Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3332203d3e20313336373837.roa
File:                     38352e3139302e3232392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          GzJFwQG9lOvqXm7eIGv2Z8PlTF/YKSU/ZO7VX9SqARs=
Subject key identifier:   8C:F2:E3:C7:FC:43:E4:9E:E3:4A:49:39:7D:F6:1B:33:88:A4:46:1C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7535590EF94870D9E9E875FFCD1863D13F8064FF
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:37:49 +0000
ROA not before:           Wed 28 Dec 2022 09:32:49 +0000
ROA not after:            Wed 27 Dec 2023 09:37:49 +0000
asID:                     136787
IP address blocks:        85.190.229.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:35:59:0e:f9:48:70:d9:e9:e8:75:ff:cd:18:63:d1:3f:80:64:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 28 09:32:49 2022 GMT
            Not After : Dec 27 09:37:49 2023 GMT
        Subject: CN=8CF2E3C7FC43E49EE34A49397DF61B3388A4461C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:4f:2d:71:9f:a9:fd:72:15:b6:50:55:d9:
                    66:2f:eb:4f:67:6b:fc:3d:9c:b4:b6:b2:e1:1e:70:
                    de:82:22:87:e4:d3:ed:6e:d8:fe:a9:38:6d:29:a1:
                    13:26:31:d2:f4:da:f1:b7:c6:35:91:75:20:08:4d:
                    ed:1b:01:48:31:29:04:c6:6f:84:f6:a6:69:9a:fd:
                    c5:c5:55:59:8d:a2:94:78:4a:01:ab:c0:b6:bc:a7:
                    f5:14:4a:ad:c8:63:c1:1f:1a:8a:ee:ab:db:64:9f:
                    99:36:8e:90:5b:ac:d0:5f:25:22:09:94:8f:33:8b:
                    6c:46:fb:f7:b2:f3:53:f8:5a:2d:a5:32:d1:77:74:
                    f9:7f:93:0d:80:ce:ef:1b:02:3e:5c:22:5b:67:4c:
                    b7:51:77:6f:04:09:69:b6:04:07:f1:b6:51:60:10:
                    db:17:b1:32:44:ca:11:b7:de:9b:24:ae:8e:a8:8d:
                    96:0b:01:8d:d6:06:40:b6:8d:e0:dc:10:83:69:7e:
                    0c:0f:f3:a2:1a:a2:e1:c5:c3:c9:b4:9b:15:09:20:
                    7c:1f:ca:47:77:44:42:d4:68:8f:a2:a7:cb:5d:3d:
                    89:5b:15:d3:f4:08:6a:d5:6c:dc:b6:6f:fe:4b:72:
                    e4:98:f5:5b:25:c3:1a:cd:01:b3:e7:ca:7d:ec:c0:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F2:E3:C7:FC:43:E4:9E:E3:4A:49:39:7D:F6:1B:33:88:A4:46:1C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.190.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:29:66:d2:dc:2a:fe:3f:e1:fb:5f:76:1e:e5:75:68:84:87:
         39:06:78:b0:29:e9:98:dc:fb:35:84:50:ac:5b:7d:24:f5:4f:
         00:da:9e:7f:d5:b3:c6:29:2c:e1:78:36:85:ea:e6:af:81:ba:
         7f:5b:27:e3:8f:04:86:05:a7:c9:8d:77:00:f1:31:3c:91:15:
         cd:99:52:33:43:d1:38:58:fa:0b:6c:f3:76:ad:8a:9f:54:ed:
         18:03:1d:cb:3d:51:41:43:c1:b6:58:48:20:f8:e9:e8:1e:3b:
         84:7f:53:b4:33:e7:e7:ee:ba:72:72:48:52:93:6c:10:ca:9a:
         34:41:57:be:75:47:e2:29:32:fb:b0:b2:eb:c4:8c:e5:f6:8b:
         4e:64:b6:73:5b:f3:90:d2:14:0a:5f:c5:c4:f2:9a:2d:84:88:
         e1:4f:36:ea:33:d8:21:d8:e4:ef:fa:2f:c8:40:cb:4d:72:e5:
         0a:92:23:7c:d1:b6:45:39:ea:de:e5:15:44:c1:24:cc:2a:ef:
         b4:20:48:90:66:76:cc:4c:56:b3:4b:01:3b:de:ec:c3:74:a6:
         2a:fe:d2:80:c7:03:42:4f:d1:8a:e2:e4:b7:e0:3e:ab:1f:61:
         a2:0e:7f:3a:38:b5:9f:a9:16:12:8a:1f:54:12:08:4a:ea:4f:
         d9:5c:e4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net