Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e352e3135362e302f32342d3234203d3e203437353833.roa
File:                     3139342e352e3135362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          /d7cK4+jCPs+Z3XsJHvF9sPjZryCQ7Uu1Yrq6ZhvNKo=
Subject key identifier:   0C:3F:3D:C3:35:7A:61:F4:FF:F6:71:FB:D0:3D:DC:3E:C5:95:06:88
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       4A1BB65956D14BFBD86F4919FF2DE2B22B67FD59
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e352e3135362e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:53 +0000
ROA not before:           Sat 22 Oct 2022 04:28:53 +0000
ROA not after:            Sat 21 Oct 2023 04:33:53 +0000
asID:                     47583
IP address blocks:        194.5.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1b:b6:59:56:d1:4b:fb:d8:6f:49:19:ff:2d:e2:b2:2b:67:fd:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:53 2022 GMT
            Not After : Oct 21 04:33:53 2023 GMT
        Subject: CN=0C3F3DC3357A61F4FFF671FBD03DDC3EC5950688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:66:e9:86:8b:d4:45:b3:b7:32:0c:0f:ae:ee:
                    75:d8:85:4b:3f:a0:a6:ee:34:81:d5:b3:5d:0d:0c:
                    f1:d0:fa:6a:c4:a5:4e:13:34:51:84:ec:fa:e6:d8:
                    54:bc:48:76:44:b6:ad:ea:c3:65:21:80:68:0e:64:
                    0e:59:f7:52:ab:1e:0b:7a:bd:bb:ed:43:8c:02:9c:
                    90:e4:3e:ae:74:53:e6:06:74:cb:7d:8f:5c:e7:17:
                    e4:0c:d8:64:51:dd:f6:92:36:d4:4c:7a:33:b1:af:
                    ad:7e:4e:85:6a:c1:ae:b6:94:5c:a6:63:b8:83:aa:
                    86:2e:85:4b:a9:25:34:dc:1b:e6:16:af:ae:86:b0:
                    27:10:ba:9c:bc:b9:26:57:5b:77:59:8d:52:c4:7d:
                    64:14:a6:7c:a4:94:87:f0:b5:6a:02:95:35:16:e4:
                    4d:19:8f:69:ef:ad:58:e2:0b:25:16:18:a4:f8:9c:
                    49:61:b4:41:87:80:fe:e6:be:09:75:4b:94:ef:97:
                    d7:ba:43:18:21:d8:c8:c9:77:b0:1b:59:b2:ee:71:
                    dc:e6:9c:bf:3d:20:14:11:fe:28:02:90:fe:8e:ca:
                    d6:da:d7:83:af:d7:ac:ac:33:73:97:e0:31:54:33:
                    f5:c6:57:31:05:ea:0c:da:ec:90:d2:4b:b5:63:a7:
                    3a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3F:3D:C3:35:7A:61:F4:FF:F6:71:FB:D0:3D:DC:3E:C5:95:06:88
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e352e3135362e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:89:cf:3f:6c:a4:6c:45:4b:f2:d0:7c:4a:9e:7b:c0:76:27:
         e7:55:d1:ce:0a:74:8f:28:e2:c7:f6:99:7d:cc:0b:68:88:57:
         8a:0f:1a:5e:26:4c:1e:d7:4e:be:d5:07:f6:fe:70:d4:0f:3e:
         0c:82:5a:62:14:fa:83:5f:cc:5f:2f:76:fd:d4:1e:5c:a3:5a:
         7b:b8:56:56:f0:36:65:76:30:ae:3c:f8:fd:f0:f4:3a:de:f8:
         9a:af:2b:53:5b:0a:f0:65:0b:85:78:c9:d6:2f:e3:d8:76:20:
         f8:66:c9:16:18:23:45:0e:e1:2a:d8:0a:db:7e:6e:e0:de:8c:
         11:5f:95:29:12:ca:b2:36:e0:ab:32:8e:c8:40:17:25:30:c5:
         38:c3:e7:98:97:c5:4e:47:5a:57:ad:5f:41:b4:ba:80:a7:cd:
         94:13:db:3d:cf:92:5d:f5:2f:28:fc:14:63:79:3c:d2:d1:f0:
         ca:fc:4d:eb:87:21:bc:00:25:2e:6d:2f:fa:51:bd:87:43:e5:
         a5:da:48:e6:c5:be:d5:72:52:7f:62:91:65:a4:3d:ee:0a:f0:
         33:1c:4b:f2:eb:7c:a9:10:dc:6b:f4:e5:11:1d:df:1a:61:30:
         2c:ae:4a:9e:1a:ae:49:7b:71:09:cd:1d:14:b8:03:66:43:08:
         43:88:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net