Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa
File:                     39322e3234392e34342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          6vRWOUMuNGZYsMZ+adQ94R9WnZhfeiAh884dOK6j4rU=
Subject key identifier:   C4:D3:9C:E5:D9:7B:85:0B:68:57:1D:C6:30:50:E1:D9:65:89:FB:27
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       13B50012FF1A69162FEC8C397056B6616A417D80
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:54 +0000
ROA not before:           Sat 22 Oct 2022 04:28:54 +0000
ROA not after:            Sat 21 Oct 2023 04:33:54 +0000
asID:                     47583
IP address blocks:        92.249.44.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b5:00:12:ff:1a:69:16:2f:ec:8c:39:70:56:b6:61:6a:41:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:54 2022 GMT
            Not After : Oct 21 04:33:54 2023 GMT
        Subject: CN=C4D39CE5D97B850B68571DC63050E1D96589FB27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:85:dc:0c:00:75:4b:1e:81:1c:8a:ab:a7:
                    8d:45:20:f0:b0:d7:df:50:55:ad:82:31:88:51:d0:
                    74:4f:82:d7:25:b6:03:8c:18:f2:fb:09:58:f2:7e:
                    40:fd:b5:3b:c5:79:4c:ef:89:63:6e:a7:cc:4c:66:
                    b8:8f:7f:c9:b2:36:53:ba:91:a3:78:9e:a7:75:b8:
                    41:fd:23:21:a9:ce:7f:54:a4:c5:b4:80:b9:d7:0e:
                    4a:56:c2:1c:de:f3:82:8b:e9:ff:8c:53:c7:0f:ed:
                    b6:83:f0:90:92:57:38:09:a7:10:86:4e:84:90:3c:
                    35:3e:b0:45:f2:2b:a5:7b:f3:7e:32:6e:c6:1d:fa:
                    aa:7b:a7:c3:ae:87:bb:de:e3:66:0e:28:46:a6:b3:
                    c4:77:36:81:55:18:70:df:5f:66:30:73:0d:aa:49:
                    09:c1:a4:0e:b7:86:24:97:8c:bc:7c:01:be:ed:1d:
                    5e:4d:6c:ef:43:c2:da:17:01:27:0f:07:cb:b0:fb:
                    81:4e:24:67:51:5f:80:0d:80:98:66:f2:40:12:d5:
                    97:47:49:48:28:a5:4e:f4:c7:d8:52:a7:9b:03:5a:
                    ed:d4:83:73:5e:ed:5a:3d:80:55:a1:8d:55:1c:c7:
                    41:42:73:dc:8f:40:66:11:7b:53:6c:83:a8:9c:f5:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D3:9C:E5:D9:7B:85:0B:68:57:1D:C6:30:50:E1:D9:65:89:FB:27
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:3a:fb:24:d4:f4:88:26:72:7d:01:cb:b0:c9:13:d4:d5:88:
         74:2d:3e:ae:9b:30:7e:97:26:84:67:22:cf:57:64:0c:07:40:
         65:ef:32:3a:89:9d:08:eb:b0:07:bc:36:00:f0:6c:5a:7c:85:
         a9:b5:fe:17:a0:03:d7:b7:29:99:bf:29:c9:a1:75:43:f3:3c:
         03:5b:89:29:33:42:2b:81:34:8a:79:69:dd:ff:15:18:31:c5:
         ea:0e:ff:88:af:a8:15:d0:68:bb:46:ec:d5:21:b3:98:f4:ef:
         db:83:98:1d:6a:31:2a:4e:26:0c:32:3f:21:ea:9e:84:67:b0:
         83:11:af:92:15:9b:e5:11:e7:9e:5f:2c:79:cc:63:07:dd:b2:
         ad:ae:27:9c:e8:55:27:97:7a:f7:9a:ba:5b:4c:5f:d2:64:1d:
         e0:d8:4e:84:37:16:26:c2:15:5d:31:d9:95:6e:c1:08:8a:bb:
         08:4b:46:68:4d:43:4e:1c:58:4d:a2:bf:74:aa:b1:5a:47:4c:
         e6:b2:1e:37:0f:fb:74:84:80:55:d0:93:5c:e2:64:09:d7:73:
         95:3d:02:41:1c:2f:ef:88:d1:ab:15:9a:d1:9f:0b:01:99:6d:
         f4:fd:12:45:18:5d:d7:12:88:98:1c:09:9a:9f:bd:6c:79:7a:
         40:62:9c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net