Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233322e31342e302f32342d3234203d3e203437353833.roa
File:                     3138352e3233322e31342e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          uWfb60mC72eF5lttzsOBLoXr9/zAVNH9kcCL1iBRxvI=
Subject key identifier:   48:5B:EC:65:3A:AF:C4:9E:11:E7:31:B1:FF:36:40:93:EC:96:C2:B2
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       1E0A8B573ACF6603A6634921875CB0A6E96C2F9D
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233322e31342e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:05 +0000
ROA not before:           Sat 22 Oct 2022 04:29:05 +0000
ROA not after:            Sat 21 Oct 2023 04:34:05 +0000
asID:                     47583
IP address blocks:        185.232.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0a:8b:57:3a:cf:66:03:a6:63:49:21:87:5c:b0:a6:e9:6c:2f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:05 2022 GMT
            Not After : Oct 21 04:34:05 2023 GMT
        Subject: CN=485BEC653AAFC49E11E731B1FF364093EC96C2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:dd:e2:95:11:4b:59:ef:cc:c7:4a:a4:80:1e:
                    7d:90:c9:d2:ba:88:14:a4:93:f3:fb:27:7b:f6:c8:
                    5c:71:c6:50:23:61:6c:8a:d9:68:9f:0c:fe:de:da:
                    08:3e:9b:5e:cc:9f:8b:19:87:77:f7:14:fc:1f:a4:
                    b1:9a:31:0a:55:f6:95:5b:3f:b1:9c:f7:e9:5e:fe:
                    e2:cd:9b:f0:0c:91:3f:ff:d8:00:ab:46:a3:13:1d:
                    26:cb:b3:5a:15:c6:1b:aa:61:2f:83:45:c4:58:07:
                    f6:0d:6f:d5:d6:fe:ae:1b:24:c8:70:05:3c:bd:87:
                    02:58:9d:a9:a3:48:53:04:e8:8e:91:de:1e:8b:f3:
                    c1:e5:35:a2:51:22:fc:cc:6d:a1:7d:b2:2d:05:4b:
                    0d:df:b3:31:9b:fa:ab:5d:63:f6:77:86:8a:a8:6f:
                    74:62:5a:cc:c9:21:af:e4:45:0a:13:8e:c6:11:69:
                    cc:ab:10:8f:bb:34:13:7a:2e:79:8e:a3:64:a4:5c:
                    c0:5f:7b:6d:fe:75:a5:db:f3:fa:4c:3c:b9:45:04:
                    1f:37:03:8f:c6:df:29:0f:43:74:f3:81:af:51:e4:
                    ea:9b:06:ef:ed:ea:32:98:95:c8:9d:fe:15:0b:1a:
                    6e:a4:07:df:62:27:85:2d:e3:c6:b9:66:cf:28:4b:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5B:EC:65:3A:AF:C4:9E:11:E7:31:B1:FF:36:40:93:EC:96:C2:B2
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233322e31342e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:62:ee:50:5a:c3:f5:f8:59:ab:43:17:f3:c5:33:b5:61:3e:
         0b:0d:00:a8:6a:05:12:02:9e:1f:a0:1d:73:da:68:f5:9b:9e:
         6f:c5:e8:a1:d7:15:fc:ba:b5:ba:10:d9:1a:79:64:0f:bf:2f:
         9d:22:58:f0:42:5b:eb:82:1b:91:be:c7:fb:27:d9:83:3f:30:
         09:35:62:20:f0:a4:56:ef:bb:73:f7:f6:18:f1:3e:5b:d8:ec:
         5c:32:58:be:8a:7b:f5:7e:2b:8d:0a:4d:57:6c:4e:53:bc:3a:
         88:49:a6:1a:a7:fd:47:e7:a8:bd:5d:7a:18:f1:fd:61:02:05:
         29:ea:d5:86:4d:df:67:55:c2:34:59:e1:28:b0:85:ec:3d:f3:
         55:e5:4e:3d:a4:d7:29:60:c6:1a:e2:9c:46:2b:12:ef:3c:6e:
         11:09:e6:34:26:e4:22:c6:1a:e1:06:b6:38:8f:bf:39:48:d4:
         f4:93:74:d8:83:19:00:ed:20:87:69:50:82:9e:bd:da:60:e1:
         6e:49:20:7c:72:c5:2c:b1:7f:19:3b:d1:30:9a:48:0c:a7:33:
         32:21:70:11:85:7c:89:d0:a0:10:dd:5b:f4:52:53:f3:87:59:
         79:b8:07:1a:12:ab:ac:e5:f1:9c:2e:9a:6b:4b:25:9b:ef:d0:
         61:19:f4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org