Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e352e3135392e302f32342d3234203d3e203437353833.roa
File:                     3139342e352e3135392e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          pG+29yYzfsCeVvNY5U1yqoHO5XnAgf7MPjkSp/xQg0g=
Subject key identifier:   0C:9E:45:B0:D1:FD:F8:3C:13:31:33:C3:9C:50:69:21:98:BC:B1:E7
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       3E095CB380670B1FD05F2683C1317B961415B69A
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e352e3135392e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:58 +0000
ROA not before:           Sat 22 Oct 2022 04:28:58 +0000
ROA not after:            Sat 21 Oct 2023 04:33:58 +0000
asID:                     47583
IP address blocks:        194.5.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:09:5c:b3:80:67:0b:1f:d0:5f:26:83:c1:31:7b:96:14:15:b6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:58 2022 GMT
            Not After : Oct 21 04:33:58 2023 GMT
        Subject: CN=0C9E45B0D1FDF83C133133C39C50692198BCB1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:27:e8:62:fa:fd:8b:95:c0:cc:70:04:6d:ae:
                    ae:aa:5e:8f:fd:9e:ef:86:a6:bb:a0:12:8c:25:97:
                    c1:ac:9a:2f:5d:60:5a:b6:fc:c2:c3:ca:87:be:35:
                    35:4d:e1:7a:4c:42:75:10:bf:89:81:7a:18:18:61:
                    b4:89:7c:bb:3c:2c:3d:44:06:64:91:12:aa:9a:dd:
                    5a:a2:53:72:a3:f2:c4:8f:af:a0:88:d3:a4:93:84:
                    d5:0d:3b:57:e5:17:19:eb:af:0e:40:d0:95:60:44:
                    68:de:98:57:cb:1b:c9:a6:83:27:f6:3a:0f:d5:2e:
                    c4:be:a7:d9:e1:c3:a7:78:8a:9a:44:a2:04:79:5c:
                    df:dd:8a:78:c2:d6:37:21:13:88:65:e0:57:be:dc:
                    13:63:0e:82:82:8d:f6:0c:7c:91:5f:fe:51:4e:9e:
                    78:86:ca:e0:0d:b2:99:3a:99:3e:2b:ee:f0:d5:d8:
                    1a:40:b7:d4:05:d6:4c:0c:4f:07:82:85:62:72:ff:
                    71:7e:60:3d:95:f7:b5:0b:d4:f3:bf:a9:0b:e8:d1:
                    2e:35:5f:c2:02:c2:cc:52:18:5f:25:93:9b:ff:ca:
                    49:ab:74:9f:6c:6c:30:54:ec:83:73:6c:d1:20:73:
                    b5:ca:fc:f0:52:c1:b0:9a:bb:f5:e9:c0:6e:5e:65:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9E:45:B0:D1:FD:F8:3C:13:31:33:C3:9C:50:69:21:98:BC:B1:E7
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e352e3135392e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:20:76:70:b0:bb:a1:26:1a:8c:87:27:10:21:9a:d0:bd:
         2e:d4:d0:ca:34:c5:22:74:2a:7c:08:61:3b:9a:5e:4e:4b:f2:
         94:59:45:98:0f:25:bf:1d:fc:14:c4:dc:ce:f7:b3:e5:e0:12:
         dd:a2:fa:b4:59:b2:76:58:a8:a7:4d:98:bf:dc:7a:a6:56:bb:
         e1:95:da:12:22:b0:a2:ed:9b:c8:f7:7a:03:62:cb:8f:d5:f5:
         51:fc:e4:ac:69:1a:87:39:97:31:6a:30:5e:de:eb:e0:4d:00:
         d0:c3:e3:09:7e:a3:89:ca:2a:87:87:c7:c7:38:ad:eb:3b:21:
         e6:dd:cc:83:5c:16:71:21:b7:21:64:cd:2b:62:44:e5:5b:17:
         d0:c7:2d:bd:8b:50:24:cd:37:97:05:37:ea:76:88:63:4d:58:
         f7:24:d9:c8:d1:8d:4c:97:1a:6c:73:e3:01:18:64:5f:d0:44:
         51:dd:81:01:91:09:52:53:85:46:4f:f9:0f:08:58:53:eb:c4:
         a1:9e:8f:95:6c:f5:ae:75:ba:d9:39:d4:b9:83:6b:9f:91:8d:
         0d:84:d9:01:2d:b2:6e:ca:23:a5:21:21:80:1d:79:23:9d:84:
         3f:44:dd:48:19:1f:e7:ca:7c:e6:5f:c3:57:62:d5:4c:1d:a4:
         0d:3e:75:c1
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUPglcs4BnCx/QXyaDwTF7lhQVtpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdlZTg2ZGZjNTZkNTUyMDlhMzU5MjRkODMxNTMwMDM1
YmFlMzkwNzAeFw0yMjEwMjIwNDI4NThaFw0yMzEwMjEwNDMzNThaMDMxMTAvBgNV
BAMTKDBDOUU0NUIwRDFGREY4M0MxMzMxMzNDMzlDNTA2OTIxOThCQ0IxRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJ+hi+v2LlcDMcARtrq6qXo/9
nu+GprugEowll8Gsmi9dYFq2/MLDyoe+NTVN4XpMQnUQv4mBehgYYbSJfLs8LD1E
BmSREqqa3VqiU3Kj8sSPr6CI06SThNUNO1flFxnrrw5A0JVgRGjemFfLG8mmgyf2
Og/VLsS+p9nhw6d4ippEogR5XN/dinjC1jchE4hl4Fe+3BNjDoKCjfYMfJFf/lFO
nniGyuANspk6mT4r7vDV2BpAt9QF1kwMTweChWJy/3F+YD2V97UL1PO/qQvo0S41
X8ICwsxSGF8lk5v/ykmrdJ9sbDBU7INzbNEgc7XK/PBSwbCau/XpwG5eZbXfAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUDJ5FsNH9+DwTMTPDnFBpIZi8secwHwYDVR0j
BBgwFoAUV+6G38VtVSCaNZJNgxUwA1uuOQcwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzUvNTdFRTg2REZDNTZENTUyMDlBMzU5MjREODMxNTMwMDM1
QkFFMzkwNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1YtNkczOFZ0VlNDYU5a
Sk5neFV3QTF1dU9RYy5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NS8zMTM5MzQyZTM1MmUzMTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3
MzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAwgWfMA0GCSqGSIb3DQEBCwUAA4IBAQAnvCB2cLC7
oSYajIcnECGa0L0u1NDKNMUidCp8CGE7ml5OS/KUWUWYDyW/HfwUxNzO97Pl4BLd
ovq0WbJ2WKinTZi/3HqmVrvhldoSIrCi7ZvI93oDYsuP1fVR/OSsaRqHOZcxajBe
3uvgTQDQw+MJfqOJyiqHh8fHOK3rOyHm3cyDXBZxIbchZM0rYkTlWxfQxy29i1Ak
zTeXBTfqdohjTVj3JNnI0Y1Mlxpsc+MBGGRf0ERR3YEBkQlSU4VGT/kPCFhT68Sh
no+VbPWudbrZOdS5g2ufkY0NhNkBLbJuyiOlISGAHXkjnYQ/RN1IGR/nynzmX8NX
YtVMHaQNPnXB
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net