Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa
File:                     38332e3133362e3231382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          eYkQb1bEkrSUgsLN2c0Lk+cySncYKqCDOrfmZWY8jBQ=
Subject key identifier:   5A:B7:36:19:E0:BF:07:DD:CC:38:E2:1A:43:53:9B:EC:F3:10:13:47
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       36EFBF2FA52952DA3C00A6D22656C0888C374ACF
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:00 +0000
ROA not before:           Sat 22 Oct 2022 04:29:00 +0000
ROA not after:            Sat 21 Oct 2023 04:34:00 +0000
asID:                     47583
IP address blocks:        83.136.218.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ef:bf:2f:a5:29:52:da:3c:00:a6:d2:26:56:c0:88:8c:37:4a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:00 2022 GMT
            Not After : Oct 21 04:34:00 2023 GMT
        Subject: CN=5AB73619E0BF07DDCC38E21A43539BECF3101347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:6e:ec:df:60:8f:5e:2a:1a:e6:96:47:b3:
                    10:bc:1b:4d:f5:69:ed:5f:1f:08:e8:44:b5:ee:28:
                    ec:77:ca:ff:7a:b2:15:dc:49:7a:92:b3:47:4d:d8:
                    97:e4:6d:82:ba:46:ed:99:48:52:c7:ef:8a:92:13:
                    8e:7a:28:d6:3b:9f:7a:72:11:68:bb:d3:ac:f6:dc:
                    82:4e:3d:df:b4:2b:ed:fe:01:11:15:d6:95:0a:b5:
                    f7:f1:c2:59:86:1f:36:b4:58:36:41:78:62:be:28:
                    6c:ff:d6:ac:2f:08:ef:22:e0:54:ff:15:fb:b8:a7:
                    ce:cc:93:f0:e8:19:50:8c:3c:d5:1f:0e:68:f7:40:
                    63:c0:70:c6:4e:31:dd:b0:9f:d3:e3:e8:f9:14:f4:
                    13:17:02:a5:d8:67:f1:e8:94:fb:72:0d:b9:71:15:
                    94:2b:fa:ab:58:a7:6d:46:0f:56:f8:34:87:df:f0:
                    fc:4f:52:2a:e7:a1:f0:d3:2a:25:28:8b:7e:06:ad:
                    e0:41:38:ee:45:67:20:b8:64:32:10:d7:e6:8e:df:
                    ef:7c:5f:2e:68:1a:1b:74:bc:de:ad:99:92:ad:6b:
                    d4:66:2e:81:95:9e:95:58:e4:c8:b8:52:ee:53:b1:
                    db:e9:7f:b3:7e:17:34:25:91:0f:91:ae:0e:1d:36:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B7:36:19:E0:BF:07:DD:CC:38:E2:1A:43:53:9B:EC:F3:10:13:47
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:78:52:8b:a5:7e:67:6d:3b:02:c3:8f:db:d2:eb:f2:14:
         b4:8a:3f:08:48:78:e8:e0:3c:c6:53:e1:cb:bf:65:d3:fd:01:
         73:e9:4f:1e:74:57:25:cb:eb:44:26:3a:cb:78:79:61:a7:1b:
         02:ff:71:fe:68:49:f5:9c:18:5f:a6:ee:70:ed:bb:d5:c0:de:
         67:9e:0b:1b:60:40:b6:af:50:e7:73:55:7d:c2:cb:9a:2c:a1:
         b3:e3:af:10:aa:b2:e1:72:78:86:22:42:18:b8:fd:60:48:6c:
         e6:a2:0d:a7:98:01:b7:2a:12:8d:f8:2b:72:8e:ef:f2:ab:a8:
         fd:b9:33:80:06:1b:e1:35:c8:28:b9:04:38:f9:26:74:33:c2:
         05:af:83:28:a6:21:38:8b:cc:fd:b9:24:dd:f5:82:83:19:ae:
         aa:24:07:7b:40:09:b7:a1:0a:18:9c:94:9d:ed:25:38:f5:c7:
         d9:99:f0:96:73:83:d1:4f:05:3b:89:05:9d:f4:a8:22:67:88:
         1a:fe:9a:bb:56:b0:51:54:68:11:79:0c:74:98:74:3a:69:c4:
         9c:39:c4:16:83:e1:42:67:35:38:52:24:5a:6e:58:52:55:23:
         50:3d:e0:c2:e8:3c:f3:f7:77:1c:f0:49:3a:3b:a7:67:4d:ac:
         79:6d:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net