Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e392e302f32342d3332203d3e20313336373837.roa
File:                     39342e3134302e392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          AQ+YMZ/2L/fn8owg4MhPHErgQXlnDvIsb9HlRmKdLSg=
Subject key identifier:   17:EB:5D:E6:FA:35:E1:7D:CD:0F:84:94:B7:0C:73:AB:C8:3F:17:A4
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0B77FB444D94C88C3702C0D8DEC7D36A74F78C64
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e392e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:24:34 +0000
ROA not before:           Wed 28 Dec 2022 09:19:34 +0000
ROA not after:            Wed 27 Dec 2023 09:24:34 +0000
asID:                     136787
IP address blocks:        94.140.9.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:77:fb:44:4d:94:c8:8c:37:02:c0:d8:de:c7:d3:6a:74:f7:8c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 28 09:19:34 2022 GMT
            Not After : Dec 27 09:24:34 2023 GMT
        Subject: CN=17EB5DE6FA35E17DCD0F8494B70C73ABC83F17A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7d:60:be:26:d3:26:39:96:92:14:e8:26:5c:
                    07:50:9a:3b:f8:99:64:59:5c:26:13:7e:73:ec:d7:
                    b6:0e:7d:e3:59:51:84:94:05:49:6d:93:db:88:e2:
                    f7:b7:c7:c0:18:7a:19:5b:be:0e:a0:8b:bb:ae:21:
                    ed:48:50:b9:b0:48:d3:db:2d:47:2c:b4:b8:3f:dd:
                    13:aa:58:b4:d7:97:7f:1f:56:dd:43:95:e8:9a:d2:
                    fb:fc:38:39:af:8a:60:c8:b1:dd:aa:f1:92:d1:d4:
                    3e:98:40:42:fd:35:c5:8f:bf:cc:0b:a4:9c:56:c0:
                    24:22:e4:87:5e:aa:07:bc:d2:4e:77:e3:ca:e3:02:
                    71:04:30:22:08:0a:6a:96:57:19:28:14:b2:00:fd:
                    96:1e:da:89:d9:2b:52:23:2a:c4:0b:a4:2b:87:9b:
                    32:b9:5e:93:a7:c3:1a:4a:e4:dd:73:c3:10:e9:81:
                    92:ce:69:9c:40:fa:23:cb:6f:0f:53:e0:77:24:ef:
                    2c:f6:26:01:b4:76:cc:e9:14:e8:d0:13:51:65:83:
                    0a:c0:cc:a4:4e:f1:4e:dd:86:9b:9d:d2:6f:b0:bb:
                    35:1b:c1:bd:ac:08:1a:93:76:f4:56:33:d6:35:31:
                    1f:c7:9b:2b:b3:25:0f:1a:1e:55:7e:e6:8a:3f:d0:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EB:5D:E6:FA:35:E1:7D:CD:0F:84:94:B7:0C:73:AB:C8:3F:17:A4
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e392e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.140.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:05:29:bf:7d:90:c3:58:23:a6:3d:e3:ad:4c:f4:21:e5:3f:
         d0:18:a0:37:a2:96:0f:00:b0:aa:71:7e:24:07:15:19:59:19:
         9c:3b:b8:0b:11:ca:21:7b:98:b6:b3:b1:12:d9:28:d9:91:43:
         26:8f:2f:a4:03:8d:c4:4e:61:df:63:42:1a:e5:f7:5c:e5:06:
         85:25:99:7d:e4:c9:09:e6:c3:05:70:fd:20:5a:8c:13:86:08:
         06:46:44:89:bc:c7:31:7e:97:a5:ad:b5:c6:7b:4a:aa:30:85:
         70:7d:81:3e:8e:f2:f0:b0:66:3a:1e:e1:b0:62:6c:f8:4d:f1:
         d9:b9:cb:25:d2:75:8b:2b:de:da:ed:89:2b:8b:96:58:11:d1:
         09:5b:b2:f4:8b:28:fd:50:c6:76:e9:ae:cb:eb:5b:27:e8:24:
         cc:5b:b6:76:18:a9:ea:a8:ef:98:01:48:3d:00:23:eb:96:94:
         69:aa:0b:58:a8:a6:ea:59:f1:7c:be:fd:a4:00:76:93:1c:79:
         72:7c:0a:be:6d:95:a9:de:16:3b:fe:3f:3d:60:c8:5d:90:5f:
         8b:b5:89:83:a1:e3:dc:6f:bc:56:af:7b:53:40:35:ac:1e:b6:
         75:3e:a6:9f:68:0c:8d:1c:6d:1d:b2:e1:9d:cf:25:b1:75:04:
         9a:01:da:8f
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUC3f7RE2UyIw3AsDY3sfTanT3jGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEyMjgwOTE5MzRaFw0yMzEyMjcwOTI0MzRaMDMxMTAvBgNV
BAMTKDE3RUI1REU2RkEzNUUxN0RDRDBGODQ5NEI3MEM3M0FCQzgzRjE3QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDefWC+JtMmOZaSFOgmXAdQmjv4
mWRZXCYTfnPs17YOfeNZUYSUBUltk9uI4ve3x8AYehlbvg6gi7uuIe1IULmwSNPb
LUcstLg/3ROqWLTXl38fVt1Dleia0vv8ODmvimDIsd2q8ZLR1D6YQEL9NcWPv8wL
pJxWwCQi5Ideqge80k5348rjAnEEMCIICmqWVxkoFLIA/ZYe2onZK1IjKsQLpCuH
mzK5XpOnwxpK5N1zwxDpgZLOaZxA+iPLbw9T4Hck7yz2JgG0dszpFOjQE1FlgwrA
zKRO8U7dhpud0m+wuzUbwb2sCBqTdvRWM9Y1MR/HmyuzJQ8aHlV+5oo/0D6LAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUF+td5vo14X3ND4SUtwxzq8g/F6QwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zOTM0MmUzMTM0MzAyZTM5MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2
MzczODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAXowJMA0GCSqGSIb3DQEBCwUAA4IBAQB/BSm/fZDD
WCOmPeOtTPQh5T/QGKA3opYPALCqcX4kBxUZWRmcO7gLEcohe5i2s7ES2SjZkUMm
jy+kA43ETmHfY0Ia5fdc5QaFJZl95MkJ5sMFcP0gWowThggGRkSJvMcxfpelrbXG
e0qqMIVwfYE+jvLwsGY6HuGwYmz4TfHZucsl0nWLK97a7Ykri5ZYEdEJW7L0iyj9
UMZ26a7L61sn6CTMW7Z2GKnqqO+YAUg9ACPrlpRpqgtYqKbqWfF8vv2kAHaTHHly
fAq+bZWp3hY7/j89YMhdkF+LtYmDoePcb7xWr3tTQDWsHrZ1PqafaAyNHG0dsuGd
zyWxdQSaAdqP
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net