Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3234203d3e2033333536.roa
File:                     3138352e3230362e3234302e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          ucti1KVIKiK/dNfECQBK3uwkLn1eNU3zCDuS4X05c0c=
Subject key identifier:   96:44:D8:1F:28:0B:60:F9:7B:64:A9:B4:53:50:2C:F0:F1:0D:E3:0E
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6185133B2E83AEC4866CD9CA923A7135D8A373E8
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3234203d3e2033333536.roa
Signing time:             Tue 28 Jun 2022 04:40:42 +0000
ROA not before:           Tue 28 Jun 2022 04:35:42 +0000
ROA not after:            Tue 27 Jun 2023 04:40:42 +0000
asID:                     3356
IP address blocks:        185.206.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:85:13:3b:2e:83:ae:c4:86:6c:d9:ca:92:3a:71:35:d8:a3:73:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:42 2022 GMT
            Not After : Jun 27 04:40:42 2023 GMT
        Subject: CN=9644D81F280B60F97B64A9B453502CF0F10DE30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:bd:58:e7:e1:86:c6:63:02:ff:1b:dd:a2:
                    6d:17:a4:e7:cc:08:76:74:b3:e6:ad:9b:ec:02:2d:
                    b2:04:7d:28:da:ec:45:bf:85:ca:f4:e3:21:fb:e9:
                    49:71:2d:4a:a6:cb:9a:2d:59:9e:2d:b2:2c:e1:bb:
                    8a:c4:82:34:89:cb:93:bf:87:cf:27:a8:da:fb:6d:
                    e0:32:bb:a4:66:b9:fe:77:6f:75:ba:ec:21:f0:6d:
                    2b:13:22:a1:b1:a9:89:93:84:65:7d:fb:b8:66:f5:
                    fd:cc:41:dc:78:10:e5:ec:a5:42:a0:e6:4d:69:74:
                    1f:cd:c7:0e:eb:d8:1a:91:1e:5b:93:62:72:e3:c4:
                    65:4a:58:a2:c1:bd:fa:2f:97:8f:a9:9d:d8:44:d9:
                    58:69:94:10:6b:0c:b9:83:99:06:53:39:35:f6:51:
                    9d:03:a9:70:ce:be:f9:76:0f:e8:5d:27:48:52:fc:
                    03:0b:1b:56:2d:93:1c:a7:43:fb:dc:93:29:6d:e8:
                    10:df:14:4b:fe:fd:bd:1f:4b:5b:f0:31:e8:2e:db:
                    92:8f:79:a1:c4:5c:3f:d4:71:6e:c8:fc:70:48:a6:
                    99:e4:a5:88:cc:46:da:52:84:27:13:9d:38:4a:50:
                    13:c7:a1:a5:f5:e6:4f:d3:94:9f:42:1b:07:23:94:
                    76:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:44:D8:1F:28:0B:60:F9:7B:64:A9:B4:53:50:2C:F0:F1:0D:E3:0E
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:87:d4:b7:bf:40:2c:7a:5c:02:6e:fc:09:01:19:9b:47:a2:
         a6:51:67:14:7e:91:3a:b4:dc:88:78:eb:f6:5f:60:71:2e:ef:
         4e:4e:9c:8b:ac:60:86:be:02:bc:eb:de:e5:0b:51:2f:34:cc:
         fc:94:2c:ec:ae:a6:c5:93:21:65:17:ba:99:63:3f:f4:37:ed:
         d5:69:40:53:c3:49:cc:09:08:48:57:6f:eb:1e:c3:e7:31:41:
         89:ec:e4:f7:bd:3d:42:6b:32:01:c6:0d:68:da:7a:db:1b:ca:
         ce:8b:e0:50:3d:12:d1:36:79:4c:32:43:a1:f0:35:58:e5:3c:
         46:d9:d1:ed:d3:57:68:cc:ce:26:16:7c:59:5b:4e:63:bd:6d:
         8c:5a:9f:87:33:b6:31:42:c3:50:70:64:6f:e7:38:7f:80:71:
         d4:a0:4b:93:e8:38:a5:f1:96:7c:76:46:19:7c:74:7f:91:7c:
         4f:fb:fe:bf:85:b2:43:45:3b:2c:93:a9:bd:2d:f9:71:a6:8f:
         75:e7:b2:bc:2a:c5:6d:93:e0:80:8c:31:60:94:e5:31:d1:94:
         a3:36:60:56:30:31:61:04:86:bd:9d:14:c7:79:4d:a1:7d:88:
         f2:ab:04:49:13:69:88:9a:5c:64:0b:86:6b:ab:54:0a:47:28:
         dc:bd:8d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org