Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33322e302f32342d3234203d3e203631333137.roa
File:                     352e3138322e33322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          yTocucTxO0dTrGPxZdl6ffj4gAlgxn7lY1liFUNraG4=
Subject key identifier:   FC:4B:8F:F8:5E:D0:95:CA:F3:87:99:95:39:59:FC:74:B5:A4:87:BD
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       529395A84F032B38FE6021E161B42C990B6B3EA9
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33322e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:57 +0000
ROA not before:           Tue 28 Jun 2022 04:35:57 +0000
ROA not after:            Tue 27 Jun 2023 04:40:57 +0000
asID:                     61317
IP address blocks:        5.182.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:93:95:a8:4f:03:2b:38:fe:60:21:e1:61:b4:2c:99:0b:6b:3e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Jun 28 04:35:57 2022 GMT
            Not After : Jun 27 04:40:57 2023 GMT
        Subject: CN=FC4B8FF85ED095CAF38799953959FC74B5A487BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:81:ec:16:6b:b3:d8:95:e1:ad:22:a4:56:
                    53:18:18:cf:6d:7f:e7:4d:52:62:e2:cc:7e:b4:6c:
                    3b:97:b7:b2:ca:e0:6d:50:4e:09:dd:16:08:dd:56:
                    59:18:de:dd:28:9c:4e:66:6b:2a:f7:34:e2:e2:df:
                    ff:6f:08:89:0b:0f:7d:6b:0f:96:5d:f1:ee:b7:4c:
                    3d:4c:48:2d:a9:a2:48:66:46:6d:e7:22:f9:23:35:
                    58:d4:fa:18:5b:5f:8c:b3:7b:01:1d:c8:7a:54:c1:
                    23:46:63:35:46:5c:49:4c:5d:c8:5b:a1:56:42:d5:
                    71:16:9c:7c:1e:61:ab:6a:6d:9f:45:af:c4:61:bf:
                    f5:2e:22:b2:fa:4d:49:83:df:36:c3:9f:3e:73:cb:
                    06:59:c7:c4:3d:69:91:a6:26:35:94:9f:58:12:d0:
                    ec:60:22:42:58:99:80:62:0b:b4:f8:6a:aa:51:de:
                    11:9a:50:7e:01:c3:94:85:22:f1:78:19:ee:fe:4e:
                    3a:d6:7a:fa:bf:06:78:3f:2e:82:2d:3f:d5:6b:b0:
                    d3:21:2c:7d:d8:d1:71:a4:60:c1:8d:2c:dd:80:54:
                    13:18:0e:c6:eb:f8:85:91:2b:c5:ee:ff:29:84:06:
                    ab:d2:dc:ef:76:72:75:58:a6:b5:9c:69:7b:ca:f3:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4B:8F:F8:5E:D0:95:CA:F3:87:99:95:39:59:FC:74:B5:A4:87:BD
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:96:82:b5:3b:47:57:b8:5e:ee:64:67:3c:7d:be:6f:b3:a2:
         fd:af:9a:6c:65:8f:ec:d4:c0:9d:93:02:9d:07:4a:19:f7:16:
         ad:c9:cb:65:fe:f7:40:ae:28:89:7d:2a:2f:4c:d2:04:19:d2:
         f7:0e:6e:08:a3:91:75:54:3c:60:7c:ac:36:96:ad:dd:75:b9:
         ce:64:ab:74:2b:5c:6b:c8:40:9a:d4:9a:db:34:25:b9:8e:db:
         4c:f5:ab:8a:2f:5f:c0:84:3e:20:5c:64:76:9f:15:d0:be:9b:
         c2:7c:4f:54:7c:1c:c9:22:15:7f:13:33:ea:a2:d9:02:6a:0a:
         c1:48:03:97:e2:8e:9f:85:b8:4e:6d:47:ef:78:62:68:5e:3a:
         e4:f7:be:d0:fd:a4:ce:16:00:82:ef:94:6a:9f:f8:39:fd:e9:
         d8:ec:51:3d:14:39:31:7c:71:4d:a9:6f:f6:92:fd:60:c3:74:
         04:45:02:4d:72:3e:c9:89:a5:0c:8a:11:00:89:2b:6a:dc:6a:
         03:61:ba:00:49:2b:75:15:28:c9:02:ea:c0:b8:32:cd:fd:39:
         dd:d5:13:dc:4a:40:84:d6:27:f6:c3:c8:c3:23:6c:04:7d:fa:
         4a:75:99:9c:91:bc:3b:39:81:23:ab:10:91:03:cc:4f:03:33:
         63:e4:be:51
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUUpOVqE8DKzj+YCHhYbQsmQtrPqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdlZTg2ZGZjNTZkNTUyMDlhMzU5MjRkODMxNTMwMDM1
YmFlMzkwNzAeFw0yMjA2MjgwNDM1NTdaFw0yMzA2MjcwNDQwNTdaMDMxMTAvBgNV
BAMTKEZDNEI4RkY4NUVEMDk1Q0FGMzg3OTk5NTM5NTlGQzc0QjVBNDg3QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1YHsFmuz2JXhrSKkVlMYGM9t
f+dNUmLizH60bDuXt7LK4G1QTgndFgjdVlkY3t0onE5mayr3NOLi3/9vCIkLD31r
D5Zd8e63TD1MSC2pokhmRm3nIvkjNVjU+hhbX4yzewEdyHpUwSNGYzVGXElMXchb
oVZC1XEWnHweYatqbZ9Fr8Rhv/UuIrL6TUmD3zbDnz5zywZZx8Q9aZGmJjWUn1gS
0OxgIkJYmYBiC7T4aqpR3hGaUH4Bw5SFIvF4Ge7+TjrWevq/Bng/LoItP9VrsNMh
LH3Y0XGkYMGNLN2AVBMYDsbr+IWRK8Xu/ymEBqvS3O92cnVYprWcaXvK8xH3AgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQU/EuP+F7Qlcrzh5mVOVn8dLWkh70wHwYDVR0j
BBgwFoAUV+6G38VtVSCaNZJNgxUwA1uuOQcwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzUvNTdFRTg2REZDNTZENTUyMDlBMzU5MjREODMxNTMwMDM1
QkFFMzkwNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1YtNkczOFZ0VlNDYU5a
Sk5neFV3QTF1dU9RYy5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NS8zNTJlMzEzODMyMmUzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMz
MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAAW2IDANBgkqhkiG9w0BAQsFAAOCAQEAV5aCtTtHV7he
7mRnPH2+b7Oi/a+abGWP7NTAnZMCnQdKGfcWrcnLZf73QK4oiX0qL0zSBBnS9w5u
CKORdVQ8YHysNpat3XW5zmSrdCtca8hAmtSa2zQluY7bTPWrii9fwIQ+IFxkdp8V
0L6bwnxPVHwcySIVfxMz6qLZAmoKwUgDl+KOn4W4Tm1H73hiaF465Pe+0P2kzhYA
gu+Uap/4Of3p2OxRPRQ5MXxxTalv9pL9YMN0BEUCTXI+yYmlDIoRAIkratxqA2G6
AEkrdRUoyQLqwLgyzf053dUT3EpAhNYn9sPIwyNsBH36SnWZnJG8OzmBI6sQkQPM
TwMzY+S+UQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net