Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa
File:                     39342e3134302e31302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          dtmqGS1tfFu9HPXq80YbwnoZsQE3jOVdsHN3JgYB19E=
Subject key identifier:   C2:C9:9D:37:72:64:5B:7E:8B:31:F0:09:FE:CC:5D:28:C0:04:BB:7B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0899E676FB18403412A4BD171D20938DEE651540
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:25:43 +0000
ROA not before:           Wed 28 Dec 2022 09:20:43 +0000
ROA not after:            Wed 27 Dec 2023 09:25:43 +0000
asID:                     136787
IP address blocks:        94.140.10.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:99:e6:76:fb:18:40:34:12:a4:bd:17:1d:20:93:8d:ee:65:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 28 09:20:43 2022 GMT
            Not After : Dec 27 09:25:43 2023 GMT
        Subject: CN=C2C99D3772645B7E8B31F009FECC5D28C004BB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:c9:d9:a7:d3:a9:95:86:71:dc:cf:4f:fd:
                    35:f1:e4:a5:84:f3:7f:e8:b5:92:5a:e9:6f:f1:d3:
                    27:3b:06:f8:08:69:46:8f:00:f0:04:18:37:a0:ca:
                    90:01:7f:8a:8a:ea:2f:04:c0:23:26:96:df:ab:98:
                    13:28:c0:70:3e:0f:7b:ca:72:e6:cb:80:62:5d:33:
                    13:13:86:ec:dc:1a:b3:04:ab:89:16:2d:a4:42:ed:
                    00:8c:0a:42:c2:fd:73:29:77:89:17:24:44:c3:1d:
                    3b:60:fd:98:ac:30:39:a2:13:77:02:0c:d4:fa:e7:
                    8c:18:37:98:ba:ee:0b:64:8e:75:40:4b:58:2f:26:
                    37:66:17:db:13:ef:83:8a:66:36:19:a4:11:02:0f:
                    2e:17:f9:01:b7:70:02:63:5c:f9:82:a0:e3:5d:ac:
                    f3:f5:08:40:79:55:e3:a4:f8:b3:32:d5:a2:d1:c9:
                    cf:45:73:62:6c:30:e5:9f:8f:de:71:f7:31:db:45:
                    5f:f5:73:42:9b:5e:1a:24:a4:c1:fc:31:b4:ca:b1:
                    d8:5c:f2:e7:f0:3b:c0:82:e1:4f:2b:b1:a7:79:bd:
                    01:06:75:18:37:af:dd:89:90:09:bf:82:44:cc:ac:
                    a3:03:f9:1c:1a:23:ca:32:0d:05:b5:7a:3e:46:7b:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C9:9D:37:72:64:5B:7E:8B:31:F0:09:FE:CC:5D:28:C0:04:BB:7B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.140.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:2f:f4:6c:b7:13:1a:15:7d:7c:f7:46:5e:2e:af:66:92:d5:
         30:f5:2c:32:d7:c3:c6:83:09:6a:c8:5e:9c:c0:15:33:5b:59:
         54:b1:95:f6:73:85:69:16:1b:e9:f5:3a:69:e3:cd:5d:f9:5b:
         d2:ad:30:96:9c:cd:ae:9b:41:a1:95:05:1b:97:72:19:a9:6a:
         8b:fb:01:47:86:36:b0:49:0d:70:d5:cf:40:c3:7a:8f:06:ab:
         1a:43:5d:d4:40:6d:a2:ba:50:56:18:10:53:7b:c7:62:41:81:
         fb:fe:7d:b4:0e:e2:3a:1e:b3:4d:86:23:ea:73:48:ca:e3:87:
         72:f6:ce:8b:f0:6c:ed:9b:30:2c:16:a6:46:95:94:e6:87:07:
         1b:10:3d:1d:34:f0:8b:41:f5:95:86:b9:fb:ad:50:2e:bf:0d:
         c5:7e:82:ee:5d:33:9f:29:7f:14:40:5b:40:e4:72:eb:82:c0:
         ca:a1:73:2b:d6:42:0b:32:0d:09:14:eb:55:46:07:c4:83:a2:
         eb:63:04:77:6f:1f:23:df:39:00:5c:79:1e:f2:6e:0d:a8:5e:
         69:a6:6a:ad:69:71:d8:83:9b:26:ae:31:85:2a:24:21:b5:64:
         bc:e7:f8:91:55:70:bc:fa:8e:88:01:63:ff:2e:66:85:4d:c3:
         b9:72:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net