Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38302e37352e32342e302f32312d3231203d3e20313938303930.roa
File:                     38302e37352e32342e302f32312d3231203d3e20313938303930.roa (raw, json)
Hash identifier:          ROWMa14q0wsWeyF+8vlYCWRDseuDhhOjF7n4+77stDE=
Subject key identifier:   4D:72:E4:68:45:C7:6A:48:33:20:D8:A8:33:B7:A4:FE:EF:5D:F7:79
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2931114D29D7A180D4F94C68C26EA766E3C84793
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38302e37352e32342e302f32312d3231203d3e20313938303930.roa
Signing time:             Sat 22 Oct 2022 04:34:19 +0000
ROA not before:           Sat 22 Oct 2022 04:29:19 +0000
ROA not after:            Sat 21 Oct 2023 04:34:19 +0000
asID:                     198090
IP address blocks:        80.75.24.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:31:11:4d:29:d7:a1:80:d4:f9:4c:68:c2:6e:a7:66:e3:c8:47:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:19 2022 GMT
            Not After : Oct 21 04:34:19 2023 GMT
        Subject: CN=4D72E46845C76A483320D8A833B7A4FEEF5DF779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:77:8f:35:87:49:61:02:d4:1a:df:5d:cc:
                    95:8b:78:02:e8:c6:49:95:f3:23:77:0a:eb:43:66:
                    fa:bf:2a:5d:eb:37:f2:cb:26:dd:63:47:be:10:07:
                    13:7e:af:e6:f2:6b:58:2a:59:60:47:4a:f9:ea:ba:
                    8d:e8:c5:b6:ce:02:f0:bf:97:9f:0f:99:f0:6b:e0:
                    23:1a:fb:94:99:69:87:ea:be:b8:6d:4b:4e:61:98:
                    a4:7d:c0:4b:97:52:8f:eb:4c:66:4a:a4:8c:cd:b4:
                    cd:89:91:c6:16:a5:56:c2:0a:03:e9:49:95:da:b0:
                    09:87:4a:af:96:41:d6:f5:77:ba:93:c8:28:fd:3c:
                    f2:93:e9:7c:ab:d0:bb:9c:69:95:33:f2:1b:ad:dc:
                    5b:48:b7:5f:a3:6a:27:2d:e7:df:a5:b8:44:ac:30:
                    41:9c:ab:a7:23:73:97:85:f2:88:df:8d:d9:4d:74:
                    33:26:b4:9a:9a:bd:b8:7e:44:90:9c:21:95:2d:00:
                    d1:b2:74:e0:e4:84:7c:64:39:c5:d0:09:c8:74:24:
                    27:c6:e8:95:a8:6a:0c:c7:4f:16:8b:67:26:5e:24:
                    5f:d6:11:35:ae:2e:c8:91:cb:35:ae:75:53:92:17:
                    62:f2:22:ab:ef:e9:bf:27:40:bf:eb:72:8d:b0:fd:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:72:E4:68:45:C7:6A:48:33:20:D8:A8:33:B7:A4:FE:EF:5D:F7:79
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38302e37352e32342e302f32312d3231203d3e20313938303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:51:e2:31:ba:1a:1c:5c:67:ac:cb:d2:96:39:bd:16:1f:77:
         e6:1b:fe:f8:9e:fa:5a:99:32:b2:06:cc:51:0e:55:a5:d6:4f:
         ce:3d:00:07:9c:72:61:9f:bc:ed:06:59:c7:93:ad:1b:91:8c:
         d3:1d:c4:10:20:fe:3d:e8:a9:b1:aa:75:47:31:96:36:f2:7a:
         f9:d5:58:f2:82:ff:c7:ee:67:75:90:d8:76:76:89:1e:6b:a4:
         6c:2c:5a:98:8c:55:63:33:76:37:24:2f:92:52:a6:ff:16:31:
         87:58:8c:df:69:d9:8b:b1:22:40:bf:61:7d:29:29:f3:8a:db:
         8f:cf:77:17:8c:96:36:46:ef:b1:ee:ed:4c:c7:9d:5b:a7:c3:
         2b:24:03:97:0d:35:79:a8:74:14:cc:f4:58:88:52:ec:94:ad:
         62:4a:77:54:f9:74:5e:f8:62:53:7b:4d:92:0e:d2:36:3b:c4:
         ad:d4:37:4e:98:3b:82:49:ba:b9:15:88:42:0d:f1:2a:d2:c5:
         fa:25:5b:53:8a:d5:be:60:a5:3a:65:81:9b:61:9e:e0:f4:5b:
         6a:6d:fc:0a:2f:a0:af:6c:50:2a:3f:c5:c0:5b:71:81:a4:c9:
         95:29:f7:20:fb:82:1a:2c:18:c2:be:e8:de:35:9f:da:1f:ba:
         ca:9a:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net