Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137342e3230372e302f32342d3234203d3e203631333137.roa
File:                     3138352e3137342e3230372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          KMfDXSSwu0MDLnlM4KnNPQQYIoDy3RuhnSsyF/Fz9lA=
Subject key identifier:   54:4C:96:EF:2D:16:6E:22:B7:BD:DC:E6:88:F9:BC:B9:5F:6D:75:7F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       28E448A25839533DE39FDBFCE7532C155DD586BC
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137342e3230372e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:35 +0000
ROA not before:           Fri 27 Nov 2020 15:05:35 +0000
ROA not after:            Fri 26 Nov 2021 15:10:35 +0000
asID:                     61317
IP address blocks:        185.174.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e4:48:a2:58:39:53:3d:e3:9f:db:fc:e7:53:2c:15:5d:d5:86:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:35 2020 GMT
            Not After : Nov 26 15:10:35 2021 GMT
        Subject: CN=3082010A0282010100DF4FABF3D00902D6DCD0B272E794C91230C9AEE1AB1422193F759874BCB16E989C2C55640643F106AED76C33B5858E721CF1353629ABD164638A99FA950A0F77DD32E54F397597FCA60225976521CC7601550C07AEB0500F18031070131B5782D315E290ECD89492059805AD3AA95C948D8A146101BE344B0FC48C8DBD2546CF4E1574832215C487CBC2F9D64CE088C4D941A4A2DA1B17A6E248067FAE20BCCB61FE358DDFB3194E7B190B8C56DF0E16F556A9F4D53EDA3A81CA860D9C5980D612DF4E5923E701C5DEF4F24A50794C9B3741FFFF2064BF52FE1A927F91F234E101FC23BDC22A02BC60CB32CEA10E373F789937859D5CE0CCF28C4AE148A29FBD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4f:ab:f3:d0:09:02:d6:dc:d0:b2:72:e7:94:
                    c9:12:30:c9:ae:e1:ab:14:22:19:3f:75:98:74:bc:
                    b1:6e:98:9c:2c:55:64:06:43:f1:06:ae:d7:6c:33:
                    b5:85:8e:72:1c:f1:35:36:29:ab:d1:64:63:8a:99:
                    fa:95:0a:0f:77:dd:32:e5:4f:39:75:97:fc:a6:02:
                    25:97:65:21:cc:76:01:55:0c:07:ae:b0:50:0f:18:
                    03:10:70:13:1b:57:82:d3:15:e2:90:ec:d8:94:92:
                    05:98:05:ad:3a:a9:5c:94:8d:8a:14:61:01:be:34:
                    4b:0f:c4:8c:8d:bd:25:46:cf:4e:15:74:83:22:15:
                    c4:87:cb:c2:f9:d6:4c:e0:88:c4:d9:41:a4:a2:da:
                    1b:17:a6:e2:48:06:7f:ae:20:bc:cb:61:fe:35:8d:
                    df:b3:19:4e:7b:19:0b:8c:56:df:0e:16:f5:56:a9:
                    f4:d5:3e:da:3a:81:ca:86:0d:9c:59:80:d6:12:df:
                    4e:59:23:e7:01:c5:de:f4:f2:4a:50:79:4c:9b:37:
                    41:ff:ff:20:64:bf:52:fe:1a:92:7f:91:f2:34:e1:
                    01:fc:23:bd:c2:2a:02:bc:60:cb:32:ce:a1:0e:37:
                    3f:78:99:37:85:9d:5c:e0:cc:f2:8c:4a:e1:48:a2:
                    9f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4C:96:EF:2D:16:6E:22:B7:BD:DC:E6:88:F9:BC:B9:5F:6D:75:7F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137342e3230372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.174.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:63:d1:07:f3:2e:25:45:47:40:02:7d:a9:3e:e5:3c:f5:e9:
         ec:62:93:9f:9a:f5:50:21:ea:16:31:38:c0:ca:2a:ab:ff:ec:
         bf:fe:fb:52:34:43:86:69:0f:b6:66:0c:5a:9d:8d:ae:ed:51:
         bd:4e:5a:5a:7b:13:6c:75:00:47:24:0f:52:6b:d4:21:be:6e:
         78:c1:f4:af:5d:16:25:dd:df:82:55:fe:72:86:a8:bf:f0:2d:
         54:54:d9:43:35:2c:53:ef:0e:2f:cd:a3:9c:d9:d3:ee:b1:ef:
         01:29:e6:7f:0a:6d:ee:41:b5:b6:92:b7:0d:f5:08:88:b5:de:
         1a:c7:61:ff:71:e8:5c:77:01:8f:21:18:89:98:77:57:18:fa:
         de:3d:3e:7e:19:3c:4c:3b:28:f5:be:73:2b:53:bb:40:cd:4d:
         2e:24:d4:4c:d3:4f:ab:f7:cf:6c:b8:5d:69:3d:b3:c7:3d:27:
         9d:e3:25:94:42:54:19:88:6e:c6:ec:89:eb:17:d8:77:16:27:
         f1:11:6c:9d:c1:cd:c4:0d:f5:0c:fa:8a:1f:b9:10:ba:50:79:
         51:77:90:fd:a0:08:44:d4:99:66:ae:75:ce:8f:b2:26:50:ea:
         31:6d:2d:bf:14:00:b5:e2:01:a8:dd:68:ea:9c:06:d2:9c:cf:
         8a:e5:0f:83
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUKORIolg5Uz3jn9v851MsFV3VhrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMDExMjcxNTA1MzVaFw0yMTExMjYxNTEwMzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREY0RkFCRjNEMDA5MDJENkRD
RDBCMjcyRTc5NEM5MTIzMEM5QUVFMUFCMTQyMjE5M0Y3NTk4NzRCQ0IxNkU5ODlD
MkM1NTY0MDY0M0YxMDZBRUQ3NkMzM0I1ODU4RTcyMUNGMTM1MzYyOUFCRDE2NDYz
OEE5OUZBOTUwQTBGNzdERDMyRTU0RjM5NzU5N0ZDQTYwMjI1OTc2NTIxQ0M3NjAx
NTUwQzA3QUVCMDUwMEYxODAzMTA3MDEzMUI1NzgyRDMxNUUyOTBFQ0Q4OTQ5MjA1
OTgwNUFEM0FBOTVDOTQ4RDhBMTQ2MTAxQkUzNDRCMEZDNDhDOERCRDI1NDZDRjRF
MTU3NDgzMjIxNUM0ODdDQkMyRjlENjRDRTA4OEM0RDk0MUE0QTJEQTFCMTdBNkUy
NDgwNjdGQUUyMEJDQ0I2MUZFMzU4RERGQjMxOTRFN0IxOTBCOEM1NkRGMEUxNkY1
NTZBOUY0RDUzRURBM0E4MUNBODYwRDlDNTk4MEQ2MTJERjRFNTkyM0U3MDFDNURF
RjRGMjRBNTA3OTRDOUIzNzQxRkZGRjIwNjRCRjUyRkUxQTkyN0Y5MUYyMzRFMTAx
RkMyM0JEQzIyQTAyQkM2MENCMzJDRUExMEUzNzNGNzg5OTM3ODU5RDVDRTBDQ0Yy
OEM0QUUxNDhBMjlGQkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA30+r89AJAtbc0LJy55TJEjDJruGrFCIZP3WYdLyxbpicLFVkBkPx
Bq7XbDO1hY5yHPE1Nimr0WRjipn6lQoPd90y5U85dZf8pgIll2UhzHYBVQwHrrBQ
DxgDEHATG1eC0xXikOzYlJIFmAWtOqlclI2KFGEBvjRLD8SMjb0lRs9OFXSDIhXE
h8vC+dZM4IjE2UGkotobF6biSAZ/riC8y2H+NY3fsxlOexkLjFbfDhb1Vqn01T7a
OoHKhg2cWYDWEt9OWSPnAcXe9PJKUHlMmzdB//8gZL9S/hqSf5HyNOEB/CO9wioC
vGDLMs6hDjc/eJk3hZ1c4MzyjErhSKKfvQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FFRMlu8tFm4it73c5oj5vLlfbXV/MB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzQvMzEzODM1MmUzMTM3MzQyZTMy
MzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5rs8wDQYJKoZIhvcNAQELBQADggEBAKhj0QfzLiVFR0ACfak+5Tz16exik5+a
9VAh6hYxOMDKKqv/7L/++1I0Q4ZpD7ZmDFqdja7tUb1OWlp7E2x1AEckD1Jr1CG+
bnjB9K9dFiXd34JV/nKGqL/wLVRU2UM1LFPvDi/No5zZ0+6x7wEp5n8Kbe5BtbaS
tw31CIi13hrHYf9x6Fx3AY8hGImYd1cY+t49Pn4ZPEw7KPW+cytTu0DNTS4k1EzT
T6v3z2y4XWk9s8c9J53jJZRCVBmIbsbsiesX2HcWJ/ERbJ3BzcQN9Qz6ih+5ELpQ
eVF3kP2gCETUmWaudc6PsiZQ6jFtLb8UALXiAajdaOqcBtKcz4rlD4M=
-----END CERTIFICATE-----