Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3234203d3e203631333137.roa
File:                     3138352e3230362e3234302e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          0Nabte0TWp+Lg1LmZs9yE21ZMZ6IhvJS6a0v0rpkA1Q=
Subject key identifier:   A4:47:04:01:F7:80:A2:97:04:07:73:84:43:A6:1D:A3:3B:77:F3:D7
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       67BB612B06CA90952E158E01C9B4482CCAAAF7B6
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:54 +0000
ROA not before:           Tue 28 Jun 2022 04:35:54 +0000
ROA not after:            Tue 27 Jun 2023 04:40:54 +0000
asID:                     61317
IP address blocks:        185.206.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bb:61:2b:06:ca:90:95:2e:15:8e:01:c9:b4:48:2c:ca:aa:f7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:54 2022 GMT
            Not After : Jun 27 04:40:54 2023 GMT
        Subject: CN=A4470401F780A2970407738443A61DA33B77F3D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:41:a6:96:84:0e:af:b8:27:ec:eb:0b:da:
                    5e:3b:f0:06:ad:e3:32:99:dd:cc:97:fe:34:11:ab:
                    c4:10:da:c3:9c:cf:17:1d:22:e5:47:2b:b1:a6:06:
                    94:b8:0c:30:ad:dc:3c:30:fb:d1:09:5e:c6:11:63:
                    27:47:be:81:2a:82:a0:da:08:15:0a:f8:74:96:4c:
                    2f:fd:02:5d:6f:29:df:c4:d9:19:a4:95:c8:3e:dc:
                    f1:a4:60:2d:4e:ed:aa:64:2e:74:b8:85:07:0b:b5:
                    dc:4c:58:a6:7e:89:38:0a:6e:ab:ed:dd:61:fe:b2:
                    a7:ea:87:e7:fc:7c:27:05:f6:26:da:3e:28:e2:d4:
                    cd:e2:a9:93:60:46:c3:7b:6a:f5:48:d5:ce:f9:73:
                    1b:42:78:2f:de:7f:e1:2c:a6:c8:db:f1:fd:2a:35:
                    4e:b7:9c:b9:ec:1b:6a:2f:9d:11:87:ae:63:63:07:
                    3d:76:7a:b7:a2:f6:df:86:e5:b8:f5:ec:73:5f:62:
                    0d:3d:f9:a9:de:f8:df:ad:58:35:21:4a:1d:ee:ad:
                    1e:9b:52:72:c4:20:8a:f0:a7:15:d3:ea:c8:df:37:
                    a0:2b:63:c6:b9:66:e9:67:a6:d7:7d:0b:6b:c8:1d:
                    83:29:e8:f7:a9:f3:e4:9c:0b:6f:05:c9:ea:00:f1:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:47:04:01:F7:80:A2:97:04:07:73:84:43:A6:1D:A3:3B:77:F3:D7
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230362e3234302e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:11:a9:42:1d:63:30:05:0a:28:93:a1:d3:c8:35:2c:2b:f1:
         56:52:73:57:5f:b7:be:e0:3b:2f:b0:1a:26:1f:bf:d6:71:d6:
         6b:39:19:6b:1b:60:b9:2d:b4:10:97:98:fb:7a:d0:7d:7f:50:
         c2:c5:91:6f:ea:e5:8f:d3:0b:6c:67:03:9c:25:2d:73:6c:70:
         72:1a:95:e5:b1:f9:be:3a:7d:84:ff:a3:6f:7c:86:c0:42:54:
         13:ff:fe:b2:7d:8a:0a:d1:0b:c4:94:c8:86:24:36:6f:82:01:
         19:89:de:d5:fc:b7:ab:92:a1:83:a0:e9:b2:65:08:eb:e9:1d:
         3f:c4:89:8d:50:72:48:1f:15:76:41:18:b1:46:64:60:31:3b:
         95:c1:a0:8e:7b:0b:4b:46:c6:2c:39:64:20:9b:ae:c5:78:40:
         e1:ca:1a:0e:3c:08:55:46:f6:f9:00:77:ff:5e:af:4e:45:f0:
         fc:c8:db:96:ad:af:64:48:c6:8c:d0:cc:b5:56:15:2f:37:ae:
         92:22:c5:93:ad:1f:9d:fc:69:12:ee:28:ed:3a:60:47:3e:c7:
         21:39:e4:5a:e5:12:76:bf:9b:9d:00:f1:95:be:2e:6a:a9:c4:
         04:20:f9:d3:b5:9a:49:ee:74:83:4e:b7:82:be:31:9a:e8:e8:
         e5:8f:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org