Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234312e3233362e302f32332d3234203d3e20323037353934.roa
File:                     3138352e3234312e3233362e302f32332d3234203d3e20323037353934.roa (raw, json)
Hash identifier:          87bI0eH1xjYYFq73tbqMVq5dYby1ZXl+nStbVd2AdQ4=
Subject key identifier:   7A:63:11:0B:11:DC:3A:AC:34:3C:1D:46:24:A0:3F:AE:D5:43:DF:3D
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       018F57944E8AE76B9A5979E48A7F8BDC97F0CF0D
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234312e3233362e302f32332d3234203d3e20323037353934.roa
Signing time:             Tue 31 Jan 2023 16:06:22 +0000
ROA not before:           Tue 31 Jan 2023 16:01:22 +0000
ROA not after:            Tue 30 Jan 2024 16:06:22 +0000
asID:                     207594
IP address blocks:        185.241.236.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:94:4e:8a:e7:6b:9a:59:79:e4:8a:7f:8b:dc:97:f0:cf:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Jan 31 16:01:22 2023 GMT
            Not After : Jan 30 16:06:22 2024 GMT
        Subject: CN=7A63110B11DC3AAC343C1D4624A03FAED543DF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:ca:80:c2:b9:d5:b3:b3:5f:c2:fe:81:e7:
                    23:55:1f:41:ed:6c:07:8a:56:8e:8b:65:3e:a4:50:
                    3f:6c:5d:8d:ec:aa:7a:4c:95:0f:87:97:75:af:69:
                    c3:f7:84:b1:69:64:fa:09:d5:ac:cb:bf:a3:d0:33:
                    ca:0f:7e:20:02:e8:d8:d3:99:c7:a5:12:48:90:75:
                    e1:de:da:ed:51:cc:41:8b:b1:cf:e2:db:aa:50:1b:
                    39:dc:76:b9:6c:c6:da:d8:89:02:f0:8f:a8:ef:d3:
                    9f:5c:49:b7:1c:69:2b:71:54:79:f5:6f:c1:05:9a:
                    25:85:b9:ed:de:a5:81:88:bb:98:34:c2:ca:3a:a1:
                    11:86:03:96:15:8c:ea:b6:f9:1c:d9:c2:7c:42:74:
                    be:22:8c:2e:07:3f:8a:6e:54:85:39:35:dc:7d:b3:
                    dd:88:2b:9b:ef:eb:a7:0e:ea:0d:21:79:80:a4:0c:
                    a2:ed:19:02:d7:95:b1:5e:44:51:b2:cd:6b:a5:38:
                    58:8f:64:b7:73:af:ce:22:6d:69:49:16:3b:a2:88:
                    12:34:a1:e2:08:c6:ce:8b:00:7b:3e:e8:02:f9:0a:
                    50:8c:4f:82:30:ef:2f:04:e7:ca:f9:6f:71:22:c2:
                    56:85:ed:f2:86:96:e7:9b:85:e6:2f:db:8c:45:2d:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:63:11:0B:11:DC:3A:AC:34:3C:1D:46:24:A0:3F:AE:D5:43:DF:3D
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234312e3233362e302f32332d3234203d3e20323037353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:0e:5e:33:af:5b:9c:f9:dd:1a:6f:fd:68:7a:72:0e:e4:fe:
         ae:c7:36:69:13:70:57:d5:0f:55:db:e0:80:de:2b:fa:63:69:
         75:fd:b5:2c:2e:21:33:09:dd:93:9b:dc:84:ae:cc:cb:1a:c1:
         42:fb:44:cb:22:51:73:4a:c6:d3:b4:e1:28:a2:50:bd:8c:62:
         a3:92:51:74:57:c1:07:ad:2d:d8:cf:2d:59:65:1d:74:42:37:
         4c:da:ec:f1:91:96:ff:97:67:db:ee:ce:21:e1:25:3f:26:68:
         dc:b6:72:65:2d:04:3e:ca:74:c4:8b:1c:04:90:ed:22:96:0c:
         fa:f5:a3:8c:15:c9:53:8f:19:06:1a:62:57:3a:70:7c:1e:19:
         cf:90:e1:d4:94:7e:96:47:f6:81:33:66:b1:ff:bb:e5:dc:07:
         4a:e2:27:01:10:3e:69:c5:6d:67:87:44:ec:88:9c:00:15:84:
         d7:25:3b:47:aa:43:41:55:ab:d5:72:1f:17:3a:ab:48:2e:16:
         ea:8b:04:a7:c9:56:00:f2:ed:d8:2a:50:36:31:15:52:d0:f7:
         6a:74:2e:af:31:01:50:bd:a9:72:98:b2:37:49:3b:75:a5:0d:
         37:e2:88:66:b6:1b:ca:ea:b8:da:fa:85:ab:ed:65:2e:9b:2e:
         61:c7:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org