Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e2033333536.roa
File:                     3139342e3135362e3133362e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          YJU4hJTArkVEKhzUIoqTvd+3tDk2D4p7KNp1AyJdpjc=
Subject key identifier:   A9:02:5C:E8:24:87:F1:5A:B4:00:CB:8E:C5:6B:83:15:79:92:C0:C7
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       51105F1E5F5A04D3ED45AEFEAF0BDD786A6B5007
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 28 Jun 2022 04:40:55 +0000
ROA not before:           Tue 28 Jun 2022 04:35:55 +0000
ROA not after:            Tue 27 Jun 2023 04:40:55 +0000
asID:                     3356
IP address blocks:        194.156.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:10:5f:1e:5f:5a:04:d3:ed:45:ae:fe:af:0b:dd:78:6a:6b:50:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Jun 28 04:35:55 2022 GMT
            Not After : Jun 27 04:40:55 2023 GMT
        Subject: CN=A9025CE82487F15AB400CB8EC56B83157992C0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:63:32:70:a7:a6:5a:0a:8e:ac:a7:20:99:f3:
                    07:4f:1e:bf:36:62:ab:19:66:53:12:d6:ac:d8:d3:
                    75:6e:e2:aa:78:be:55:c9:9d:4c:71:98:6f:2d:55:
                    28:0d:d9:49:8e:90:43:53:00:e8:5f:69:ff:e1:48:
                    06:b3:cd:75:8e:2f:15:b5:ad:d8:89:5a:cb:a3:42:
                    b8:ec:0f:78:38:a4:0d:3d:0c:b0:28:e7:56:19:6a:
                    05:fa:91:01:d3:bc:5a:17:ff:cb:6a:f6:2d:50:b0:
                    9e:11:c7:36:c3:1b:a7:22:ea:91:96:af:db:90:4e:
                    53:b3:a0:d8:8b:07:ee:99:eb:f9:b6:82:03:58:da:
                    c4:9e:95:3c:3e:fe:54:47:5d:3c:44:79:05:d2:2f:
                    f1:66:58:b5:0c:2a:a3:93:f4:c3:0e:64:4c:6d:0e:
                    b2:39:a2:0a:28:17:6e:09:9b:5e:f6:03:e9:9d:70:
                    ec:df:1c:06:e2:8c:a6:04:25:4d:74:d7:b6:b8:50:
                    86:8d:fc:b8:20:2d:c1:1d:e5:da:e2:2d:8b:b9:90:
                    48:29:a8:e5:f0:f5:04:ea:ed:f4:b9:32:16:03:42:
                    f0:e6:e0:7c:83:7c:44:8a:d8:70:08:96:21:b1:d5:
                    f3:2d:fc:75:dc:c7:c1:03:95:31:95:2a:80:26:2f:
                    40:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:02:5C:E8:24:87:F1:5A:B4:00:CB:8E:C5:6B:83:15:79:92:C0:C7
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9f:8e:da:66:73:88:47:4e:72:cf:3d:05:4a:8e:fe:74:89:
         f1:6a:7a:69:fa:43:d0:8c:66:6d:ff:16:18:52:68:20:37:40:
         b6:b7:e5:b4:88:83:85:38:98:52:27:84:16:fb:78:00:85:03:
         42:08:f2:0f:da:8e:0a:1a:79:90:3a:92:de:10:79:99:92:f7:
         52:a3:7a:5e:e9:e1:78:8f:05:d4:8d:87:77:f2:7b:40:ce:7b:
         e4:87:ab:6c:1e:db:2b:02:16:8d:73:9f:e5:99:6d:25:6f:fb:
         dd:79:8d:be:95:21:2d:ba:c0:d5:c3:30:73:d9:f6:a8:d9:7f:
         e6:b6:10:0c:09:f6:e7:83:fd:39:6a:66:5d:d6:fc:fc:04:cc:
         a1:10:9a:8b:3e:86:4f:62:bd:bd:5c:ec:4c:f5:ce:8d:54:3c:
         58:f0:14:56:7c:e5:46:fb:9f:6d:85:d2:42:6a:52:48:3f:d8:
         09:fb:9c:8a:a2:58:05:e5:4f:d8:cf:5b:fe:ce:7c:fa:1e:18:
         cb:16:f8:31:44:ed:a7:ea:23:c9:89:5e:88:d2:c1:33:25:3e:
         ee:80:2f:47:fc:42:83:fa:23:80:1d:a9:58:ea:48:db:83:40:
         88:73:66:60:a3:6a:7f:ce:78:ca:4d:04:2d:3a:c1:f8:00:61:
         b5:ac:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net