Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e352e3135372e302f32342d3234203d3e203437353833.roa
File:                     3139342e352e3135372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          yf13lHNgtUdSEJgrq3UQqOjJHLPDdYdM91I81CX2k80=
Subject key identifier:   15:15:54:1E:57:E0:DA:A4:DD:0D:8D:4F:F1:20:E1:0F:D9:17:43:AA
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       2765331AA195BAB5559432FDD607134708EF53
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e352e3135372e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:56 +0000
ROA not before:           Sat 22 Oct 2022 04:28:56 +0000
ROA not after:            Sat 21 Oct 2023 04:33:56 +0000
asID:                     47583
IP address blocks:        194.5.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:65:33:1a:a1:95:ba:b5:55:94:32:fd:d6:07:13:47:08:ef:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:56 2022 GMT
            Not After : Oct 21 04:33:56 2023 GMT
        Subject: CN=1515541E57E0DAA4DD0D8D4FF120E10FD91743AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:3d:16:54:21:f2:c8:51:da:dd:5f:e0:76:
                    b3:92:50:35:06:4f:7b:2e:c1:f6:6f:38:80:01:01:
                    fd:50:c1:19:20:e0:2f:20:a2:6a:8a:b8:fe:93:9d:
                    65:1c:8d:46:04:f7:28:53:0d:4e:16:1b:f9:8f:ec:
                    9c:26:29:91:11:1d:c0:66:0f:e0:93:62:5a:ff:60:
                    2e:dc:38:0a:1b:56:c0:54:90:59:4a:b7:44:d4:3e:
                    1e:28:0d:2b:39:0d:00:8e:22:4f:a8:11:cf:94:cc:
                    7e:7f:f1:8d:c3:17:26:73:23:c6:a2:76:26:2d:3f:
                    fc:82:cc:9b:2a:3f:ac:c9:b8:2a:ed:e4:6e:00:24:
                    87:2d:50:c9:df:f6:6a:6c:f9:89:33:fd:8d:83:4a:
                    88:51:35:0d:cd:ea:60:77:48:1e:6c:6a:2c:03:92:
                    77:ee:33:0b:48:a6:85:a9:03:26:86:7f:8a:1f:7f:
                    15:69:4f:a1:90:c4:96:3e:30:6a:3c:cf:f6:c3:eb:
                    15:42:46:26:dd:0a:a8:a9:30:5b:ff:4b:c0:4e:b8:
                    9a:8a:3f:27:64:50:4d:4e:26:c0:c7:f2:67:20:d8:
                    37:56:ba:9b:5d:90:bd:3c:96:32:ab:fe:2c:2f:be:
                    1b:e0:31:6e:75:30:90:82:dc:0d:63:34:bb:51:3d:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:15:54:1E:57:E0:DA:A4:DD:0D:8D:4F:F1:20:E1:0F:D9:17:43:AA
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e352e3135372e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ce:96:41:de:2d:6b:c3:88:7b:57:52:8c:ad:06:47:4b:a3:
         cd:e5:41:c0:d6:2e:f4:30:09:25:d5:31:b6:bd:4d:81:9f:36:
         3a:be:19:43:df:af:a7:32:bf:3b:b6:83:c3:35:87:55:21:d8:
         c3:ee:ce:2d:bd:61:f0:53:24:0b:ee:86:f5:3f:f3:84:a7:a1:
         90:fe:b7:f4:87:17:72:64:0c:52:fb:2e:b8:9a:66:78:ae:7d:
         b8:de:65:43:4c:1e:fd:2e:2d:ba:22:ec:30:e1:6f:93:81:58:
         4b:07:8c:19:88:78:b3:11:09:fb:85:90:dd:1f:58:03:39:c4:
         0d:b9:db:29:ac:06:b1:e0:8a:5a:53:40:57:2a:7d:13:44:ee:
         73:e4:f1:30:57:c8:09:a6:b5:64:5b:36:c7:c5:f0:07:c5:b4:
         1d:c5:32:65:73:a6:a2:b1:49:76:e4:09:6c:6d:a1:43:6d:fb:
         ad:39:51:2c:d0:82:88:2e:74:7c:36:50:93:e9:09:18:5f:04:
         8d:c0:66:ae:1f:7b:2a:78:60:2e:7d:e6:92:da:61:eb:f7:94:
         bd:3c:08:13:88:39:e4:7b:76:f0:12:12:f3:ad:76:89:b6:5b:
         8e:81:6e:0e:b0:2f:1e:4d:ca:c5:f8:fd:0b:56:00:41:d1:70:
         0a:81:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net