Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233372e3134362e302f32332d3234203d3e203437353833.roa
File:                     3138352e3233372e3134362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          0Usjzx331aCWTydohg6ltM3x+qsGUsezViNucM9ztcM=
Subject key identifier:   7E:8D:90:71:AD:47:D8:15:D0:89:15:C6:24:DE:E7:FB:3D:08:F3:81
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       657FD870026C8AE83CBCFEA78963A4083725F7EE
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233372e3134362e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:08 +0000
ROA not before:           Sat 22 Oct 2022 04:29:08 +0000
ROA not after:            Sat 21 Oct 2023 04:34:08 +0000
asID:                     47583
IP address blocks:        185.237.146.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7f:d8:70:02:6c:8a:e8:3c:bc:fe:a7:89:63:a4:08:37:25:f7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:08 2022 GMT
            Not After : Oct 21 04:34:08 2023 GMT
        Subject: CN=7E8D9071AD47D815D08915C624DEE7FB3D08F381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:a4:45:7e:02:dc:b3:a9:df:19:69:0d:9c:
                    ec:0e:96:9b:a5:91:51:59:fa:4a:ca:d2:62:48:2e:
                    90:a8:c1:4b:5a:e7:22:ce:de:14:a6:33:87:74:32:
                    dc:91:f7:c4:5e:b9:88:46:77:57:b8:3a:e7:61:3e:
                    70:10:b1:68:6a:b0:ce:76:e1:9f:cd:a0:3c:83:18:
                    6b:28:7a:9f:88:cc:14:83:39:01:cf:80:1a:01:51:
                    54:68:b1:11:41:72:d7:3c:b6:35:65:69:aa:58:90:
                    fb:36:c8:07:89:7e:ad:4d:2a:c1:71:5e:88:61:84:
                    d7:30:0a:a3:c7:86:59:5d:d2:43:0d:69:5c:2c:e6:
                    54:f3:53:bd:75:a1:1e:de:9d:9d:55:c0:1f:d7:b2:
                    24:03:56:a0:80:75:d5:b4:6d:28:df:f5:6c:85:e4:
                    4d:e8:90:44:d7:c1:d0:1f:40:c3:78:81:c8:a4:f4:
                    82:1e:56:f8:1b:bc:19:ba:2c:58:da:16:ce:a7:55:
                    0c:e8:43:e6:7d:9f:a9:ca:21:6b:f3:d0:cc:98:00:
                    5c:49:32:04:96:99:12:62:ed:20:43:ec:db:81:7a:
                    aa:3c:23:1a:36:cf:35:48:81:5c:1b:89:58:13:e7:
                    3e:25:0d:5e:be:3d:1a:1c:f7:77:b3:93:98:32:28:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8D:90:71:AD:47:D8:15:D0:89:15:C6:24:DE:E7:FB:3D:08:F3:81
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233372e3134362e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:d4:5f:ca:c9:bb:7f:01:fc:f7:a6:fb:11:38:45:1b:f2:0d:
         ed:c0:2b:a1:e7:c9:c8:31:e1:2b:f0:57:27:c2:c1:a1:01:7b:
         1f:c1:17:85:77:87:05:cf:0f:16:d3:38:40:81:c6:01:f0:6f:
         b8:60:07:de:cd:10:0f:0e:58:71:24:c8:15:7e:c6:78:c6:8d:
         7b:63:c4:f8:01:95:dc:42:44:51:02:4f:e2:bb:c0:64:ac:fa:
         22:f1:6d:69:04:d4:0f:3d:11:9e:92:83:68:da:0f:34:c6:19:
         29:c6:27:88:e8:68:30:1b:c7:d8:9d:ef:27:16:f5:d1:96:5f:
         67:fa:dd:61:78:41:e5:3a:ba:06:ef:b2:17:b8:76:27:94:e9:
         46:02:4a:f9:97:63:8b:45:6a:8d:e9:b2:ad:f3:ea:75:5e:b6:
         3f:51:08:5b:6e:e7:34:f3:e0:0b:76:d2:1e:19:30:80:a0:46:
         3f:67:b0:f9:35:45:54:45:bd:de:61:b9:9e:40:75:5d:4f:80:
         b1:94:da:62:48:0e:06:6b:2d:8d:00:bc:59:04:0d:5f:05:54:
         64:8d:28:f9:38:53:37:b8:ac:50:57:0a:55:dd:e8:21:89:ca:
         e0:7e:16:f6:a7:a5:d0:ec:75:b2:29:3f:53:0b:d4:49:3d:ae:
         4e:96:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org