Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa
File:                     3139342e33312e3135302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          9K9d04+BNHu+snNULwj9Ij0qHTcraBKiFWethf1mmLw=
Subject key identifier:   2E:81:AA:7D:64:81:D0:6E:8C:97:7B:95:FF:B8:AB:37:69:F5:33:06
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       7A3791686BA0A16298E257674EE84364BF9DFB53
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:57 +0000
ROA not before:           Sat 22 Oct 2022 04:28:57 +0000
ROA not after:            Sat 21 Oct 2023 04:33:57 +0000
asID:                     47583
IP address blocks:        194.31.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:37:91:68:6b:a0:a1:62:98:e2:57:67:4e:e8:43:64:bf:9d:fb:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:57 2022 GMT
            Not After : Oct 21 04:33:57 2023 GMT
        Subject: CN=2E81AA7D6481D06E8C977B95FFB8AB3769F53306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:a4:4d:82:0e:dc:e0:36:f9:60:b7:92:b4:
                    13:6d:d3:1f:94:99:cb:c5:87:8f:fd:e1:f4:a2:a0:
                    17:ab:36:af:9b:e5:5e:d4:df:49:1c:50:69:5d:05:
                    7e:ef:b4:9f:ff:af:df:9b:20:fc:96:a0:3a:e7:f2:
                    5d:33:ce:88:54:cf:8b:3d:45:6c:02:34:bf:55:3b:
                    3c:5b:3f:36:13:2d:77:cf:5e:8a:50:df:8e:0c:51:
                    11:e7:5e:ae:61:9b:c7:f5:14:65:bf:f2:0e:cd:b0:
                    a9:52:9e:12:c3:cc:4b:10:af:5f:e0:09:0e:85:2b:
                    a5:56:fa:1b:1c:6e:cc:b3:00:e9:04:fc:59:84:25:
                    1e:92:aa:b8:93:34:cd:21:9c:82:46:be:f6:6a:59:
                    75:42:e0:fb:ce:77:bf:f5:c8:64:5e:57:f4:02:4d:
                    7c:5e:40:3c:5e:79:0d:e0:6b:e3:04:89:8f:ba:f0:
                    f0:5f:f6:0a:6a:c2:76:2f:24:df:0a:2d:94:e7:48:
                    22:80:b4:1e:a9:6b:c0:a1:d5:cf:ad:e3:23:5c:50:
                    72:3d:30:af:9e:8c:e2:df:26:83:56:55:8c:09:09:
                    e7:88:ce:8d:15:ba:44:5d:a6:8d:6a:69:d5:28:56:
                    8c:bd:19:98:3e:4c:bf:7d:5c:51:52:65:ee:66:9f:
                    73:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:81:AA:7D:64:81:D0:6E:8C:97:7B:95:FF:B8:AB:37:69:F5:33:06
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:d0:f2:f3:34:97:83:d2:eb:1d:fb:81:ec:1f:9c:85:f6:
         a8:b6:da:e2:79:81:fd:df:08:bc:89:81:e9:cd:68:d2:c5:7c:
         47:1d:49:1f:17:7e:ec:7a:a5:81:9c:8b:e3:0b:67:f3:63:5c:
         30:0f:08:95:41:27:af:fb:5d:b9:9e:14:00:3e:bf:24:7d:12:
         22:5e:66:aa:b6:d3:78:1a:e0:6d:3e:05:c6:44:b1:73:6e:ee:
         66:b5:ec:8a:fa:85:07:7e:b1:36:79:50:0f:cf:77:69:ae:56:
         94:bc:0c:26:f1:3d:70:18:3d:97:de:fe:a7:17:30:ee:44:3d:
         3c:14:59:e9:f9:e0:18:35:80:7f:45:90:cc:f2:b6:b0:e8:d5:
         00:10:bb:98:e0:ea:e2:cf:ce:80:cf:ae:0c:3d:be:b4:dc:79:
         38:ab:b3:84:5c:ad:a8:4c:d4:d2:b3:e4:c8:1e:ac:3c:ff:69:
         f5:c2:1c:f5:ff:d4:50:95:57:3e:ae:0d:f3:d5:68:8d:80:34:
         ef:86:9a:e6:43:61:fb:97:9d:53:cd:75:d3:54:e9:0c:63:47:
         b0:e6:ef:dc:e6:b0:17:2a:42:38:b1:5f:ec:78:8a:85:a3:b5:
         30:1f:ff:7b:91:99:f9:4b:f3:cc:fd:6f:b6:b3:82:a8:cb:cb:
         6a:1a:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net