Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3135322e38392e38382e302f32322d3232203d3e203536333736.roa
File:                     3135322e38392e38382e302f32322d3232203d3e203536333736.roa (raw, json)
Hash identifier:          3iihkIHacIXPfom+GQ/6JLutSzLzvF6HqEn0mDmsxFs=
Subject key identifier:   18:FB:1A:1E:2A:91:3B:FA:69:A8:3F:2A:58:91:E0:24:85:EF:69:9D
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       4D7C083DC9B0E1CCD38B05266A6DE08BDA854C60
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3135322e38392e38382e302f32322d3232203d3e203536333736.roa
Signing time:             Sat 22 Oct 2022 04:33:59 +0000
ROA not before:           Sat 22 Oct 2022 04:28:59 +0000
ROA not after:            Sat 21 Oct 2023 04:33:59 +0000
asID:                     56376
IP address blocks:        152.89.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7c:08:3d:c9:b0:e1:cc:d3:8b:05:26:6a:6d:e0:8b:da:85:4c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:28:59 2022 GMT
            Not After : Oct 21 04:33:59 2023 GMT
        Subject: CN=18FB1A1E2A913BFA69A83F2A5891E02485EF699D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:96:16:5a:b7:7c:73:b6:6f:d3:5c:94:80:
                    ba:ea:24:86:d5:32:39:fe:d8:49:f3:d7:9a:64:0d:
                    52:a0:25:c6:04:ff:1e:5a:af:00:e8:7e:d5:ea:8c:
                    2a:da:db:96:c9:05:aa:10:dd:a2:6f:c9:c1:fe:10:
                    0e:4e:6a:3a:ff:e5:8b:ff:4b:0d:46:48:fc:ce:7c:
                    6b:6d:e5:c8:d2:f6:3b:58:b5:a4:38:f8:bc:8b:33:
                    73:cb:c3:c9:fc:4b:11:fc:06:39:35:b7:f4:34:cf:
                    54:89:be:47:a3:b8:d8:4c:fa:d2:0e:2b:ca:1f:aa:
                    22:8f:49:8c:fd:58:41:00:d8:b9:c5:18:a0:ac:c2:
                    74:2d:ab:c4:7d:d3:1e:02:91:1c:4b:c1:24:9e:a3:
                    1e:51:42:80:25:01:89:86:79:da:6b:13:da:b5:4e:
                    42:11:dc:11:58:7f:cb:46:46:f0:f1:f5:e2:7c:7c:
                    c9:c3:c7:c9:35:a2:9d:3d:c8:eb:97:a4:49:34:b4:
                    c2:57:96:c8:cc:3b:64:95:b7:86:2b:23:8d:61:64:
                    a1:3f:a1:82:9b:39:9a:99:28:b8:68:b4:08:64:5a:
                    f0:9d:c7:b8:18:60:56:ca:ea:66:7f:5d:9a:53:f3:
                    f1:ac:60:a2:09:75:2f:eb:1f:c9:fd:12:76:85:c5:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FB:1A:1E:2A:91:3B:FA:69:A8:3F:2A:58:91:E0:24:85:EF:69:9D
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3135322e38392e38382e302f32322d3232203d3e203536333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.89.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:77:d4:a6:4b:71:25:20:5c:43:94:74:91:56:93:74:8d:
         7a:a5:60:eb:55:a7:72:5b:7c:a1:b2:ea:0e:f0:1e:f7:b1:97:
         63:d1:63:ef:04:2e:a6:1f:65:85:a9:41:15:e6:64:bc:82:aa:
         10:c5:54:0e:f5:a6:62:27:f8:48:1d:ed:52:6b:05:5e:c3:04:
         52:4b:83:8f:77:63:df:fe:c5:5c:5e:f7:83:41:e7:62:74:80:
         1d:3f:4a:6d:38:7f:a6:b6:1c:15:72:d5:77:fd:52:1f:c4:cc:
         8a:bc:a3:02:b2:67:ff:30:ee:ae:95:44:0e:73:33:de:5d:8d:
         18:00:03:d9:45:56:39:d4:8f:9d:ee:46:48:89:22:0c:fe:27:
         f8:4e:55:a1:c7:d6:8f:74:14:6d:19:0a:ea:b2:de:78:5c:8e:
         ec:19:f9:c1:f5:65:55:30:16:2b:35:61:ba:a2:94:b4:b6:37:
         61:6e:2b:bb:be:ba:0e:8a:9e:ce:08:31:19:53:88:96:19:7c:
         31:7d:a1:95:8e:4f:7a:e8:ac:50:c9:8a:70:c2:bb:89:45:b8:
         97:fb:87:2a:fd:fe:fe:83:c5:a4:25:32:e3:96:97:d9:d0:f2:
         0b:21:a0:a6:db:91:eb:d4:64:82:9e:a4:24:ac:a9:6c:3d:22:
         c4:87:84:f2
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUTXwIPcmw4czTiwUmam3gi9qFTGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjEwMjIwNDI4NTlaFw0yMzEwMjEwNDMzNTlaMDMxMTAvBgNV
BAMTKDE4RkIxQTFFMkE5MTNCRkE2OUE4M0YyQTU4OTFFMDI0ODVFRjY5OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeMZYWWrd8c7Zv01yUgLrqJIbV
Mjn+2Enz15pkDVKgJcYE/x5arwDoftXqjCra25bJBaoQ3aJvycH+EA5Oajr/5Yv/
Sw1GSPzOfGtt5cjS9jtYtaQ4+LyLM3PLw8n8SxH8Bjk1t/Q0z1SJvkejuNhM+tIO
K8ofqiKPSYz9WEEA2LnFGKCswnQtq8R90x4CkRxLwSSeox5RQoAlAYmGedprE9q1
TkIR3BFYf8tGRvDx9eJ8fMnDx8k1op09yOuXpEk0tMJXlsjMO2SVt4YrI41hZKE/
oYKbOZqZKLhotAhkWvCdx7gYYFbK6mZ/XZpT8/GsYKIJdS/rH8n9EnaFxc7rAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUGPsaHiqRO/ppqD8qWJHgJIXvaZ0wHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zMTM1MzIyZTM4MzkyZTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTM2
MzMzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCmFlYMA0GCSqGSIb3DQEBCwUAA4IBAQA/UHfUpktx
JSBcQ5R0kVaTdI16pWDrVadyW3yhsuoO8B73sZdj0WPvBC6mH2WFqUEV5mS8gqoQ
xVQO9aZiJ/hIHe1SawVewwRSS4OPd2Pf/sVcXveDQedidIAdP0ptOH+mthwVctV3
/VIfxMyKvKMCsmf/MO6ulUQOczPeXY0YAAPZRVY51I+d7kZIiSIM/if4TlWhx9aP
dBRtGQrqst54XI7sGfnB9WVVMBYrNWG6opS0tjdhbiu7vroOip7OCDEZU4iWGXwx
faGVjk966KxQyYpwwruJRbiX+4cq/f7+g8WkJTLjlpfZ0PILIaCm25Hr1GSCnqQk
rKlsPSLEh4Ty
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net