Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3138382e302f32322d3232203d3e203138353330.roa
File:                     3139332e35382e3138382e302f32322d3232203d3e203138353330.roa (raw, json)
Hash identifier:          rjNKZycBaV0uMnbYid3oNx5lMdryBEXiDSDJTe84enU=
Subject key identifier:   36:CA:58:69:D1:5D:E6:F4:5B:A4:37:4E:CF:7D:89:BB:AE:BE:AD:E8
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       14C3984837C2710A9FEC1035BC08EBFF45E95CF4
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3138382e302f32322d3232203d3e203138353330.roa
Signing time:             Fri 27 Nov 2020 15:10:21 +0000
ROA not before:           Fri 27 Nov 2020 15:05:21 +0000
ROA not after:            Fri 26 Nov 2021 15:10:21 +0000
asID:                     18530
IP address blocks:        193.58.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c3:98:48:37:c2:71:0a:9f:ec:10:35:bc:08:eb:ff:45:e9:5c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:21 2020 GMT
            Not After : Nov 26 15:10:21 2021 GMT
        Subject: CN=3082010A0282010100A8650C295F1CDFBB01E2B57EC2744947AC29C3E6CB33A7550CD2E58DB3711452C99FF6D8EE9A0B3112289334ED2C527BE05A111A05C61788F2A3038E6BCD6850DB5DCEF1781E2C7B2B41F8FD1D309E719BB30B189E02283D09138AF663D6E8359D322BDFF671A59AADD36A3A76067D549475087516398802D96CE5560260404B2F264D68A01D9F26E914798D7802A38CD2F933FBA46D539B9C930669E0367201EB386D4BE4ED1F639C06D785150A9DD82A60CEFC44C7784583483DDD746AC3ABFD0C5953E537C1EB6A290656D23B8FA2ED759990874E122B69E4D1A6F999CC644DD830FE9699012103D0D8D7FAC764318AE9FAD485EF273F8C18863FCA7C5CC30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:0c:29:5f:1c:df:bb:01:e2:b5:7e:c2:74:
                    49:47:ac:29:c3:e6:cb:33:a7:55:0c:d2:e5:8d:b3:
                    71:14:52:c9:9f:f6:d8:ee:9a:0b:31:12:28:93:34:
                    ed:2c:52:7b:e0:5a:11:1a:05:c6:17:88:f2:a3:03:
                    8e:6b:cd:68:50:db:5d:ce:f1:78:1e:2c:7b:2b:41:
                    f8:fd:1d:30:9e:71:9b:b3:0b:18:9e:02:28:3d:09:
                    13:8a:f6:63:d6:e8:35:9d:32:2b:df:f6:71:a5:9a:
                    ad:d3:6a:3a:76:06:7d:54:94:75:08:75:16:39:88:
                    02:d9:6c:e5:56:02:60:40:4b:2f:26:4d:68:a0:1d:
                    9f:26:e9:14:79:8d:78:02:a3:8c:d2:f9:33:fb:a4:
                    6d:53:9b:9c:93:06:69:e0:36:72:01:eb:38:6d:4b:
                    e4:ed:1f:63:9c:06:d7:85:15:0a:9d:d8:2a:60:ce:
                    fc:44:c7:78:45:83:48:3d:dd:74:6a:c3:ab:fd:0c:
                    59:53:e5:37:c1:eb:6a:29:06:56:d2:3b:8f:a2:ed:
                    75:99:90:87:4e:12:2b:69:e4:d1:a6:f9:99:cc:64:
                    4d:d8:30:fe:96:99:01:21:03:d0:d8:d7:fa:c7:64:
                    31:8a:e9:fa:d4:85:ef:27:3f:8c:18:86:3f:ca:7c:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CA:58:69:D1:5D:E6:F4:5B:A4:37:4E:CF:7D:89:BB:AE:BE:AD:E8
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3138382e302f32322d3232203d3e203138353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:b9:cd:5f:6b:c0:c1:e8:3a:48:3f:39:5a:90:a7:77:1b:f2:
         cf:99:31:12:bb:56:22:db:80:ee:ff:32:6f:cc:49:61:69:7c:
         39:8e:64:c9:aa:35:bc:2d:ab:66:2f:da:fe:33:5c:60:31:56:
         48:07:93:1b:ba:69:07:52:0a:ac:f0:55:c3:ba:4b:e6:99:de:
         9c:cd:20:62:aa:ff:35:9d:b8:c0:89:4b:aa:07:f5:9e:62:0a:
         20:9d:78:5e:d1:f0:e1:1f:8d:1c:b5:cf:13:1d:82:99:47:a8:
         f0:80:92:98:3c:a5:e1:a9:11:30:59:2b:e8:c4:44:0c:04:85:
         0d:90:a7:a0:96:b5:32:4b:e6:dd:e7:7c:eb:3d:34:25:67:ab:
         ff:71:49:5c:c3:bc:80:07:8f:0b:47:69:0b:af:0c:a3:fb:0e:
         51:f3:0a:98:f7:00:ec:c0:4f:83:28:80:ba:29:6d:2e:a2:02:
         3d:53:95:14:cd:1c:a2:67:4f:f7:f2:e2:84:28:ee:c8:3f:5b:
         bb:59:c1:ed:71:a7:58:f3:d4:3c:a2:20:28:93:65:b8:c0:47:
         6d:36:ed:85:47:f1:19:55:bf:6f:db:bd:9d:b8:21:89:14:06:
         e8:aa:6d:19:8a:22:ec:27:45:c5:3b:60:05:9b:ff:f4:93:3d:
         e8:8c:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net