Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39382e302f32332d3234203d3e203631333137.roa
File:                     3138352e3231342e39382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          TkNJWRXLvBe7Pisk4IxyxRa1cHNkvg8965b/G3+AQCg=
Subject key identifier:   72:83:34:FB:84:2E:7E:97:28:B3:0D:D8:C6:43:A4:46:38:43:29:49
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       71C009D05569C343EE3223949303211425A0F7FB
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39382e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:24 +0000
ROA not before:           Sat 22 Oct 2022 04:29:24 +0000
ROA not after:            Sat 21 Oct 2023 04:34:24 +0000
asID:                     61317
IP address blocks:        185.214.98.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c0:09:d0:55:69:c3:43:ee:32:23:94:93:03:21:14:25:a0:f7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:24 2022 GMT
            Not After : Oct 21 04:34:24 2023 GMT
        Subject: CN=728334FB842E7E9728B30DD8C643A44638432949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:b5:20:11:7f:81:d2:05:48:7a:55:7c:b2:
                    50:58:93:56:95:2b:81:5e:2d:6c:91:cf:28:c8:56:
                    75:ff:38:f5:9d:2f:37:be:a0:f2:ec:94:79:c7:68:
                    3f:01:3d:9d:0c:ac:b7:ef:33:dd:9a:b9:ed:e1:85:
                    f2:8b:fd:23:46:d2:05:0d:66:a3:49:aa:be:ad:72:
                    81:61:e4:fb:d3:3b:28:e7:77:45:d6:da:d4:a5:b5:
                    19:e3:36:97:42:c7:ca:5c:f9:a8:33:6d:0b:a3:26:
                    6c:eb:b1:31:37:c3:0d:06:5b:dd:3d:5c:7b:8e:fc:
                    87:75:42:c4:a9:61:2c:39:d1:56:20:96:51:1d:03:
                    88:b7:62:80:88:eb:e2:a8:7c:d6:a6:e9:b6:13:ac:
                    c1:31:76:86:93:1a:f2:16:1b:a2:70:6b:f6:d6:cb:
                    ff:a4:02:a9:3d:f5:e3:08:04:83:25:c9:4b:fb:92:
                    1b:ee:a4:41:d3:54:75:6c:aa:cb:40:a0:02:f6:ad:
                    5e:03:9c:eb:87:0f:bb:e6:63:04:2b:84:5c:c7:09:
                    9a:36:d4:17:24:6e:a6:1e:b8:83:f1:3d:54:34:3b:
                    07:52:11:d9:59:b1:de:b9:ce:29:15:61:d1:25:81:
                    a6:3e:e2:b0:35:4c:82:5e:11:8d:33:80:ae:27:c0:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:83:34:FB:84:2E:7E:97:28:B3:0D:D8:C6:43:A4:46:38:43:29:49
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:e9:29:db:74:07:fe:5d:a5:55:09:5b:06:14:0f:42:1a:f1:
         96:b3:ef:ba:98:23:80:e8:5f:0f:d9:32:0a:40:4f:79:e2:d3:
         e6:94:db:0e:1f:6b:f6:61:79:16:63:7d:21:45:d9:dc:8d:fa:
         22:a3:0f:1a:35:a5:7a:e5:e7:3b:40:de:1f:ee:dd:40:ae:26:
         17:a6:c0:45:91:20:2d:d2:36:b4:63:b8:a3:ed:f9:29:6a:db:
         6d:9c:5d:f4:ea:0a:9e:dd:12:c1:10:e4:34:0a:f2:b9:91:89:
         cb:0b:39:a5:6d:c0:5d:46:e1:d8:2e:22:86:07:c4:18:e1:c8:
         d1:53:26:b7:da:04:17:cf:ac:03:cc:f0:d7:13:c4:66:e3:6f:
         9f:0e:fd:ac:3d:88:9c:86:0b:01:37:86:d1:1b:c2:c1:fb:47:
         87:51:a9:40:18:e7:15:8e:fd:0d:fb:28:2a:ca:e9:e9:d7:df:
         9d:b4:ba:2b:7c:b0:47:ee:9c:e8:9e:1b:ed:34:e3:d2:6a:a5:
         a6:c3:65:c0:83:7c:75:6e:95:29:18:e0:39:79:8e:71:71:db:
         ba:46:cc:ef:f2:08:9f:ea:e8:99:b4:87:ce:d6:6f:3d:f3:9d:
         eb:b9:ad:07:b2:4e:4a:f9:86:79:c7:41:03:27:a1:3f:b1:ec:
         2f:c8:bb:3f
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUccAJ0FVpw0PuMiOUkwMhFCWg9/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MjRaFw0yMzEwMjEwNDM0MjRaMDMxMTAvBgNV
BAMTKDcyODMzNEZCODQyRTdFOTcyOEIzMEREOEM2NDNBNDQ2Mzg0MzI5NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfoLUgEX+B0gVIelV8slBYk1aV
K4FeLWyRzyjIVnX/OPWdLze+oPLslHnHaD8BPZ0MrLfvM92aue3hhfKL/SNG0gUN
ZqNJqr6tcoFh5PvTOyjnd0XW2tSltRnjNpdCx8pc+agzbQujJmzrsTE3ww0GW909
XHuO/Id1QsSpYSw50VYgllEdA4i3YoCI6+KofNam6bYTrMExdoaTGvIWG6Jwa/bW
y/+kAqk99eMIBIMlyUv7khvupEHTVHVsqstAoAL2rV4DnOuHD7vmYwQrhFzHCZo2
1BckbqYeuIPxPVQ0OwdSEdlZsd65zikVYdElgaY+4rA1TIJeEY0zgK4nwCXHAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUcoM0+4Qufpcosw3YxkOkRjhDKUkwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMyMzEzNDJlMzkzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM2
MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG51mIwDQYJKoZIhvcNAQELBQADggEBAJzpKdt0
B/5dpVUJWwYUD0Ia8Zaz77qYI4DoXw/ZMgpAT3ni0+aU2w4fa/ZheRZjfSFF2dyN
+iKjDxo1pXrl5ztA3h/u3UCuJhemwEWRIC3SNrRjuKPt+Slq222cXfTqCp7dEsEQ
5DQK8rmRicsLOaVtwF1G4dguIoYHxBjhyNFTJrfaBBfPrAPM8NcTxGbjb58O/aw9
iJyGCwE3htEbwsH7R4dRqUAY5xWO/Q37KCrK6enX3520uit8sEfunOieG+0049Jq
pabDZcCDfHVulSkY4Dl5jnFx27pGzO/yCJ/q6Jm0h87Wbz3zneu5rQeyTkr5hnnH
QQMnoT+x7C/Iuz8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org