Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3234203d3e203631333137.roa
File:                     38352e3139302e3232392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          oy0NnizC+trccPBfAT8/FkyHJo1Ltd1rrbUWlawCXG8=
Subject key identifier:   33:CA:2F:AE:7A:D1:04:B5:C9:30:5B:F2:43:E2:E3:44:A4:5F:C9:E8
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7112E8FE8EFE669234962CEBB727BC6341C9BD41
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:17 +0000
ROA not before:           Sat 22 Oct 2022 04:29:17 +0000
ROA not after:            Sat 21 Oct 2023 04:34:17 +0000
asID:                     61317
IP address blocks:        85.190.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:12:e8:fe:8e:fe:66:92:34:96:2c:eb:b7:27:bc:63:41:c9:bd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:17 2022 GMT
            Not After : Oct 21 04:34:17 2023 GMT
        Subject: CN=33CA2FAE7AD104B5C9305BF243E2E344A45FC9E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:39:9a:f7:14:d2:89:2f:03:39:e2:70:62:
                    6f:57:7a:9d:e8:f8:24:d7:60:88:8b:c8:8f:ce:52:
                    04:6c:26:58:3a:f2:38:10:e6:e9:a3:7d:03:b1:e2:
                    0f:39:98:04:00:1b:4e:2c:78:c3:b4:cf:13:6f:3b:
                    b4:84:89:c2:98:81:41:23:bd:b0:bf:8d:d8:99:a9:
                    27:50:27:fc:85:35:02:b4:8f:f0:63:40:5e:4a:68:
                    92:ea:82:3d:27:7e:27:72:77:02:8a:ef:4d:41:6d:
                    82:f8:46:22:19:3b:90:a9:59:c9:fc:a8:33:91:a6:
                    6f:bf:2b:d2:dc:6b:f1:c3:a5:27:86:77:1d:66:6f:
                    11:3e:f9:0d:a3:52:6b:1e:10:09:1a:85:05:eb:fd:
                    0f:d0:f3:f6:45:93:a7:0e:20:4b:a9:f5:c3:07:2e:
                    1f:90:9c:a7:ff:fb:e9:72:97:ef:a1:23:c9:9f:cb:
                    43:fd:47:c3:61:6a:f4:cd:cb:4e:b2:22:fe:9f:1d:
                    37:34:dd:bc:56:fc:51:05:03:f6:49:4f:91:6a:92:
                    ec:f2:87:3e:0e:35:6c:98:d1:ea:a8:b8:c5:ac:b9:
                    81:d0:c0:fe:18:80:fe:fa:20:8e:05:0e:24:ed:74:
                    67:b8:38:5b:ac:14:d9:74:d7:63:bd:8e:59:10:e7:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CA:2F:AE:7A:D1:04:B5:C9:30:5B:F2:43:E2:E3:44:A4:5F:C9:E8
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.190.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:5e:01:80:ac:eb:1c:ad:5e:51:63:e2:d2:b0:e5:08:b6:ac:
         fd:9e:eb:76:0c:35:0d:1d:5a:9a:4f:37:9f:0b:7d:17:c3:c6:
         a4:86:95:51:ff:52:be:4c:81:1f:2f:28:db:98:e0:bd:b2:d3:
         cf:f0:8c:f5:29:49:e7:40:53:91:d1:eb:ed:7a:20:65:0f:06:
         9c:d6:72:2e:8e:07:29:97:eb:dd:f3:b0:79:2c:cd:a7:b8:e1:
         06:fb:ec:98:7c:35:cf:2c:44:0b:b3:bc:31:ca:f9:fb:86:31:
         e1:c9:84:06:2c:1f:85:a4:f6:69:ff:d0:9b:e4:9b:46:1d:d3:
         05:87:4f:c3:45:f9:0e:be:35:fd:0f:fd:12:ae:83:5e:44:f9:
         b1:cd:a1:ec:fd:02:2d:85:59:81:d3:65:13:d9:5d:8e:52:9a:
         15:30:27:75:8b:1a:c4:d0:e6:16:26:a5:1e:1e:c8:0f:e4:21:
         f8:2b:b9:0e:b5:87:64:2c:dc:de:71:02:ff:dd:c9:8a:bf:5e:
         04:32:42:c2:11:19:d7:26:72:c8:4d:e8:4b:3e:bb:4a:d5:dc:
         68:9c:c4:25:80:c9:2b:8f:cd:72:e7:4b:04:35:7e:77:fb:45:
         b9:ee:c8:3b:3b:9b:21:c7:f8:ef:bb:49:cf:4e:50:7c:dd:b7:
         7e:b6:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net