Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/39322e3234392e34362e302f32332d3234203d3e203437353833.roa
File:                     39322e3234392e34362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          g1qlPc2yGO7nwzmUQobF5Kpbblvex7A163doVJ3n1h0=
Subject key identifier:   AD:9A:C5:86:75:91:4A:38:21:BF:BB:F6:AE:B7:E2:69:8F:78:3E:10
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       725D45FEB05C002C2C6576373B4604BDB397F45A
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/39322e3234392e34362e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:57 +0000
ROA not before:           Sat 22 Oct 2022 04:28:57 +0000
ROA not after:            Sat 21 Oct 2023 04:33:57 +0000
asID:                     47583
IP address blocks:        92.249.46.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5d:45:fe:b0:5c:00:2c:2c:65:76:37:3b:46:04:bd:b3:97:f4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:57 2022 GMT
            Not After : Oct 21 04:33:57 2023 GMT
        Subject: CN=AD9AC58675914A3821BFBBF6AEB7E2698F783E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:25:4e:62:02:60:bb:05:a5:e0:5e:a2:9e:
                    23:b0:8d:de:ee:60:5a:19:c2:a0:f4:a7:9a:38:5f:
                    2b:ca:1a:6c:d2:8f:48:be:8c:f2:94:f3:46:d6:53:
                    ef:11:9b:1d:9a:85:f6:84:e8:cc:59:6b:c1:38:a1:
                    09:77:a9:0e:04:79:14:03:43:0c:9f:32:8c:92:f1:
                    fb:0e:f1:73:89:33:9c:7c:85:f6:50:0d:fa:0f:c9:
                    2f:79:17:6c:ac:c1:b6:65:95:fe:8b:b1:9f:a4:1e:
                    7f:e1:c5:fe:c9:f8:f4:48:11:57:98:cb:b5:d0:32:
                    54:27:98:06:35:ad:08:d0:3d:a2:59:a1:fd:e5:4f:
                    29:dd:02:7f:e5:74:29:2d:e9:83:4c:19:c8:09:91:
                    39:b5:92:43:47:c2:9d:79:bd:d1:08:78:06:06:bb:
                    83:53:e0:bb:00:d1:ed:c9:99:3f:75:06:19:9c:3f:
                    3e:70:f7:92:c0:9c:2d:61:67:36:0c:b2:66:5a:c6:
                    20:5e:7e:83:fd:dc:c5:29:6f:9b:d4:3f:d1:b0:47:
                    b9:c6:8e:02:8a:99:08:09:aa:5a:b3:1f:38:21:9b:
                    c1:0f:c3:29:1e:74:95:86:6a:1c:d6:04:91:af:15:
                    1d:26:56:39:2c:cc:8d:5d:2e:63:e0:b5:4d:e4:ab:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9A:C5:86:75:91:4A:38:21:BF:BB:F6:AE:B7:E2:69:8F:78:3E:10
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/39322e3234392e34362e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:90:66:84:b3:27:da:01:b8:97:86:d5:8e:f0:c8:b4:3b:92:
         ab:2a:c3:24:7b:6b:05:b1:18:ba:1b:f7:dd:c9:10:4f:a4:8d:
         d0:e7:35:51:78:e0:3d:d5:14:04:35:f8:99:df:20:ad:80:fd:
         43:a2:5a:f8:15:09:bc:0f:02:8e:bb:c0:bf:f5:82:3d:b7:bf:
         0d:69:02:ce:1a:b5:89:99:76:fd:90:d4:89:f1:ea:7d:2c:2e:
         db:15:fe:d0:23:bb:7a:7f:9e:c0:74:0d:3c:0b:c4:c0:a3:97:
         3d:ed:b2:dd:a1:cf:14:40:6c:48:e1:0d:79:8c:b2:26:c1:0d:
         b3:76:07:ee:26:5f:f8:7b:27:e7:df:96:ef:04:77:df:0c:5e:
         58:dd:07:b4:e6:45:da:11:13:39:9c:18:fd:9e:f4:9f:89:0b:
         c3:db:82:63:4d:20:cf:7d:14:3a:1d:bb:c1:7b:ae:79:dc:b0:
         c8:82:98:ee:ec:8e:e9:87:d9:2f:be:b0:1c:f0:dc:70:1c:9f:
         ee:e1:14:4e:52:5f:99:8c:83:35:b3:fd:f8:18:7d:f5:d8:2f:
         db:ad:60:48:1b:0e:4e:c8:4e:c2:2a:ae:ff:30:62:c7:60:e2:
         6f:b8:bb:7a:90:59:79:82:05:14:ed:90:1b:b4:81:74:6a:be:
         b3:44:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net