Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3232203d3e203236363336.roa
File:                     39332e3137372e39362e302f32322d3232203d3e203236363336.roa (raw, json)
Hash identifier:          MMnN9XJddhYCqrUde4oJWREgIgRFcPIcEIeSh4DJMik=
Subject key identifier:   8E:B9:17:8A:0C:06:CC:6A:2D:AD:26:A6:22:84:E0:5B:4E:34:20:F5
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       4A36F204E1D71B127F5E3F7E30EA81B848B7FD23
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3232203d3e203236363336.roa
Signing time:             Tue 28 Jun 2022 04:40:16 +0000
ROA not before:           Tue 28 Jun 2022 04:35:16 +0000
ROA not after:            Tue 27 Jun 2023 04:40:16 +0000
asID:                     26636
IP address blocks:        93.177.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:36:f2:04:e1:d7:1b:12:7f:5e:3f:7e:30:ea:81:b8:48:b7:fd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Jun 28 04:35:16 2022 GMT
            Not After : Jun 27 04:40:16 2023 GMT
        Subject: CN=8EB9178A0C06CC6A2DAD26A62284E05B4E3420F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:95:13:a5:10:9e:2c:e9:d7:30:c1:e7:1f:c5:
                    5e:fd:0a:8c:53:b1:98:72:c5:bd:84:37:ef:d9:93:
                    4b:15:1c:d2:77:57:bd:9a:a8:33:e8:14:bc:1a:14:
                    3e:ff:f9:33:7e:f0:6d:3d:e7:90:1c:c3:fe:c9:04:
                    77:3e:9f:f9:24:9e:7f:20:2a:24:da:62:bb:be:99:
                    da:cc:75:a9:36:93:f7:f8:d1:5e:9d:b1:b9:34:33:
                    b1:ed:6a:40:bc:e9:7a:06:06:97:17:0c:a4:6e:44:
                    e0:61:59:26:b5:ac:6d:63:d8:73:96:17:76:aa:db:
                    b1:59:93:27:ef:8f:24:d6:8b:0c:fe:13:a4:9e:ff:
                    91:fd:a8:5f:f0:e2:67:c3:07:3e:2e:4a:23:c6:58:
                    b3:8b:f5:a8:56:32:a2:ce:bf:67:5a:4a:39:9d:9b:
                    f4:1e:15:17:36:81:f1:dd:b6:c3:a7:3c:78:25:40:
                    c9:a3:6f:a4:f7:28:27:fb:60:a2:85:70:1d:6b:eb:
                    37:c1:98:c7:e8:2c:5e:5f:5e:5a:d1:14:b6:26:b5:
                    31:62:3d:07:10:15:63:82:17:b8:c3:7e:19:95:88:
                    60:46:4f:77:00:ab:d3:19:f3:a8:34:33:1a:25:f6:
                    65:9d:0f:9a:d5:26:fa:0e:e8:72:13:6f:a1:a6:57:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B9:17:8A:0C:06:CC:6A:2D:AD:26:A6:22:84:E0:5B:4E:34:20:F5
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3232203d3e203236363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:0d:23:5f:bd:c2:84:81:1a:80:05:14:9d:a5:72:db:dd:ab:
         87:c8:6e:7f:cd:d3:f5:b1:91:b4:24:b9:63:6f:64:49:26:91:
         c8:94:57:28:df:8a:ab:ac:56:36:e1:b7:ee:ad:19:d4:f9:4f:
         f6:58:9c:80:d3:88:8e:55:cc:c1:69:af:0f:dd:6e:94:4b:74:
         f6:97:1f:22:5e:a6:5d:1f:aa:24:09:d6:48:8b:57:e3:0f:00:
         1a:97:3f:3d:fc:ce:02:05:82:55:bb:eb:23:38:28:7b:e3:ad:
         17:43:36:33:5a:64:18:6a:ca:66:e1:7c:16:5c:2e:8a:1c:1f:
         a9:1b:73:d5:06:aa:b5:c4:b1:b2:ac:be:69:d2:e9:f6:7b:2d:
         96:f0:30:c4:f4:4a:97:2e:07:22:78:1c:0e:36:35:b1:f9:6c:
         8d:ba:87:2d:b1:90:b4:ab:a0:b4:f6:6b:67:88:69:d4:ec:51:
         94:74:87:be:e4:eb:5c:95:9a:d8:77:d9:3c:81:86:c4:05:2d:
         c1:b0:fa:67:bf:3c:54:7d:48:3d:f3:0b:ee:f9:45:eb:e1:57:
         48:11:11:86:69:59:84:36:76:c0:c3:96:27:cd:ef:7b:99:c6:
         84:69:60:53:8d:38:8e:02:9b:ff:e9:09:df:de:48:d8:a1:b8:
         c5:32:b0:ef
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUSjbyBOHXGxJ/Xj9+MOqBuEi3/SMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjA2MjgwNDM1MTZaFw0yMzA2MjcwNDQwMTZaMDMxMTAvBgNV
BAMTKDhFQjkxNzhBMEMwNkNDNkEyREFEMjZBNjIyODRFMDVCNEUzNDIwRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUlROlEJ4s6dcwwecfxV79CoxT
sZhyxb2EN+/Zk0sVHNJ3V72aqDPoFLwaFD7/+TN+8G0955Acw/7JBHc+n/kknn8g
KiTaYru+mdrMdak2k/f40V6dsbk0M7HtakC86XoGBpcXDKRuROBhWSa1rG1j2HOW
F3aq27FZkyfvjyTWiwz+E6Se/5H9qF/w4mfDBz4uSiPGWLOL9ahWMqLOv2daSjmd
m/QeFRc2gfHdtsOnPHglQMmjb6T3KCf7YKKFcB1r6zfBmMfoLF5fXlrRFLYmtTFi
PQcQFWOCF7jDfhmViGBGT3cAq9MZ86g0Mxol9mWdD5rVJvoO6HITb6GmVwx7AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUjrkXigwGzGotrSamIoTgW040IPUwHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zOTMzMmUzMTM3MzcyZTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCXbFgMA0GCSqGSIb3DQEBCwUAA4IBAQC0DSNfvcKE
gRqABRSdpXLb3auHyG5/zdP1sZG0JLljb2RJJpHIlFco34qrrFY24bfurRnU+U/2
WJyA04iOVczBaa8P3W6US3T2lx8iXqZdH6okCdZIi1fjDwAalz89/M4CBYJVu+sj
OCh7460XQzYzWmQYaspm4XwWXC6KHB+pG3PVBqq1xLGyrL5p0un2ey2W8DDE9EqX
LgcieBwONjWx+WyNuoctsZC0q6C09mtniGnU7FGUdIe+5OtclZrYd9k8gYbEBS3B
sPpnvzxUfUg98wvu+UXr4VdIERGGaVmENnbAw5Ynze97mcaEaWBTjTiOApv/6Qnf
3kjYobjFMrDv
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net