Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e203631333137.roa
File:                     3138352e3231312e33332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          CBLpJB0aLPmARPfC9jgUmXu4b0uhnxVVOwnCabXvEt4=
Subject key identifier:   AB:4C:7F:A9:B0:A6:E9:17:79:BD:46:D6:C2:02:47:16:E9:7C:C6:5F
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       0E5C29652ED20BDF50EFA2114ABB535933E5EF54
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:07 +0000
ROA not before:           Sat 22 Oct 2022 04:29:07 +0000
ROA not after:            Sat 21 Oct 2023 04:34:07 +0000
asID:                     61317
IP address blocks:        185.211.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5c:29:65:2e:d2:0b:df:50:ef:a2:11:4a:bb:53:59:33:e5:ef:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:07 2022 GMT
            Not After : Oct 21 04:34:07 2023 GMT
        Subject: CN=AB4C7FA9B0A6E91779BD46D6C2024716E97CC65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:06:24:2a:a3:e1:4b:30:d0:55:1f:ca:10:
                    0c:83:ce:30:93:ec:70:bb:a8:4e:e1:ae:80:85:7a:
                    00:fc:5e:a1:e9:57:62:78:99:a7:f7:28:99:6e:a5:
                    d7:db:2c:61:f3:93:90:2c:dd:53:f8:5f:ed:cb:91:
                    bf:c0:b8:d8:70:8c:0d:e5:48:38:cc:23:a1:97:f1:
                    b5:6b:4d:17:8b:88:49:37:fe:61:6b:78:9a:d6:cd:
                    16:ae:03:9c:a9:78:a4:c7:7b:46:e2:ec:e5:6e:96:
                    56:33:b1:07:e9:09:b8:8f:80:f2:89:07:a6:c3:db:
                    9d:22:4a:e2:76:3c:85:65:6a:46:53:d6:9b:f0:71:
                    fb:91:bc:7b:f8:6c:92:a5:3f:94:86:d4:ee:78:6d:
                    e3:06:ea:60:e3:c2:f1:0d:93:ea:37:8d:67:c8:b3:
                    8f:5a:01:f3:e0:16:e4:5f:65:b8:78:dd:d3:94:af:
                    f3:f0:b4:a8:d7:af:75:f8:68:e4:d2:02:66:73:d1:
                    36:a5:60:ba:31:9e:ee:c1:de:bb:e2:5f:fe:d3:84:
                    2d:85:b1:56:28:9c:de:f9:22:3d:ea:18:81:f8:2f:
                    ff:d2:4f:58:cd:c4:94:99:7d:f3:3d:73:f5:07:ed:
                    ad:22:2e:bb:1f:ec:df:f8:10:3c:fa:c1:49:19:dc:
                    d6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4C:7F:A9:B0:A6:E9:17:79:BD:46:D6:C2:02:47:16:E9:7C:C6:5F
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:38:ea:05:03:7e:77:15:fc:1e:74:d6:50:ab:6e:0c:ed:60:
         97:b7:1a:c4:f1:95:7a:38:53:c4:7d:e8:8e:b5:ff:24:f2:37:
         04:a1:05:f0:ad:9d:fa:64:0e:a2:55:aa:b3:8e:0f:7d:95:52:
         c8:8d:bf:4c:48:11:e6:17:ef:3c:70:e1:cf:4f:b4:2e:d8:28:
         d3:99:97:07:fc:54:87:5f:00:ba:ed:19:17:bd:d6:cc:cd:a6:
         42:c3:3a:13:4a:3f:77:45:5d:7b:29:4a:ed:51:16:54:99:b3:
         0a:83:4b:53:0c:c4:0d:8d:90:a0:77:72:c6:6a:b7:90:dc:12:
         c4:5b:22:c2:69:e0:3d:83:6d:28:14:a6:5b:09:80:88:5d:bf:
         3f:2b:c7:c6:a4:84:83:fa:96:78:66:98:62:89:a9:fa:24:4e:
         ac:22:8a:f0:ea:a6:50:77:2c:c0:34:32:f5:88:b2:cf:bc:e0:
         50:d4:11:02:1e:58:32:76:77:70:3a:f4:5b:d2:d7:3c:c3:3e:
         d5:69:ea:66:c6:36:99:ca:b9:15:35:73:a8:c5:db:54:bb:d0:
         f5:0e:f9:fc:93:db:7a:a2:d1:2e:8a:7e:07:b7:4c:71:f4:c6:
         db:3b:d3:81:64:e5:0e:ca:1f:a3:f2:ef:e9:51:d3:71:78:5b:
         e9:61:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org