Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232382e302f32342d3234203d3e2036353937.roa
File:                     38352e3139302e3232382e302f32342d3234203d3e2036353937.roa (raw, json)
Hash identifier:          mcE4IGvL3PXMBwnKnzhmxVjklYGjpRIeZDGOMm4R+50=
Subject key identifier:   73:0A:DF:9F:BC:0F:1F:F8:0E:EC:EE:2A:0D:48:99:85:89:81:BA:23
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5B615D7D6EA68C7592F26B7981ABBC4B2A89A973
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232382e302f32342d3234203d3e2036353937.roa
Signing time:             Tue 24 Jan 2023 09:41:37 +0000
ROA not before:           Tue 24 Jan 2023 09:36:37 +0000
ROA not after:            Tue 23 Jan 2024 09:41:37 +0000
asID:                     6597
IP address blocks:        85.190.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:61:5d:7d:6e:a6:8c:75:92:f2:6b:79:81:ab:bc:4b:2a:89:a9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 24 09:36:37 2023 GMT
            Not After : Jan 23 09:41:37 2024 GMT
        Subject: CN=730ADF9FBC0F1FF80EECEE2A0D4899858981BA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:bf:1c:7a:1c:a1:41:72:ff:a2:cc:07:aa:
                    7d:df:7f:a6:58:40:06:45:0e:dc:dc:d3:9b:d9:d5:
                    ac:0a:e2:13:f5:11:f1:b4:f3:b9:e2:73:20:51:72:
                    fa:62:85:90:51:01:95:4a:8c:c8:a4:cf:d7:2d:b2:
                    88:e2:7d:b7:b6:09:cc:bd:0d:a3:a5:f4:4b:58:25:
                    70:17:9a:dc:68:42:fb:28:e7:ed:da:66:16:4e:45:
                    43:06:ba:80:01:d4:29:48:42:16:e5:99:14:b6:77:
                    3b:60:b8:93:5e:d8:ad:47:37:6a:7a:5f:b3:3f:3a:
                    d8:f8:75:45:76:02:df:eb:1c:4a:90:bc:e8:c4:83:
                    4b:d6:c1:f3:21:cd:f5:77:de:77:36:c4:ac:87:31:
                    ec:df:02:30:13:fa:3a:8a:d1:9e:54:e3:81:39:d6:
                    79:35:dc:8a:d5:2e:03:07:87:af:cb:d8:f8:fd:4b:
                    55:49:37:25:8f:0b:d5:4c:cd:a4:30:85:ea:69:bc:
                    96:12:c3:fd:cc:10:03:41:2a:bf:cc:87:48:a4:29:
                    c4:88:d6:b0:fe:7e:76:ee:71:21:87:0f:8d:3a:10:
                    f2:ca:dc:77:cd:08:2d:12:74:79:2b:2a:57:f1:7c:
                    7d:f9:80:21:d8:d9:39:82:1e:84:a6:f8:d6:92:c2:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0A:DF:9F:BC:0F:1F:F8:0E:EC:EE:2A:0D:48:99:85:89:81:BA:23
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232382e302f32342d3234203d3e2036353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.190.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:eb:cb:a3:31:e1:82:8b:74:63:1f:1f:2a:ad:58:3f:7e:1a:
         b7:3b:4a:09:d9:17:53:3f:42:1c:19:eb:b4:58:ae:2e:26:a2:
         e5:9a:b3:75:ac:ab:59:f7:1a:b6:30:a5:e0:58:c7:c7:34:2d:
         cb:d5:c8:6e:ff:72:35:07:d4:ba:d8:37:ae:e3:96:f2:72:b1:
         11:22:c8:eb:1e:38:27:4a:d2:5c:7e:a2:f8:5f:a1:fb:a9:68:
         27:cb:16:b4:07:f4:c5:98:6d:bf:a2:5d:36:9d:24:c6:8a:48:
         18:5a:79:36:57:ac:79:29:6f:7b:fc:dd:bf:17:3a:7b:cd:71:
         9f:cf:35:d3:a2:e1:ee:a0:23:52:b0:f5:5c:8f:d6:76:7e:fa:
         d8:25:ac:e7:e3:b0:a2:f7:89:e0:c0:6f:61:8b:fb:32:7f:6b:
         7e:59:7e:f9:51:59:58:17:a7:d6:f5:78:1d:f3:05:30:cb:ad:
         95:89:c1:04:6b:0c:14:58:09:08:67:4d:ff:21:be:32:fe:66:
         3d:ec:5e:16:d2:c0:60:c2:61:34:6b:1b:17:da:79:d5:44:10:
         7b:05:93:22:ca:a0:ae:11:14:a4:a4:90:d1:14:79:15:63:a7:
         67:48:63:2c:a0:de:02:c3:b5:be:34:3a:6e:6d:00:c2:05:58:
         10:b7:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net