Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa
File:                     3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          JBku81KldgM0r8dWSQBPUMtms0d3zbXDsC67gXCKcm0=
Subject key identifier:   D7:B1:9A:CE:17:1C:C0:2B:CA:8E:F4:3B:1B:65:86:A3:08:DD:F4:45
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       326092F3D0A9C239EEF7CA5849E87721D3B2654F
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa
Signing time:             Sat 22 Oct 2022 04:34:07 +0000
ROA not before:           Sat 22 Oct 2022 04:29:07 +0000
ROA not after:            Sat 21 Oct 2023 04:34:07 +0000
asID:                     204170
IP address blocks:        185.222.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:60:92:f3:d0:a9:c2:39:ee:f7:ca:58:49:e8:77:21:d3:b2:65:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:07 2022 GMT
            Not After : Oct 21 04:34:07 2023 GMT
        Subject: CN=D7B19ACE171CC02BCA8EF43B1B6586A308DDF445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:5f:32:32:1a:44:30:55:71:13:14:b1:9e:
                    31:be:5d:93:ae:19:a4:41:03:0f:74:a5:0c:4b:a0:
                    e2:01:6f:62:d6:51:79:4e:08:f5:62:ea:56:a6:af:
                    7e:b7:a5:0a:be:47:7e:40:d6:71:a1:e8:20:23:12:
                    4d:72:c9:72:1e:de:df:60:8b:47:4f:ce:37:34:9f:
                    46:f7:5a:78:5c:f5:ed:48:da:cf:e4:9f:2c:0e:99:
                    a5:d2:eb:1c:77:35:b8:67:a4:13:76:c5:ee:0e:5e:
                    35:63:94:a6:52:8e:1f:d5:df:ae:4d:c1:09:97:52:
                    8f:00:be:5a:01:7b:ec:9d:8a:e2:2a:c1:1d:cc:1b:
                    d7:6b:84:5d:a2:7e:88:c7:b2:65:5c:9f:8a:7c:17:
                    b6:ef:51:42:2a:f5:6d:95:ec:52:56:45:ae:77:11:
                    9d:7b:a5:2b:1b:b2:43:df:98:8a:84:c8:70:db:cc:
                    62:05:5b:0d:a6:eb:5d:10:51:67:b2:a3:30:b5:af:
                    5e:56:15:82:b4:8c:4c:27:b0:a0:1f:21:4b:90:49:
                    a1:b2:c7:c4:73:db:4b:b0:db:18:80:98:91:79:88:
                    14:67:c9:ee:39:e7:3d:9b:51:dc:7a:0d:cd:f1:26:
                    b4:0b:05:58:20:6a:09:3c:99:c0:58:5c:73:84:08:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B1:9A:CE:17:1C:C0:2B:CA:8E:F4:3B:1B:65:86:A3:08:DD:F4:45
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:ae:7b:bb:d6:aa:6a:44:52:fb:97:71:85:c3:0c:6a:f5:65:
         66:42:61:88:b5:33:a1:bf:03:23:8d:d2:6e:1f:d6:f2:c3:fa:
         fe:9f:3c:d1:fd:fe:e9:60:50:94:5c:a3:c9:7d:24:fa:0b:42:
         10:01:9c:8c:50:73:56:ca:79:74:ad:65:a7:c1:13:76:c5:1a:
         c1:f8:fc:a6:54:fc:4a:3d:eb:c6:30:78:e9:99:41:fc:54:3d:
         17:5b:63:ad:f9:72:35:9e:34:d1:2b:e5:af:04:cd:45:99:4a:
         a1:a0:6c:51:13:da:cf:c3:d0:ec:35:72:61:ee:ac:fd:7b:1e:
         52:be:61:e5:cb:70:90:7a:b1:78:f3:5d:de:18:64:9f:60:1b:
         8b:4c:45:61:94:3f:a1:1d:eb:0d:f0:3a:e2:84:32:e5:3f:e3:
         57:0c:07:2e:90:8c:91:07:ba:4c:24:09:9f:0c:e0:59:3f:fc:
         e2:f5:d2:de:2c:36:81:b8:a2:23:b3:f4:03:df:6e:51:d1:63:
         4a:e5:d3:7d:f1:d3:9f:17:aa:c8:e1:32:e9:83:8e:ca:85:ee:
         fb:d6:ca:f9:ea:69:3b:d6:43:c9:b1:a6:85:14:90:03:aa:09:
         8d:86:3d:73:a3:f5:26:9b:3e:bf:90:11:4b:ae:fc:77:28:c5:
         5a:60:71:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org