Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137372e3131362e302f32342d3234203d3e203631333137.roa
File:                     3138352e3137372e3131362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          G5qxhTYeDC5cxHEz8obBHwMFLLbB1I/xndxCWs5IQyw=
Subject key identifier:   F5:C7:89:37:E5:9C:88:F2:D1:AB:AA:1A:A0:48:F9:EF:91:0B:98:13
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       39D2F03ABFC8DE09A717754B57574DBE158EA4DE
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137372e3131362e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:44 +0000
ROA not before:           Tue 28 Jun 2022 04:35:44 +0000
ROA not after:            Tue 27 Jun 2023 04:40:44 +0000
asID:                     61317
IP address blocks:        185.177.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d2:f0:3a:bf:c8:de:09:a7:17:75:4b:57:57:4d:be:15:8e:a4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:44 2022 GMT
            Not After : Jun 27 04:40:44 2023 GMT
        Subject: CN=F5C78937E59C88F2D1ABAA1AA048F9EF910B9813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:52:b4:83:82:a2:c8:27:ba:3d:dd:1c:aa:
                    bd:85:2c:3c:97:71:9d:c1:f5:15:87:e5:4a:53:11:
                    d6:29:88:b9:90:07:73:19:9d:2a:08:35:83:e7:e7:
                    a0:22:4f:06:17:6e:c8:e5:31:78:97:f4:9e:3b:36:
                    d9:70:85:3d:e2:65:64:a4:93:4a:c1:3f:f3:78:99:
                    08:81:3d:ef:51:69:0b:f7:94:1a:13:59:f0:fe:8d:
                    cf:d7:52:3a:99:60:a0:65:c5:ed:6d:2a:62:f6:a5:
                    85:de:71:81:68:fb:ea:01:b6:c2:05:11:f8:2a:12:
                    04:0d:3b:e8:aa:9a:61:cf:4e:1d:09:a2:a0:bf:98:
                    fb:fc:e2:0a:e4:bf:ae:b4:73:8e:77:f0:6f:37:4e:
                    a5:93:be:38:f0:b4:fe:5d:ba:67:cc:83:7c:c9:f2:
                    e9:0b:dd:23:66:28:b6:31:c1:b0:71:c1:b7:bf:a1:
                    e4:9a:07:ed:a3:34:6c:0e:3f:6f:81:90:f1:f6:1f:
                    84:89:f0:da:e6:91:68:11:63:69:33:55:24:43:f3:
                    fc:9f:3a:8a:6d:5e:b7:c8:69:06:b0:eb:66:eb:4a:
                    39:2b:a8:ce:e1:4d:bd:1d:07:da:5e:93:82:ee:e6:
                    69:13:07:d3:a8:51:0a:f1:36:7c:54:2e:71:84:a9:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C7:89:37:E5:9C:88:F2:D1:AB:AA:1A:A0:48:F9:EF:91:0B:98:13
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137372e3131362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:2d:f6:5e:52:7a:33:65:f7:b9:98:3b:d9:a6:b3:e9:fc:49:
         5b:fe:59:c6:4d:f7:7f:2a:40:19:a3:0c:e3:02:26:7e:8a:e5:
         df:f9:6b:fe:25:8d:82:e6:8e:b5:fc:14:d6:83:b6:7d:b6:95:
         82:ca:e8:dd:8c:f4:45:c5:c9:5a:5a:22:c5:5d:36:43:ee:1b:
         d7:82:0a:6d:fd:ce:32:fd:9d:67:47:1d:c8:2f:77:4a:3c:e9:
         95:4a:22:a2:b9:4f:04:56:39:74:ae:8e:6f:26:75:4c:af:07:
         b6:1b:66:7e:36:4e:95:2e:41:d9:80:42:7c:d5:e6:02:10:37:
         d1:a3:56:ed:cc:91:1c:f0:a8:60:a8:2f:47:c6:f9:7c:f1:86:
         93:1a:e6:65:0e:94:51:c9:5d:18:ef:61:30:f0:8e:dc:c9:bf:
         7e:51:ac:ca:b0:7f:23:b2:9b:ca:24:7c:2a:8d:2c:52:66:3a:
         14:b8:28:3d:a5:89:17:66:ed:78:ca:8e:9e:f0:32:90:7f:d0:
         ac:d4:da:99:85:0d:73:d7:5b:42:6c:b5:d9:1e:b7:3a:e7:3d:
         8a:ae:c5:56:9c:f5:ca:ee:fe:3d:1a:eb:f1:66:78:72:26:7b:
         28:c9:0e:ca:e1:32:ce:ac:75:1f:67:8d:a5:1c:ab:46:57:f9:
         e7:28:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org