Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3234203d3e2033333536.roa
File:                     3138352e3139322e39362e302f32332d3234203d3e2033333536.roa (raw, json)
Hash identifier:          HkHuHubc/xk/mZJznkOBgETUeip3jC/cqb1iI6q7gX0=
Subject key identifier:   2F:05:F6:B7:CF:58:5A:66:EB:CF:8B:37:0F:12:C0:D3:80:D1:64:9E
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       238B43AA80A2664313F6A6237ED9C8B76A1B968E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3234203d3e2033333536.roa
Signing time:             Tue 28 Jun 2022 04:40:52 +0000
ROA not before:           Tue 28 Jun 2022 04:35:52 +0000
ROA not after:            Tue 27 Jun 2023 04:40:52 +0000
asID:                     3356
IP address blocks:        185.192.96.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8b:43:aa:80:a2:66:43:13:f6:a6:23:7e:d9:c8:b7:6a:1b:96:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:52 2022 GMT
            Not After : Jun 27 04:40:52 2023 GMT
        Subject: CN=2F05F6B7CF585A66EBCF8B370F12C0D380D1649E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:e9:30:d9:5c:35:10:b4:e3:d4:7b:68:3e:
                    44:cd:66:b5:88:22:0e:a3:f0:a1:2f:57:9b:ae:ac:
                    de:b1:d4:37:0b:e5:43:c1:9d:01:93:fc:00:81:7b:
                    8e:31:96:4d:8f:37:75:3c:fd:ac:77:3e:3d:ef:8d:
                    b4:c9:1d:34:42:05:d2:fe:30:08:b3:46:cd:c0:f1:
                    56:5c:cf:07:32:58:bf:03:d1:7f:9d:b3:ce:a1:b2:
                    3c:48:d0:32:e7:07:c8:fb:0b:fc:99:a9:eb:e6:80:
                    29:cb:1f:cf:77:4e:5a:d3:cd:b2:b8:80:d9:ba:e7:
                    a0:4c:46:99:0e:fd:cb:27:7f:6a:ee:07:2f:f7:e2:
                    e4:e0:f4:17:b4:7d:a4:65:17:fc:86:85:9b:70:26:
                    77:46:8c:51:c5:25:d1:e7:95:1c:8b:7e:1b:67:49:
                    4b:a9:9b:a0:48:49:4a:ea:89:d6:3a:17:34:9a:ae:
                    81:a1:45:13:65:ac:6d:42:d0:36:53:5f:47:df:0e:
                    91:ff:e6:ee:23:02:26:3b:35:4e:2e:bc:d8:0d:2a:
                    03:5c:5d:03:30:ef:54:47:ca:01:12:dd:1a:0d:7c:
                    06:8a:d7:41:c9:fc:c0:5a:20:97:b5:a3:b5:ed:2a:
                    8f:ef:7d:52:8f:ce:db:1d:f8:e6:15:1d:bd:b8:5f:
                    d9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:05:F6:B7:CF:58:5A:66:EB:CF:8B:37:0F:12:C0:D3:80:D1:64:9E
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:ae:29:da:8d:fc:c1:f8:7c:13:bd:c4:d0:4f:2c:e7:27:
         95:20:7d:f9:63:c6:f5:fd:a1:16:d4:81:c8:95:97:fb:f9:8b:
         8f:7c:16:ff:41:14:10:02:0f:05:55:66:a3:9a:f2:85:7a:83:
         ea:65:d2:99:bd:ce:f4:c2:72:1f:ca:8e:17:35:1f:c8:49:3b:
         a5:05:88:ca:01:60:10:5b:67:69:05:3b:14:d2:20:11:7f:d4:
         25:d3:9b:bc:8c:e2:f3:db:a2:fb:2f:01:c1:6f:8d:83:e6:b8:
         73:e3:d1:a5:aa:2f:8a:5b:9a:1d:88:74:fe:02:4e:1f:52:be:
         7a:42:9e:06:a3:94:c9:df:b7:c0:6c:7a:9b:d7:f2:c0:b9:ec:
         60:97:cc:fa:d7:a3:e9:32:a6:20:96:a4:e9:cf:25:fa:31:96:
         ee:01:b7:f1:e4:0b:c9:f9:d7:f1:29:f0:ad:5b:7a:3d:14:42:
         eb:3b:5c:aa:e0:86:7f:83:46:8b:8c:98:16:5c:d9:0e:1c:a6:
         fc:54:d3:b2:dd:03:11:30:6b:a4:93:fe:44:f8:43:45:9d:9e:
         f4:8d:7d:0c:dd:f9:36:6b:5b:b8:bc:27:d4:f8:6e:e2:91:b9:
         23:d4:8d:73:83:7f:2b:b7:a7:0d:fe:13:b7:1e:b1:cb:dd:57:
         b5:b4:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org