Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3234203d3e203631333137.roa
File:                     3138352e3139322e39362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          IDiMdeqdvvZ+QrgGhUQJ4MbNlO8dohpL7R4U4l80EEY=
Subject key identifier:   F0:46:37:43:AB:7D:0E:48:AD:D2:0A:E8:36:84:F2:40:EF:15:70:D9
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       41BFEFF8A8F54660E33949C6BBEBB9AF4F4B18C7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:45 +0000
ROA not before:           Tue 28 Jun 2022 04:35:45 +0000
ROA not after:            Tue 27 Jun 2023 04:40:45 +0000
asID:                     61317
IP address blocks:        185.192.96.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bf:ef:f8:a8:f5:46:60:e3:39:49:c6:bb:eb:b9:af:4f:4b:18:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:45 2022 GMT
            Not After : Jun 27 04:40:45 2023 GMT
        Subject: CN=F0463743AB7D0E48ADD20AE83684F240EF1570D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:15:4f:10:a6:59:cb:58:ef:96:7c:19:c1:5f:
                    c5:72:58:31:f0:48:d2:20:e6:06:ad:21:e7:ec:45:
                    7f:de:b5:05:81:5c:7d:dc:12:60:9f:33:06:da:4d:
                    18:8d:ed:f9:dd:93:62:8f:2f:c5:db:8a:69:66:a8:
                    4d:b8:8a:f0:3c:b4:fc:10:d4:1a:cc:bf:09:a4:84:
                    1f:b4:02:8d:31:05:e5:13:bc:bd:1e:f1:5a:af:70:
                    cd:9c:ca:c5:df:d3:c4:c2:39:a6:52:a5:a4:0b:20:
                    a7:17:fd:c4:63:6d:0c:e2:f7:00:46:c4:1d:f7:5d:
                    d0:45:d1:cb:b4:cd:cc:05:de:e9:0a:34:b6:cc:a8:
                    c2:f8:51:36:90:2c:ea:84:38:ee:97:22:e5:2a:64:
                    93:67:be:a7:5b:d1:60:65:30:20:5b:1a:80:30:d6:
                    b4:51:12:54:db:22:5b:26:3f:b6:6f:ce:fe:24:ef:
                    da:d6:0a:5a:d0:34:20:4d:f0:59:22:99:f5:c6:f3:
                    f8:07:d4:ae:56:bd:51:70:16:e0:fc:61:f6:38:01:
                    32:8a:b5:fa:e0:ee:2c:d7:e1:9d:55:8d:d3:8b:0a:
                    65:b4:2b:fe:82:98:5a:dd:94:a4:24:c1:61:25:40:
                    b6:64:f0:cf:f8:b5:d0:2b:03:08:bb:c4:d3:65:49:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:46:37:43:AB:7D:0E:48:AD:D2:0A:E8:36:84:F2:40:EF:15:70:D9
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:b1:2d:24:22:28:a6:aa:13:c7:e4:d8:7f:cf:e8:1e:d6:fd:
         ba:ae:cd:59:eb:c6:30:4d:53:41:09:7f:7d:47:cc:a9:8a:92:
         7e:2e:75:74:e4:90:0c:c6:8e:56:38:9f:3d:26:90:f5:18:46:
         31:f1:1c:c8:e5:27:39:cb:49:06:e9:e1:87:4f:44:27:fb:d7:
         9a:ae:6f:e5:01:61:17:56:6a:8d:6f:72:c8:60:3a:34:9f:c4:
         c3:41:a5:fb:98:5c:ad:9e:90:4b:78:4d:41:4d:f5:29:3c:c7:
         03:dd:55:16:7b:4a:0c:66:c4:42:cf:30:01:26:91:83:09:fd:
         ff:83:44:2d:5b:e1:c8:8f:44:cc:1f:e2:e7:06:d2:97:a4:a1:
         3e:1a:c8:17:bb:8e:2c:25:fa:cb:3a:c6:d1:ee:79:74:47:49:
         36:9d:75:2a:61:30:77:13:1a:a6:ed:14:b4:57:11:96:4b:e5:
         b6:30:ca:45:ff:27:9a:8a:8d:27:f1:e1:a1:e1:67:ac:0e:c3:
         2a:08:00:62:1f:e0:17:b4:1a:44:cf:d4:36:34:58:98:54:b8:
         84:e0:01:c0:63:c3:94:51:22:b4:32:75:92:97:9f:52:0f:b7:
         a9:07:76:4f:80:87:d4:6b:9d:95:6c:13:eb:f3:a7:3c:2b:ca:
         43:c5:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org