Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3231312e302f32342d3234203d3e203631313032.roa
File:                     38302e36352e3231312e302f32342d3234203d3e203631313032.roa (raw, json)
Hash identifier:          qMl57Vol5jFvqVh8SjTuOckC/eeD5v/aBdZGvXsLPkU=
Subject key identifier:   66:22:14:D3:F2:80:66:6B:A0:7F:E1:29:3D:82:F0:5B:14:AC:34:0E
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       5C54484AA81D150E655CE6D10C3BF2A22FD92005
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3231312e302f32342d3234203d3e203631313032.roa
Signing time:             Tue 28 Jun 2022 04:40:18 +0000
ROA not before:           Tue 28 Jun 2022 04:35:18 +0000
ROA not after:            Tue 27 Jun 2023 04:40:18 +0000
asID:                     61102
IP address blocks:        80.65.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:54:48:4a:a8:1d:15:0e:65:5c:e6:d1:0c:3b:f2:a2:2f:d9:20:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Jun 28 04:35:18 2022 GMT
            Not After : Jun 27 04:40:18 2023 GMT
        Subject: CN=662214D3F280666BA07FE1293D82F05B14AC340E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:4c:7d:72:ef:85:4d:a9:cc:73:f6:fc:c5:
                    3f:90:7e:2c:6d:5d:90:02:5f:cd:8f:76:75:de:30:
                    38:bc:a8:00:e5:da:b7:b5:4a:f4:5a:9a:5d:38:ff:
                    1d:35:6e:65:15:a1:e5:d0:11:58:fa:73:d1:81:f7:
                    e5:b1:ec:93:6e:2e:0f:bc:6f:47:d6:f6:bd:46:53:
                    83:8f:51:b9:7d:ce:e1:20:bd:e9:24:40:be:c1:6b:
                    0d:48:88:36:d4:80:d3:0d:67:39:0e:a2:c3:6d:92:
                    e6:2e:67:f8:57:71:9d:85:dc:86:7f:a0:4e:be:c4:
                    4f:32:68:4f:b4:51:0e:c6:5b:95:89:16:47:c1:5e:
                    8f:3a:53:c8:56:40:91:c8:ac:65:6a:8b:8e:ac:c5:
                    a6:6f:e4:7a:07:85:81:af:2a:ab:2a:c6:54:1b:85:
                    cc:f8:13:6f:15:da:f8:7e:91:4c:ae:57:be:1a:34:
                    aa:5f:89:e9:de:62:b3:40:e7:30:20:64:c6:55:63:
                    53:d5:59:b9:8a:ce:b7:cd:f6:2b:0a:44:ff:bb:bb:
                    fc:a8:7c:70:2d:d9:24:84:03:a4:6e:fe:11:df:86:
                    74:1c:dc:31:fa:71:7c:bc:f8:9b:b1:04:7c:6a:f0:
                    6c:a6:f7:be:05:4e:ea:2b:6b:e0:08:4e:55:77:9c:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:22:14:D3:F2:80:66:6B:A0:7F:E1:29:3D:82:F0:5B:14:AC:34:0E
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3231312e302f32342d3234203d3e203631313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.65.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:0d:b3:00:5d:a6:88:6a:b4:e5:f1:d6:e7:03:01:98:8d:ff:
         0d:ea:81:b8:73:e1:3c:75:37:8c:f9:03:42:d1:f6:3f:a2:08:
         80:ea:c7:35:a7:1a:5b:75:31:96:14:0c:8c:76:ab:a1:9c:88:
         97:8e:da:87:a9:75:48:3f:83:01:80:6e:7b:ac:39:d6:07:92:
         c6:09:5e:1e:bf:a8:3b:57:e3:87:8e:aa:2b:f1:ab:86:c9:cb:
         24:c5:5f:57:4d:92:0e:51:f2:ba:1e:06:72:77:a3:8e:59:f6:
         91:1b:99:c0:78:a9:56:b5:7c:2c:07:1d:0d:4e:e7:a4:d3:1f:
         ae:ba:aa:10:40:c2:42:8a:5e:c6:51:48:07:d5:4b:f3:75:8d:
         e3:89:43:2c:13:8d:ee:57:37:a5:cb:70:ed:19:2c:f9:62:73:
         42:1d:cf:1c:78:e1:55:7d:ae:78:45:86:bc:e3:10:75:ad:b0:
         5f:7b:e8:a7:1d:98:80:6f:95:31:0a:58:fa:97:87:05:c5:ad:
         79:5d:b4:d4:aa:67:76:85:13:c2:ba:a7:62:bb:e0:12:e8:ee:
         53:b0:7b:ba:9f:a3:a7:e1:ad:23:0a:a3:08:73:6c:38:aa:04:
         31:2a:a6:41:93:db:ae:a5:8d:b2:20:69:c5:5b:ec:29:f1:54:
         d8:d2:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net