Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3234203d3e20323133303335.roa
File:                     38352e3139302e3232392e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          IuKc16PkKkJ7t8hMJttgJR+v9RpORgWrW5DHK+UAuD0=
Subject key identifier:   2C:DD:DA:FC:81:7D:3E:2D:3A:01:E0:BB:CB:90:4D:D6:92:E0:C3:47
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3091753E70874B0E9CA00B58D4ED8EB24454E030
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3234203d3e20323133303335.roa
Signing time:             Sat 22 Oct 2022 04:34:12 +0000
ROA not before:           Sat 22 Oct 2022 04:29:12 +0000
ROA not after:            Sat 21 Oct 2023 04:34:12 +0000
asID:                     213035
IP address blocks:        85.190.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:91:75:3e:70:87:4b:0e:9c:a0:0b:58:d4:ed:8e:b2:44:54:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:12 2022 GMT
            Not After : Oct 21 04:34:12 2023 GMT
        Subject: CN=2CDDDAFC817D3E2D3A01E0BBCB904DD692E0C347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:97:b2:86:30:9c:dd:ff:b7:1b:ca:f9:b8:
                    a5:a7:99:b9:50:81:8f:29:d2:bb:63:ab:44:3d:3c:
                    1a:b4:99:70:9c:6c:b2:89:16:c9:de:1b:33:04:9c:
                    ba:36:21:6b:5a:ab:73:00:97:de:45:58:ec:4f:a5:
                    fa:5b:8d:a9:c6:6c:66:3e:87:90:12:eb:2e:7d:b6:
                    0f:f1:06:55:a5:27:64:b7:bb:f0:b9:0b:b9:1a:98:
                    a9:ca:67:b7:91:4a:25:ff:2e:76:d5:f1:77:32:f2:
                    f7:e5:4e:08:a0:1c:3b:a1:9b:39:de:3f:aa:e7:9d:
                    64:9a:65:70:b3:a1:68:56:39:89:ce:aa:5e:e9:00:
                    20:31:0b:cd:24:1f:af:31:44:83:67:4a:e1:7a:5b:
                    c6:c5:d1:d3:75:79:ac:3b:6f:4b:a8:bc:79:d9:b6:
                    e6:f3:4e:95:fc:e2:c8:ab:ea:c3:b2:6f:cb:d5:c7:
                    cd:e8:9c:55:b2:dd:eb:f9:2f:e2:20:9f:53:ed:9c:
                    46:97:be:d2:1c:00:4c:79:e2:49:6f:65:92:fb:a5:
                    b1:c3:18:22:f8:75:df:4c:9f:6b:6f:e6:31:a7:c6:
                    66:4f:f3:ad:9d:4e:9d:55:42:16:0c:80:75:2d:83:
                    f8:f8:44:61:75:dc:33:c5:0d:c1:97:35:70:50:d8:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DD:DA:FC:81:7D:3E:2D:3A:01:E0:BB:CB:90:4D:D6:92:E0:C3:47
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.190.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:40:10:42:cc:cd:aa:e9:8b:cc:47:f0:0b:05:82:1e:94:d8:
         a0:fb:e0:f3:3f:6f:85:a2:fd:99:85:c5:ab:66:ad:9e:d4:ac:
         cd:21:3e:49:d3:45:24:52:2b:55:ea:25:14:88:36:3b:6c:58:
         8a:28:77:d9:bc:4b:29:52:44:1a:75:36:c4:57:56:1f:16:92:
         da:6c:57:05:e4:07:71:01:a1:f2:10:3a:40:e1:8a:b0:c8:f4:
         e0:3a:77:5b:04:95:68:a1:8b:3a:d5:3d:9e:ff:d5:7f:ea:97:
         f1:b6:87:28:2c:54:cc:61:f9:6c:38:9c:47:d9:71:95:9c:68:
         ed:a3:22:c3:3d:83:43:79:de:04:d8:4a:d7:3e:21:dd:f7:f5:
         10:b7:98:2c:57:4e:47:2c:82:c2:07:86:31:2c:51:83:79:79:
         8f:7c:a0:77:67:f7:84:fb:d1:b4:5e:43:f8:ef:31:a6:70:97:
         0e:88:27:4e:b7:20:c3:e6:af:6a:67:8d:21:b8:e9:a3:1a:c3:
         39:82:16:6a:37:72:d1:ee:34:07:cc:1f:e8:52:c4:01:b3:c0:
         da:a0:43:12:fb:46:66:19:03:e4:75:1b:d4:0b:a8:65:61:54:
         54:0e:dd:4f:83:d8:f1:d9:c4:97:64:7d:70:c7:c1:af:7a:89:
         b6:22:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net