Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3233203d3e2037393232.roa
File:                     3138352e3139372e3235302e302f32332d3233203d3e2037393232.roa (raw, json)
Hash identifier:          I+jHLF6CMiJ3S0l2AV1n1PjbpHkh50PdPv8ZMCKN7tg=
Subject key identifier:   04:E7:0F:2E:0A:75:58:C6:B1:25:09:CD:0A:AF:00:A5:AD:C4:57:A2
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       32DB5344EFD5D0596D4DF21D02D7E7777E205D9F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3233203d3e2037393232.roa
Signing time:             Tue 28 Jun 2022 04:40:50 +0000
ROA not before:           Tue 28 Jun 2022 04:35:50 +0000
ROA not after:            Tue 27 Jun 2023 04:40:50 +0000
asID:                     7922
IP address blocks:        185.197.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:db:53:44:ef:d5:d0:59:6d:4d:f2:1d:02:d7:e7:77:7e:20:5d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:50 2022 GMT
            Not After : Jun 27 04:40:50 2023 GMT
        Subject: CN=04E70F2E0A7558C6B12509CD0AAF00A5ADC457A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:95:9a:86:67:06:a2:95:6f:e9:ac:93:5d:
                    3a:d0:b4:c9:a6:01:04:c5:99:f6:84:c2:ee:b4:94:
                    64:8f:b1:e9:60:89:d8:f0:7a:e1:9d:58:70:f4:d7:
                    e1:ba:36:45:31:0d:7a:9e:d2:11:be:5b:d9:ba:80:
                    f5:24:22:a9:6e:97:2d:c7:c3:b1:02:9a:e6:7e:0d:
                    34:c0:ed:26:c2:dc:9b:55:1e:ca:e8:61:45:4b:75:
                    69:f5:41:f3:2c:92:49:f5:80:05:a2:a7:c5:70:7b:
                    66:55:ff:2a:ce:d1:68:12:36:5e:2c:96:63:36:9b:
                    11:19:4b:4b:a4:cd:76:ef:99:38:7a:c1:0b:7b:a0:
                    2a:e1:22:c7:fc:2a:a5:ab:2a:58:14:c0:66:2b:e8:
                    69:af:14:64:55:67:0c:18:6b:92:7c:a7:7d:82:97:
                    3a:63:21:75:60:45:0f:1d:e9:6e:eb:2d:5f:34:e9:
                    64:bf:68:4c:32:33:aa:f9:b2:5b:56:2b:6c:01:b1:
                    1f:b6:2a:52:78:5a:09:58:3f:f4:79:26:af:0c:ac:
                    20:e9:89:e6:ee:21:e2:98:19:43:c6:84:b6:35:95:
                    c5:1a:d6:f8:b2:9f:97:b1:92:bb:62:3a:54:da:51:
                    a8:a1:da:17:83:8c:08:47:6d:af:2f:9d:5a:30:20:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E7:0F:2E:0A:75:58:C6:B1:25:09:CD:0A:AF:00:A5:AD:C4:57:A2
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3233203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:cc:1b:bb:9e:64:90:47:6a:38:0e:67:21:16:9e:34:41:11:
         d6:dc:a5:ac:67:29:ba:7e:16:81:b7:d0:27:56:c0:08:79:ae:
         67:d6:9f:a0:0f:2e:24:21:cb:a6:74:17:31:21:d7:d4:a7:3d:
         22:02:0c:fa:d1:07:2c:bb:76:03:f3:16:74:75:97:49:88:0d:
         84:d3:57:7b:af:4e:32:37:b1:94:15:e7:6e:e3:0d:73:e3:7c:
         b5:7a:3b:17:06:0b:51:3d:58:f4:90:a3:18:db:2e:59:78:9a:
         81:7d:e3:54:6f:08:87:2d:af:3c:35:9e:5d:01:b9:a1:c6:08:
         3e:e6:f6:79:cf:4a:9c:dd:98:56:79:72:03:32:7c:38:77:28:
         33:31:9d:14:39:5e:db:63:c6:c2:17:74:6c:be:62:9d:48:fe:
         9f:e6:cd:77:c9:07:5f:ef:ba:2b:7c:11:f8:51:69:f4:f6:73:
         02:f2:f0:97:6a:13:ec:b3:59:90:96:26:db:9d:ac:5e:bc:e0:
         81:46:f7:b1:ca:e1:f8:4e:50:b3:81:1f:a8:3d:5b:f4:e9:80:
         80:39:5c:90:8a:53:04:b9:81:b5:21:eb:01:43:b1:a3:1c:54:
         fd:96:e0:1d:08:b4:b8:59:23:18:4a:2e:a5:f8:23:08:9c:18:
         89:96:2b:8a
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUMttTRO/V0FltTfIdAtfnd34gXZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1NTBaFw0yMzA2MjcwNDQwNTBaMDMxMTAvBgNV
BAMTKDA0RTcwRjJFMEE3NTU4QzZCMTI1MDlDRDBBQUYwMEE1QURDNDU3QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtZWahmcGopVv6ayTXTrQtMmm
AQTFmfaEwu60lGSPselgidjweuGdWHD01+G6NkUxDXqe0hG+W9m6gPUkIqluly3H
w7ECmuZ+DTTA7SbC3JtVHsroYUVLdWn1QfMskkn1gAWip8Vwe2ZV/yrO0WgSNl4s
lmM2mxEZS0ukzXbvmTh6wQt7oCrhIsf8KqWrKlgUwGYr6GmvFGRVZwwYa5J8p32C
lzpjIXVgRQ8d6W7rLV806WS/aEwyM6r5sltWK2wBsR+2KlJ4WglYP/R5Jq8MrCDp
iebuIeKYGUPGhLY1lcUa1viyn5exkrtiOlTaUaih2heDjAhHba8vnVowIImxAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUBOcPLgp1WMaxJQnNCq8Apa3EV6IwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMxMzkzNzJlMzIzNTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIw
MzczOTMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG5xfowDQYJKoZIhvcNAQELBQADggEBAF7MG7ue
ZJBHajgOZyEWnjRBEdbcpaxnKbp+FoG30CdWwAh5rmfWn6APLiQhy6Z0FzEh19Sn
PSICDPrRByy7dgPzFnR1l0mIDYTTV3uvTjI3sZQV527jDXPjfLV6OxcGC1E9WPSQ
oxjbLll4moF941RvCIctrzw1nl0BuaHGCD7m9nnPSpzdmFZ5cgMyfDh3KDMxnRQ5
XttjxsIXdGy+Yp1I/p/mzXfJB1/vuit8EfhRafT2cwLy8JdqE+yzWZCWJtudrF68
4IFG97HK4fhOULOBH6g9W/TpgIA5XJCKUwS5gbUh6wFDsaMcVP2W4B0ItLhZIxhK
LqX4IwicGImWK4o=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org