Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3235332e302f32342d3234203d3e20323031333431.roa
File:                     38352e3139302e3235332e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          HmpAt/nS4NK+tBXuujNA1qbyqYd0SLrEnb+8P8oClGE=
Subject key identifier:   ED:1B:E5:68:04:6E:50:8A:6D:40:FF:11:7C:54:D2:54:2E:28:FD:24
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       09DB1E72A21DA2CD78A8512ED56E42B701224E29
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3235332e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:10 +0000
ROA not before:           Sat 22 Oct 2022 04:29:10 +0000
ROA not after:            Sat 21 Oct 2023 04:34:10 +0000
asID:                     201341
IP address blocks:        85.190.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:db:1e:72:a2:1d:a2:cd:78:a8:51:2e:d5:6e:42:b7:01:22:4e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:10 2022 GMT
            Not After : Oct 21 04:34:10 2023 GMT
        Subject: CN=ED1BE568046E508A6D40FF117C54D2542E28FD24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:9f:cf:ed:ac:e1:f5:ba:11:6d:c1:fa:2e:
                    6c:a0:dc:ba:ee:e3:77:ce:cf:b9:4f:09:d3:49:e8:
                    d7:00:6e:d4:57:37:b4:09:b3:7d:26:87:eb:76:a6:
                    14:09:97:50:97:55:ac:6d:82:1d:4f:cc:e3:d3:23:
                    a4:d9:72:ec:a6:8a:66:7b:1c:0c:9c:75:b8:45:e5:
                    ef:11:7f:51:6e:22:e2:e1:54:71:d2:65:2b:5e:64:
                    c2:91:66:c8:3f:75:fa:81:e9:bc:13:67:8d:7d:8d:
                    20:ba:5f:10:54:aa:ff:24:64:fd:8b:ee:26:c7:d9:
                    2c:50:23:ca:83:14:c7:d2:61:53:bc:09:94:7a:58:
                    ff:7c:e3:98:4a:58:be:04:24:f3:20:15:ed:37:fa:
                    77:ab:ff:b0:c8:cd:a6:99:3b:3a:69:5a:9b:3b:98:
                    a2:93:4d:41:68:91:38:e7:2a:c9:45:04:99:c3:06:
                    5a:f2:11:d3:c6:3b:fa:41:0c:a4:16:ae:15:84:17:
                    62:7f:92:41:6e:c5:4c:ed:d8:67:7a:aa:70:ce:b8:
                    04:8b:53:3e:c2:f5:ae:fa:cc:b6:89:d3:73:48:eb:
                    94:ea:34:0b:ab:5d:ce:86:4f:16:6c:54:4a:25:32:
                    d7:9e:da:6c:49:65:6c:b5:b0:b4:a2:4d:d4:5e:00:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1B:E5:68:04:6E:50:8A:6D:40:FF:11:7C:54:D2:54:2E:28:FD:24
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3235332e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.190.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:4f:f6:a8:d5:ab:98:5d:c6:19:ba:39:40:51:a3:84:b8:37:
         18:57:5d:28:41:79:fb:0f:2b:77:8c:60:4d:52:1f:bf:a6:ce:
         49:93:8c:79:75:d5:d4:63:be:e4:1c:27:56:9b:d5:d0:a0:e4:
         cb:b1:f0:19:8f:ab:8f:84:f5:67:34:8b:98:34:b4:ff:e2:8c:
         d5:cc:9f:76:6e:69:a7:e0:79:7f:f4:76:b3:ed:80:dc:cc:1b:
         43:74:4f:1d:a9:dd:7c:01:51:a3:bc:41:de:a6:15:06:cf:17:
         e0:11:9a:1d:bb:22:2d:de:61:b7:20:ae:b5:ef:cf:5d:d4:d5:
         7e:fb:03:da:f8:3d:74:55:ae:5f:3f:eb:d5:c4:44:67:c7:ba:
         e2:b9:07:30:74:4c:b9:86:91:9b:4f:f4:3f:6e:2c:71:28:88:
         fb:40:73:18:10:7f:b3:da:63:5a:2d:4a:3a:71:e1:d1:7a:bd:
         67:7f:a9:d6:c6:64:8a:8a:70:6f:e5:cc:6b:80:b8:8d:e9:a4:
         db:cd:dc:0a:01:54:a0:1c:16:7e:e0:9d:3d:de:0f:ad:c9:97:
         9e:9b:fb:f9:99:83:c9:9a:7a:44:95:c4:74:0d:a4:3a:c4:88:
         a1:e2:2d:50:0c:f9:b2:3e:c3:d3:ed:4a:f6:4d:a9:ba:5d:c9:
         f5:c0:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net