Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138302e36312e302f32342d3234203d3e20313437303439.roa
File:                     352e3138302e36312e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          yKkD3dSAqFTRV2WDtr2QZ1YL85vt7riEwUfUGEh/kYU=
Subject key identifier:   65:C2:A0:46:D5:C1:D4:3D:76:F4:A5:D9:03:02:B3:AF:23:1C:72:D4
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       50DF69F65171D3E225E8C8F6B8C27D6CA40046DE
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138302e36312e302f32342d3234203d3e20313437303439.roa
Signing time:             Sat 22 Oct 2022 04:33:57 +0000
ROA not before:           Sat 22 Oct 2022 04:28:57 +0000
ROA not after:            Sat 21 Oct 2023 04:33:57 +0000
asID:                     147049
IP address blocks:        5.180.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:df:69:f6:51:71:d3:e2:25:e8:c8:f6:b8:c2:7d:6c:a4:00:46:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:57 2022 GMT
            Not After : Oct 21 04:33:57 2023 GMT
        Subject: CN=65C2A046D5C1D43D76F4A5D90302B3AF231C72D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:ec:3a:94:fd:6e:47:57:8c:37:1e:28:56:
                    66:06:ba:07:33:35:b9:15:b9:19:fa:d2:3c:ed:0c:
                    75:09:d1:fb:db:58:b9:f8:f7:63:b1:4e:b9:fd:1e:
                    b4:83:f0:81:0a:23:97:51:8b:b1:85:33:4b:5a:53:
                    ed:ba:2b:e3:de:06:fd:dd:0c:60:82:d2:ef:6e:73:
                    c3:ad:76:44:ce:44:72:3f:92:da:c8:44:6c:b5:c0:
                    d8:70:87:93:6e:a6:5a:8c:bc:aa:3f:62:2f:40:be:
                    10:a3:bc:aa:b6:8e:27:5a:48:ce:98:3b:bc:4c:1c:
                    4f:33:47:73:6f:f0:73:36:e5:e8:ba:b8:29:7f:96:
                    36:2b:4a:29:6e:4c:44:af:aa:d2:c7:56:45:f7:91:
                    83:60:40:d9:d2:d7:9c:a7:c7:31:7a:59:4a:8d:46:
                    00:b6:2c:84:03:b7:fc:6e:10:79:84:f5:1a:c1:6b:
                    bb:93:83:8e:69:73:9b:8c:21:ed:9c:f1:da:51:74:
                    1e:ad:1f:12:0c:61:80:67:78:4c:b5:4c:cb:eb:4b:
                    d0:19:5a:64:f6:41:dc:53:b3:93:7e:e4:f0:90:e8:
                    91:16:36:17:65:bd:9d:58:5d:97:f7:4c:38:ca:62:
                    a2:d2:08:54:6a:a5:5d:74:37:b0:8c:70:1b:0b:6a:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C2:A0:46:D5:C1:D4:3D:76:F4:A5:D9:03:02:B3:AF:23:1C:72:D4
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138302e36312e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:05:97:05:62:01:70:75:be:bc:b5:db:ee:83:e2:68:8e:9b:
         70:3b:97:93:af:f1:8b:66:ef:59:38:d3:19:b4:e8:4e:0e:ef:
         b0:9a:ce:67:9e:46:7e:6c:ca:c9:1c:5c:45:c5:d8:68:29:1e:
         28:b4:eb:79:6b:e3:a7:d3:66:82:bf:4a:0f:54:75:4f:b5:44:
         a1:ad:ae:ac:3f:57:1a:f4:ec:b2:79:a3:1b:1e:88:b9:29:87:
         93:64:3f:64:6c:95:21:4e:17:ca:19:e1:16:ee:19:04:2b:f4:
         ad:c8:de:05:85:ef:ac:0c:00:1f:80:ca:55:d1:36:82:57:8a:
         3d:e2:35:52:46:24:19:74:fa:ba:8b:23:69:64:1a:ad:57:96:
         93:c4:a7:f2:13:11:14:20:51:7c:1b:df:73:81:2d:6c:59:c9:
         b2:53:ee:5c:d0:e4:98:15:74:e3:38:ea:09:ba:5a:2e:d9:6e:
         ff:3f:a4:69:98:b8:dd:cb:bc:9a:d4:93:fb:b3:de:39:94:65:
         65:0d:02:9b:28:7e:8a:19:98:b2:cd:a1:b3:24:67:88:d3:f1:
         b6:46:7d:bd:2c:0f:d8:33:2d:5c:bd:e4:74:73:c0:29:0a:8d:
         09:57:21:12:1f:96:0d:86:31:47:a0:ff:15:e5:54:ca:2d:a2:
         45:59:cb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net