Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134392e302f32342d3234203d3e203339353236.roa
File:                     3139342e33312e3134392e302f32342d3234203d3e203339353236.roa (raw, json)
Hash identifier:          3nlI2Cql2/7S0lkxVkBqB788AMQ+TKDBIEbIS4MnK0o=
Subject key identifier:   06:09:EF:F6:8C:64:56:1A:97:9C:FC:86:B3:B6:C9:36:F6:1C:23:97
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       67269C4AF9227A0CDDDAA1EE5FB07C813F3647BD
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134392e302f32342d3234203d3e203339353236.roa
Signing time:             Sat 22 Oct 2022 04:33:59 +0000
ROA not before:           Sat 22 Oct 2022 04:28:59 +0000
ROA not after:            Sat 21 Oct 2023 04:33:59 +0000
asID:                     39526
IP address blocks:        194.31.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:26:9c:4a:f9:22:7a:0c:dd:da:a1:ee:5f:b0:7c:81:3f:36:47:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:59 2022 GMT
            Not After : Oct 21 04:33:59 2023 GMT
        Subject: CN=0609EFF68C64561A979CFC86B3B6C936F61C2397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:d6:81:f5:e1:2a:56:85:f7:c4:86:68:a1:
                    7d:ba:c2:9d:0c:d7:e3:a0:9e:34:51:5b:27:aa:1d:
                    a4:9d:8a:40:ad:98:d8:10:07:bf:b6:c8:ea:81:fe:
                    f4:68:46:5f:a1:0f:ac:66:39:f9:40:9c:a6:cb:12:
                    3c:1e:da:cb:87:b5:3a:6c:74:d9:88:52:fe:14:75:
                    a4:08:5b:a7:77:4d:d2:33:3f:75:5e:43:09:75:5c:
                    65:64:52:aa:62:c0:69:74:c3:74:13:90:26:ec:28:
                    a6:b2:9f:16:50:2a:32:53:44:a4:50:bc:87:fa:bf:
                    d2:e6:9f:26:19:e6:75:d7:1c:11:54:a4:aa:e0:4b:
                    c0:75:9a:09:11:d8:2e:ac:dc:fa:9b:f8:81:25:80:
                    74:93:fa:62:57:8d:85:fd:43:94:1f:7e:07:e7:f2:
                    36:ad:0d:60:7c:06:02:85:27:0f:18:7f:e9:9c:25:
                    9b:a7:fa:c2:c3:5c:35:7b:9e:b2:99:25:c9:c9:f9:
                    71:48:c1:c3:d5:6f:c0:1e:7d:f5:14:6a:1c:68:db:
                    e9:f3:74:ec:5c:85:5c:7e:f1:10:dd:a5:07:0c:9c:
                    7b:6f:96:2e:21:d0:2a:a7:f3:5e:50:0f:03:0a:cd:
                    1b:cf:46:2b:f6:da:cc:74:f7:13:f7:06:2a:ed:0c:
                    1f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:09:EF:F6:8C:64:56:1A:97:9C:FC:86:B3:B6:C9:36:F6:1C:23:97
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134392e302f32342d3234203d3e203339353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:67:03:b9:32:2f:3d:32:0b:7d:ab:a6:d8:72:e3:fe:ed:34:
         af:8b:ec:6c:88:03:81:d2:9b:a4:bf:9c:1c:5c:69:1e:ce:56:
         51:aa:cc:c0:8a:78:94:5e:ca:24:6e:e9:d4:10:9b:28:97:26:
         0a:90:93:82:6b:f1:cd:f7:5f:0a:2e:1c:94:e1:c3:26:03:56:
         58:95:0d:f6:20:9f:cb:72:c3:e2:68:3a:7e:ae:aa:b7:8e:86:
         f8:b0:f7:06:0e:c2:49:e5:dc:d9:e0:c5:96:ab:fd:fa:27:fb:
         ce:f7:20:f0:3b:3f:93:b8:58:2c:92:e4:9f:bf:c0:88:1a:02:
         5c:89:80:77:82:e4:c9:15:6d:12:d8:2d:e9:8d:b7:79:e1:a7:
         d4:09:dc:cb:09:0b:88:8e:7f:1b:a3:14:c3:65:c0:1b:a5:7d:
         e4:9a:6e:10:dc:bf:68:ec:79:05:da:51:31:49:1e:d4:43:be:
         95:d6:5c:70:f2:a1:2c:6f:10:99:5f:27:9a:e7:5c:3a:c7:37:
         97:be:7b:80:be:a4:d8:8a:f0:35:47:f1:5a:ee:3b:e4:d3:30:
         d5:6c:e3:0b:b9:5f:dd:91:56:59:77:b0:92:7e:30:4f:4e:fe:
         8a:18:30:d1:a6:0f:b1:65:30:67:d0:9c:17:5e:ba:ba:be:98:
         a4:d3:13:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net