Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232392e3131322e302f32332d3234203d3e203437353833.roa
File:                     3138352e3232392e3131322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          6RlRddUGsFmu/07Q0DcPv5oGRJsuH7txpXFfZsrRQss=
Subject key identifier:   7D:84:67:F0:E4:F3:ED:7B:65:21:19:AB:82:D3:FD:87:16:D4:EA:0B
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       09C8576CF182501145CCF790BB5E845C75055C0C
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232392e3131322e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:06 +0000
ROA not before:           Sat 22 Oct 2022 04:29:06 +0000
ROA not after:            Sat 21 Oct 2023 04:34:06 +0000
asID:                     47583
IP address blocks:        185.229.112.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c8:57:6c:f1:82:50:11:45:cc:f7:90:bb:5e:84:5c:75:05:5c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:06 2022 GMT
            Not After : Oct 21 04:34:06 2023 GMT
        Subject: CN=7D8467F0E4F3ED7B652119AB82D3FD8716D4EA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:cc:40:9e:e2:b1:6b:c5:8b:66:73:fc:db:
                    45:6c:b7:37:06:f2:c0:ed:4a:11:fa:8f:b1:9b:25:
                    c8:62:b5:a1:ff:8d:01:39:c2:3d:31:08:3c:36:fa:
                    1e:12:55:51:d3:52:bf:fb:f1:31:33:fc:81:83:eb:
                    95:cb:e0:35:bd:35:6d:3a:4a:bd:62:31:03:c3:9e:
                    35:58:41:58:9e:d0:f7:7d:a9:11:9d:f3:b5:b4:f2:
                    e9:91:4b:12:05:1b:34:68:15:32:5c:e1:14:39:16:
                    93:96:55:9e:eb:57:1e:9c:d2:c6:e9:a7:22:07:d5:
                    75:d6:2c:44:3b:a9:2e:6e:9c:13:0d:ff:eb:b6:60:
                    b1:aa:4f:b7:e9:0a:6a:9e:30:d9:4a:ac:0c:91:9d:
                    ee:cc:a2:92:f0:91:cf:8e:bb:8f:38:4f:61:06:e7:
                    35:87:b5:ff:66:f5:82:09:19:52:15:e8:28:51:ea:
                    d7:ef:54:6b:0b:bf:7e:71:71:91:52:8a:9b:22:ee:
                    5b:17:59:79:3a:5c:78:ce:a9:70:4b:68:6d:48:c4:
                    02:89:33:de:3d:76:ab:9e:0d:75:87:8d:07:28:f1:
                    5c:64:53:07:5b:d6:cc:4a:74:37:fc:b5:ec:d7:fd:
                    9c:6f:86:6e:d8:d9:f5:c3:c3:e8:89:0c:bf:0f:c6:
                    8f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:84:67:F0:E4:F3:ED:7B:65:21:19:AB:82:D3:FD:87:16:D4:EA:0B
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232392e3131322e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:60:62:ec:59:d8:4a:b8:d3:64:4f:b9:20:eb:0b:68:ba:c2:
         28:b1:09:38:3e:7f:32:b7:f1:f1:75:ab:1b:cd:60:07:aa:37:
         05:60:86:58:93:a7:48:0f:28:4a:d1:89:d5:f9:17:c1:2f:b0:
         83:34:61:f2:1c:b0:68:87:58:53:67:a7:05:53:10:dc:52:33:
         dc:cc:35:91:94:07:9f:bd:6c:18:ca:fd:10:ee:fb:14:72:fc:
         ce:bc:6a:8e:ce:7e:4f:a8:c6:02:87:46:6e:bc:89:35:7d:de:
         9f:8d:c5:4e:58:46:e2:a2:48:0f:27:e1:ef:a2:75:6a:36:e5:
         54:a2:e0:ee:c9:33:56:e3:a6:7c:e1:3f:24:84:5c:e7:25:b2:
         89:c5:69:dc:de:e3:a0:cb:8a:8f:2e:53:58:8d:e5:57:bc:a3:
         e4:e8:e6:f7:bb:d3:db:a5:8a:35:27:c7:df:53:5f:72:3c:ed:
         b4:be:a5:01:97:17:1a:cc:1c:8b:3e:f9:0f:b2:fd:a2:0d:78:
         2d:44:47:0c:13:80:a4:1a:5b:0c:26:07:02:00:bc:e8:35:1c:
         a0:a0:21:e4:96:3b:86:53:6d:e1:09:11:97:95:82:3e:df:d3:
         80:69:3f:65:1b:fa:6a:c8:6f:ba:ae:93:54:86:e7:06:a2:b8:
         9e:93:f8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org