Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33352e302f32342d3234203d3e203235303938.roa
File:                     352e3138322e33352e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          BNw0fW1AnSZlzTfS9BwjAE9f/Zq40Z9Gc40L2PoZOeA=
Subject key identifier:   A6:CA:94:73:CA:DF:BB:4A:9D:16:BE:A0:CE:03:8A:38:FA:C8:28:75
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       6071FF1936563F6253F5E1EB2E033E63B166A692
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33352e302f32342d3234203d3e203235303938.roa
Signing time:             Sat 22 Oct 2022 04:33:53 +0000
ROA not before:           Sat 22 Oct 2022 04:28:53 +0000
ROA not after:            Sat 21 Oct 2023 04:33:53 +0000
asID:                     25098
IP address blocks:        5.182.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:71:ff:19:36:56:3f:62:53:f5:e1:eb:2e:03:3e:63:b1:66:a6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:53 2022 GMT
            Not After : Oct 21 04:33:53 2023 GMT
        Subject: CN=A6CA9473CADFBB4A9D16BEA0CE038A38FAC82875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:3b:11:29:c9:39:6f:0d:91:fd:1d:51:dd:
                    38:3a:5d:ea:36:13:d1:6d:42:c2:7b:68:31:e2:a8:
                    e3:da:4c:ee:41:d9:e8:40:c4:ae:d1:14:e6:ba:27:
                    d5:8c:46:16:69:4a:63:a1:5e:d5:44:ad:24:4d:f4:
                    e4:1b:37:47:e1:52:8a:7f:0d:10:16:da:47:bd:1b:
                    bd:62:f4:50:6b:e5:b5:bf:ed:36:52:69:80:59:68:
                    ab:e7:8d:3d:a8:7e:60:e0:3f:6d:84:8b:f4:7c:74:
                    df:59:53:c0:e8:7c:bb:42:8d:49:69:6f:6b:97:ed:
                    f6:00:91:ec:8d:98:af:3e:7d:00:db:df:e9:c8:9a:
                    c2:bb:cc:5c:ae:2c:8c:9a:18:85:4f:29:03:a5:5f:
                    be:c0:95:df:9c:57:9e:4d:f5:67:b0:74:4f:6c:78:
                    aa:f6:03:5d:af:09:4e:77:10:6a:a6:aa:c4:98:3b:
                    26:d2:27:17:9b:22:42:ec:c4:44:99:5d:7d:c0:c1:
                    42:16:b0:42:ef:ba:84:a2:54:2b:7f:c2:d0:97:77:
                    06:c1:be:0d:3c:95:fb:ce:ae:2d:18:3b:81:c3:02:
                    65:1c:be:fb:01:91:4d:1f:a2:76:26:40:bf:6d:3b:
                    68:99:df:19:8f:97:a5:9f:e3:7e:9d:b2:15:ad:a0:
                    4d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CA:94:73:CA:DF:BB:4A:9D:16:BE:A0:CE:03:8A:38:FA:C8:28:75
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33352e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:db:43:3e:fa:ab:7b:a6:0b:36:33:7d:9d:20:d0:b7:31:f0:
         29:c6:3f:86:52:8f:41:37:94:7a:d4:e4:46:e3:1a:26:59:3e:
         2b:64:3b:2c:89:35:79:b7:73:72:38:d2:7e:e9:0f:d1:4b:39:
         59:72:47:33:ff:ec:9c:8a:2b:05:35:ca:5e:ed:af:0c:f1:24:
         90:84:1f:f0:be:ad:04:a8:96:fd:95:7a:31:ab:bf:3d:9a:fb:
         fc:87:22:90:f7:73:bd:7b:ae:ed:a7:4c:2d:41:54:e1:7d:4b:
         84:63:17:4c:d8:90:e9:72:7e:5f:04:dd:c1:31:db:a4:dc:a3:
         df:7e:07:b5:e8:4a:da:1e:e5:5d:58:bb:8b:46:35:0f:50:1f:
         43:34:d0:28:a0:24:95:0d:1e:17:98:33:bb:58:20:5f:e1:aa:
         c1:65:d4:67:b0:e0:91:39:5d:ed:11:2a:04:b2:2d:f4:2f:c3:
         14:f1:d3:7e:c2:d1:54:a6:6b:70:ca:91:da:7c:ae:e1:40:47:
         51:ea:95:01:6e:13:d3:69:f7:0d:fd:8c:e0:84:87:ad:da:37:
         fb:0d:19:3d:a6:d7:dc:1b:07:23:07:fe:3a:10:20:01:a9:94:
         c1:43:7a:56:71:3d:e5:d6:1d:3f:f9:f5:6a:4f:7a:5f:60:c8:
         c7:f1:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net