:f7:94:c0:d6:a4:44:d1:43:
         05:93:c6:67:a1:e7:5d:a8:2f:55:ea:4c:f9:91:5e:ca:a3:55:
         2a:b2:0a:a0:1f:30:56:c9:07:52:a9:92:c2:94:26:f0:31:fa:
         a1:ef:80:5f:4f:8b:39:9c:1c:07:df:5f:42:2c:88:4a:6b:ef:
         a3:51:44:9e:4a:41:25:d8:7c:15:2d:aa:8b:dd:6c:1e:b5:77:
         27:54:b8:b2:77:51:cf:c8:27:6f:93:00:b0:63:97:3b:cd:21:
         67:87:b0:d9:c3:4b:fd:1d:a6:2a:7d:2d:da:49:8f:30:32:0d:
         4e:ca:1c:84:12:d2:76:97:c8:c3:cc:e1:ef:8e:47:ef:a6:f7:
         10:2d:8d:d9:c4:60:8c:6e:5c:4c:f1:c4:63:e8:d8:b8:82:01:
         bd:07:5a:23:48:f8:d1:92:6e:b5:10:e3:0f:1c:8a:5e:8d:01:
         8f:9c:ff:a4:3a:9c:18:c9:6b:86:bc:02:91:8c:34:22:6d:ec:
         86:f0:40:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net