Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131382e302f32332d3234203d3e203631333137.roa
File:                     3139332e3136302e3131382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          wqm/IWVi9iR18BY9u7OnZj37EbPRiwMmMjvkDkmr9tQ=
Subject key identifier:   17:CB:AB:4A:BD:63:02:65:78:53:2A:61:F7:C4:0C:BF:B1:54:E9:86
Certificate issuer:       /CN=58929d850c68341e7c7cf8411dcbab66a8ea09d8
Certificate serial:       051EFD353B4634263131FED254171EA9F9357A8C
Authority key identifier: 58:92:9D:85:0C:68:34:1E:7C:7C:F8:41:1D:CB:AB:66:A8:EA:09:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WJKdhQxoNB58fPhBHcurZqjqCdg.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131382e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 21 Dec 2020 12:54:09 +0000
ROA not before:           Mon 21 Dec 2020 12:49:09 +0000
ROA not after:            Mon 20 Dec 2021 12:54:09 +0000
asID:                     61317
IP address blocks:        193.160.118.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1e:fd:35:3b:46:34:26:31:31:fe:d2:54:17:1e:a9:f9:35:7a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58929d850c68341e7c7cf8411dcbab66a8ea09d8
        Validity
            Not Before: Dec 21 12:49:09 2020 GMT
            Not After : Dec 20 12:54:09 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:a7:48:45:72:66:b7:dd:60:e9:eb:10:0b:
                    4b:59:bd:b3:27:f1:c6:2e:b3:aa:dd:a7:f3:6f:05:
                    c2:0f:ac:3e:83:df:a1:84:bd:59:5e:53:07:ef:8e:
                    80:57:8d:7d:85:51:5a:f4:b1:2f:18:68:d4:27:30:
                    c7:bf:cf:d1:11:f5:c2:8b:ad:95:df:a2:e1:e3:29:
                    2d:c7:77:89:a7:a7:c8:62:06:fe:3a:96:40:b3:25:
                    67:ed:d9:c2:3a:51:bb:a2:0c:9a:5c:f9:80:54:b3:
                    f0:3a:00:47:d1:e9:bd:16:44:3e:ac:bc:34:f2:ba:
                    9a:5b:5e:9c:38:86:e6:80:fd:87:4f:52:d5:60:ba:
                    ca:97:0a:7e:63:13:36:77:7a:91:43:5a:6c:3c:0f:
                    da:b1:4a:62:c5:e3:6e:48:60:ac:ad:d4:8f:d3:35:
                    87:74:6e:11:9b:f0:ce:56:76:0c:d1:55:ac:40:89:
                    a7:c1:21:2c:13:89:bb:5a:72:cd:70:cd:96:ff:22:
                    7f:20:fc:31:84:a1:96:95:07:34:99:2f:96:bf:fc:
                    92:66:ed:6a:4b:c2:e7:c7:9f:88:11:4e:6f:0c:a4:
                    3f:7c:06:90:50:44:46:98:98:35:9b:be:3e:68:95:
                    e1:8a:52:60:1a:34:83:a5:21:17:96:6a:20:f5:1a:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CB:AB:4A:BD:63:02:65:78:53:2A:61:F7:C4:0C:BF:B1:54:E9:86
            X509v3 Authority Key Identifier:
                keyid:58:92:9D:85:0C:68:34:1E:7C:7C:F8:41:1D:CB:AB:66:A8:EA:09:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/163/58929D850C68341E7C7CF8411DCBAB66A8EA09D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WJKdhQxoNB58fPhBHcurZqjqCdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:09:37:d4:8f:28:67:75:2a:9d:f1:84:bb:6f:cc:b1:f3:5a:
         ca:45:e4:05:17:2a:e3:00:0f:08:52:8f:99:e5:9f:12:fc:89:
         2a:14:ae:5d:01:2e:f2:95:4d:a0:2f:6c:f6:98:dd:7c:5d:3d:
         f8:a7:5c:18:ef:b8:8e:61:b5:ea:e7:2f:ee:34:cd:a5:47:1c:
         e6:c9:cd:6e:67:f1:96:78:54:99:9f:f0:e3:8c:27:43:d5:2e:
         bd:be:56:25:f9:de:d0:0e:ec:b5:a3:fb:d7:1e:3d:a1:e7:31:
         a2:7b:99:60:e7:7b:d1:27:03:93:e3:39:6a:26:1b:62:73:c7:
         10:be:19:4e:a7:b8:3c:b9:98:73:78:b9:31:44:1c:3b:b3:af:
         e6:63:65:19:8f:97:2f:0c:a0:14:ee:83:d1:25:cd:0a:66:2d:
         a0:b6:2a:4c:3c:5c:48:44:4d:59:58:74:02:a6:3e:1c:38:40:
         ce:4e:24:b9:84:cc:67:c0:4d:c8:2b:40:5e:af:88:81:19:92:
         4f:ad:ad:7e:e7:34:7c:fe:4d:70:33:d6:3e:22:14:30:90:92:
         33:44:ec:3b:c9:8f:0b:3a:ac:ea:44:80:3d:a3:6e:30:8e:11:
         6f:59:e6:73:e1:dc:89:34:b8:a1:22:94:47:fa:9d:b0:b8:a3:
         7b:8b:27:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org