Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3234203d3e2033333536.roa
File:                     3138352e3230382e3230372e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          /yvKWuDyoKN2fcxRiWtghmFE5y0cQFJpG15e+vv1YD8=
Subject key identifier:   AC:D0:A8:D1:0D:93:AF:4E:1D:C4:59:DE:A5:41:9B:0F:51:93:E6:F6
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       57EFEAE9CEADA0E03A9EE34D21F8ACDA916AEC1C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 28 Jun 2022 04:40:44 +0000
ROA not before:           Tue 28 Jun 2022 04:35:44 +0000
ROA not after:            Tue 27 Jun 2023 04:40:44 +0000
asID:                     3356
IP address blocks:        185.208.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ef:ea:e9:ce:ad:a0:e0:3a:9e:e3:4d:21:f8:ac:da:91:6a:ec:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:44 2022 GMT
            Not After : Jun 27 04:40:44 2023 GMT
        Subject: CN=ACD0A8D10D93AF4E1DC459DEA5419B0F5193E6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1f:4b:a0:e3:4e:61:57:a6:b7:e0:d3:4a:21:
                    79:0e:d7:4e:97:10:9c:86:87:68:bf:49:18:94:5f:
                    c0:5f:24:d7:65:97:c4:3f:78:5b:75:13:5f:2d:31:
                    8e:16:a2:17:c9:4f:dc:03:8d:49:8d:40:00:f8:0e:
                    e1:23:43:c9:31:bc:5e:9b:b0:57:e9:06:4e:b9:8b:
                    17:9a:92:34:68:34:93:f3:6b:7e:31:c1:c8:66:e8:
                    36:d7:1a:82:43:b5:3a:01:b0:8a:c5:3e:31:ec:5d:
                    8c:78:ed:b5:15:cc:e5:74:b1:8f:43:48:6f:b9:bc:
                    10:3f:ed:af:2c:1b:0f:fe:71:b3:9c:d7:2f:e5:1f:
                    1c:94:07:87:a7:8e:74:54:b1:ab:50:e3:c6:a2:2e:
                    5d:00:e6:19:6c:de:0a:76:5a:ea:6e:9c:be:ca:d4:
                    fc:31:08:11:1c:72:25:fe:c6:64:13:aa:9f:29:1a:
                    13:48:e1:10:41:37:f9:1b:da:0a:fd:d9:bf:8c:ba:
                    8c:06:36:8e:5f:1c:47:c3:a7:22:63:54:19:11:99:
                    91:07:c5:19:52:00:bc:d0:db:44:96:46:ae:37:f9:
                    d1:6e:fd:e0:a9:9b:23:d5:d2:26:fe:5b:1b:b3:84:
                    95:11:5d:a0:d0:1e:a5:80:28:16:ab:85:b6:27:6d:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D0:A8:D1:0D:93:AF:4E:1D:C4:59:DE:A5:41:9B:0F:51:93:E6:F6
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:cd:e1:26:2d:c8:e1:c5:e6:bb:81:ad:21:db:be:1b:9a:ce:
         24:46:a9:f4:bd:5f:bb:f2:d0:e8:32:d3:04:cd:b9:47:82:83:
         38:a9:02:4d:fb:26:22:de:03:cf:1b:66:20:ee:9a:5f:a6:5a:
         c8:bc:68:92:0f:9e:a5:52:a5:9c:f0:62:c2:a3:14:e0:de:4e:
         9e:b0:95:6d:ad:e1:9b:69:10:d2:4a:0f:37:2e:bb:05:6e:27:
         85:31:b4:d3:86:63:9f:e6:17:35:95:42:7c:4f:63:ad:09:f5:
         bc:4f:78:07:98:bd:5d:13:70:2f:b4:ed:1e:ee:7f:fa:62:67:
         92:97:ab:5b:57:ae:d9:52:3b:84:9f:62:1d:8c:02:64:5f:70:
         df:d1:aa:92:ec:92:de:10:5d:36:7e:d0:cd:93:8c:b3:f0:78:
         d4:00:3a:5d:20:c2:95:83:e1:05:0f:a9:c9:1d:c3:f1:96:81:
         8f:02:4d:d3:78:ac:d4:3f:8e:12:30:12:a3:73:2b:74:21:83:
         e9:44:6d:37:b6:60:0f:7f:46:f1:b6:42:c9:63:29:5e:da:22:
         59:b6:a2:74:59:9b:fb:cd:14:cc:b3:32:c1:59:1f:ae:43:bb:
         cb:b6:e2:e3:06:88:1e:54:eb:7b:d7:0b:7f:57:69:8c:84:5a:
         2d:3c:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org