Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3233203d3e2037393232.roa
File:                     3138352e3139322e39362e302f32332d3233203d3e2037393232.roa (raw, json)
Hash identifier:          T9x4JoV42aIdnUuFTIwvM4Z1q7E13Udhz1OrDlPVX60=
Subject key identifier:   00:9E:60:AC:DC:F8:6D:52:0A:E7:FD:F0:87:A5:3B:CA:E2:54:79:AA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       35223D439039D47D836D71510D911509A171F98C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3233203d3e2037393232.roa
Signing time:             Tue 28 Jun 2022 04:40:34 +0000
ROA not before:           Tue 28 Jun 2022 04:35:34 +0000
ROA not after:            Tue 27 Jun 2023 04:40:34 +0000
asID:                     7922
IP address blocks:        185.192.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:22:3d:43:90:39:d4:7d:83:6d:71:51:0d:91:15:09:a1:71:f9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:34 2022 GMT
            Not After : Jun 27 04:40:34 2023 GMT
        Subject: CN=009E60ACDCF86D520AE7FDF087A53BCAE25479AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:9d:72:4c:8c:46:f0:4d:78:21:fb:da:37:
                    b0:ed:b4:46:2b:ee:57:4b:f6:ef:35:ab:8a:6e:00:
                    83:b2:c0:b9:b8:69:57:05:63:00:a2:c3:e3:98:bc:
                    c6:55:8f:e6:22:4b:bb:e1:5d:57:f4:9d:b5:61:49:
                    49:0f:62:b4:30:97:fb:3c:59:8a:79:8b:74:9f:9b:
                    ac:3b:d6:06:f8:fd:da:03:44:ff:61:37:94:48:06:
                    f9:6d:b8:25:2a:42:55:b3:2c:6b:56:cf:19:3e:86:
                    67:21:94:ce:d3:df:f2:d2:94:de:2f:cc:6b:8d:2a:
                    28:81:f7:83:f6:d7:67:04:a6:6f:31:dd:63:e6:02:
                    36:59:da:09:01:23:58:9a:ea:36:b5:bc:83:f1:65:
                    0a:ae:11:95:c4:66:eb:e6:66:b6:54:52:54:3b:0f:
                    b3:c4:a0:ce:d3:16:06:e6:d3:56:3c:69:6b:5b:9a:
                    34:b7:b0:81:f3:ce:2f:ce:96:41:48:ea:35:d9:de:
                    a8:c3:7d:20:72:ea:d0:cb:be:c7:a7:8f:46:89:df:
                    54:a1:20:da:24:95:1e:2d:e1:22:0b:c4:69:15:9a:
                    e2:63:8f:39:0b:30:3b:3e:60:c1:84:cc:4c:08:a8:
                    9a:22:24:1b:b4:6f:1b:e8:97:63:03:7b:1f:0c:d0:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9E:60:AC:DC:F8:6D:52:0A:E7:FD:F0:87:A5:3B:CA:E2:54:79:AA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3233203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:f7:7a:50:4a:71:f3:c7:c9:37:06:27:fa:de:77:d5:ca:ca:
         74:5f:63:93:ea:68:a1:e0:63:c6:89:f7:2e:71:2f:84:d2:e4:
         17:a6:fb:9f:6a:db:db:48:31:bb:4f:95:e6:56:d4:4f:82:64:
         56:45:f1:40:c1:c2:6d:be:5a:98:5d:36:cc:18:6a:10:c1:a9:
         b3:36:2d:5e:9b:33:11:7b:33:c2:4c:1f:2b:ea:e3:71:ac:c0:
         83:b0:f5:e1:e9:5d:c2:3d:c1:78:f8:7f:37:64:e9:28:d7:2f:
         c0:e5:68:ff:10:13:ee:7f:04:2b:f9:dd:9c:80:a4:e2:4f:73:
         d1:02:d2:07:c5:99:72:48:d1:b8:59:80:86:fc:53:d2:77:e6:
         4d:62:51:8e:17:a6:49:d8:28:66:53:41:74:43:15:5c:07:46:
         56:67:9c:b3:83:a7:ae:7e:51:a9:ba:99:91:05:94:04:e8:87:
         5d:81:2d:bf:ed:85:f3:34:ce:f6:00:22:e1:eb:76:cd:60:84:
         d9:8c:66:81:b3:a3:13:b8:2b:41:cc:02:95:24:55:fe:6d:85:
         56:78:1c:d7:14:a5:f9:c5:03:1e:1f:b6:ef:87:15:4c:74:84:
         32:56:e3:c1:7b:0c:8f:80:61:a4:90:3f:d7:73:75:a8:34:e5:
         b5:ee:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org