Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3133392e32382e3136302e302f32322d3234203d3e20333936333139.roa
File:                     3133392e32382e3136302e302f32322d3234203d3e20333936333139.roa (raw, json)
Hash identifier:          hXsyaZnQNNGZpz9vVUFSRg3vcwkXf493a+eot7CXx28=
Subject key identifier:   1F:85:18:CC:66:BD:8C:75:4E:D2:87:67:9B:39:61:3E:11:5C:CB:F8
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       11514D8FE04E4F305FA2794A814699566BE7A129
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3133392e32382e3136302e302f32322d3234203d3e20333936333139.roa
Signing time:             Sat 22 Oct 2022 04:33:57 +0000
ROA not before:           Sat 22 Oct 2022 04:28:57 +0000
ROA not after:            Sat 21 Oct 2023 04:33:57 +0000
asID:                     396319
IP address blocks:        139.28.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:51:4d:8f:e0:4e:4f:30:5f:a2:79:4a:81:46:99:56:6b:e7:a1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:57 2022 GMT
            Not After : Oct 21 04:33:57 2023 GMT
        Subject: CN=1F8518CC66BD8C754ED287679B39613E115CCBF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:07:91:3d:71:53:36:7c:7c:9f:fa:e7:98:f4:
                    3e:00:f6:53:17:5b:ab:fe:1a:7f:28:e5:ff:40:82:
                    e7:91:7f:aa:5c:df:6c:dc:e3:84:f4:d9:a1:77:81:
                    0a:ae:ac:e6:16:aa:f2:21:62:20:c2:31:40:d0:fe:
                    df:8a:53:2e:91:fc:79:55:c9:bf:6e:90:1d:f4:30:
                    83:3d:52:e5:72:d4:39:ee:92:46:c5:87:ec:d5:bc:
                    05:53:10:7d:86:e6:8f:d4:5b:ab:5e:38:b9:f8:c1:
                    16:a5:34:11:1a:4b:c9:12:bb:3c:4b:09:43:49:7e:
                    f0:90:15:21:b4:6b:f8:9c:a5:73:7a:ea:ad:4c:fb:
                    08:d2:eb:7f:26:0c:93:80:a3:8b:56:f6:26:c9:c3:
                    c2:be:79:12:77:f2:37:d5:f0:6d:5e:3d:99:26:11:
                    33:c4:42:6d:5c:c0:53:1a:4a:20:f3:f8:44:6a:7b:
                    5b:3a:dc:e9:28:4c:74:06:9d:a1:4a:b7:89:1f:3b:
                    fe:49:98:ba:30:3b:f7:ce:a4:d8:77:31:e7:54:67:
                    00:52:14:4b:25:05:2f:83:58:65:14:0d:0a:6d:52:
                    ec:8d:30:f8:76:d5:8c:5f:4c:93:26:20:63:d3:ca:
                    90:99:4b:dc:ab:b5:6d:a8:a1:f6:c1:28:c2:fe:e8:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:85:18:CC:66:BD:8C:75:4E:D2:87:67:9B:39:61:3E:11:5C:CB:F8
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3133392e32382e3136302e302f32322d3234203d3e20333936333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:6a:ea:c3:21:5a:c2:5d:d8:40:0d:1d:85:dc:7d:48:75:
         19:75:b0:57:f6:4f:82:63:c1:13:45:25:14:19:ee:52:db:25:
         2d:b7:82:49:1b:ba:55:d6:36:69:c3:f3:3e:b1:46:a9:0f:37:
         08:aa:ee:6c:d4:40:86:1a:4e:8a:bf:11:cf:9a:e7:47:b2:12:
         37:8e:bb:3b:0b:c7:22:91:cd:7c:a7:57:0d:4d:84:36:b2:42:
         ec:d9:8c:36:f6:f8:a1:93:a9:c8:e8:71:35:09:0f:77:21:64:
         b7:89:d4:6e:50:9c:e7:39:bd:f5:02:5c:e3:35:b6:35:d5:33:
         77:bb:72:c8:58:b5:b6:94:69:08:0d:b1:7f:90:08:8d:75:1c:
         18:98:58:64:7e:4c:fc:c3:91:42:45:c2:ec:55:32:bc:56:3a:
         df:67:ca:02:5c:50:da:bb:e1:3f:8e:a9:5c:8f:c0:91:51:00:
         c8:18:66:3c:38:81:d7:e8:97:73:d0:b9:4a:88:08:6f:1f:06:
         2a:d6:d4:57:4a:77:d2:2d:97:8e:53:ff:c7:1b:59:aa:27:93:
         fa:19:36:37:1e:47:9c:40:84:fa:8c:0a:e2:01:1e:6f:51:cd:
         5c:68:79:e6:f0:20:59:a6:b7:a2:bb:9e:6e:38:dc:c1:71:aa:
         7d:40:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net