Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231362e3230312e302f32342d3234203d3e203631333137.roa
File:                     3138352e3231362e3230312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          hHxhFc8iCeGrVoJSBrXrcUhxPlPNXNHwt+BmiyaghTo=
Subject key identifier:   87:AD:D1:39:41:E4:84:87:61:81:47:25:07:B7:33:79:1D:3B:FB:5B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0E0D79FB5EA03F6FEF0BDFB07AAE845E5F99A424
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231362e3230312e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:37 +0000
ROA not before:           Tue 28 Jun 2022 04:35:37 +0000
ROA not after:            Tue 27 Jun 2023 04:40:37 +0000
asID:                     61317
IP address blocks:        185.216.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0d:79:fb:5e:a0:3f:6f:ef:0b:df:b0:7a:ae:84:5e:5f:99:a4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:37 2022 GMT
            Not After : Jun 27 04:40:37 2023 GMT
        Subject: CN=87ADD13941E484876181472507B733791D3BFB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:2b:4c:c9:0a:07:a4:61:0c:25:fa:73:18:
                    ba:3a:3a:be:62:db:e7:41:3a:62:c6:c2:c1:69:72:
                    6f:76:2c:fc:72:cc:ca:4d:ed:98:a7:e4:04:bf:f2:
                    c6:e6:88:a5:bd:1f:e6:77:90:28:31:5e:c9:45:ad:
                    bd:9d:35:55:1c:58:32:b8:88:1c:eb:63:f1:d4:22:
                    56:39:11:e1:72:e2:c3:94:e9:f2:53:cf:0e:cb:89:
                    24:a5:3f:61:cd:d3:76:4e:e9:a3:bb:7f:98:69:11:
                    d9:a3:0f:95:f9:81:ac:f4:11:ec:37:01:c8:47:70:
                    66:99:36:88:62:4b:ca:47:c5:c7:ef:cb:68:f2:83:
                    13:0c:d2:af:45:c7:51:57:99:28:ed:e4:d4:b6:a9:
                    82:90:7d:64:ca:7f:73:ee:95:fd:8f:26:1b:4e:53:
                    85:9f:c0:16:c2:a9:ea:b5:f9:c3:ee:ad:18:86:4e:
                    fb:59:35:20:6b:29:56:0f:49:66:31:2b:25:2c:b9:
                    06:97:64:f9:b7:92:9e:3a:d5:ae:9a:22:0f:42:a1:
                    a8:30:4a:60:6e:79:8b:64:3a:70:9c:cc:37:bf:f9:
                    82:eb:54:65:20:61:6a:0a:aa:64:b7:54:53:f4:09:
                    1c:dc:f3:41:f1:76:67:2a:b8:91:d3:ee:c9:64:94:
                    cc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AD:D1:39:41:E4:84:87:61:81:47:25:07:B7:33:79:1D:3B:FB:5B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231362e3230312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:09:74:64:e5:2a:65:54:62:cb:92:f6:4c:b7:de:6f:d5:be:
         32:c8:5d:2f:2a:0c:7d:b7:23:65:99:ca:69:89:fa:77:e3:a5:
         f8:b2:1c:08:2e:a1:bb:f3:ec:19:35:e4:b4:fb:5f:59:fb:f6:
         ed:4c:0d:83:61:1c:41:c7:ce:ac:2f:08:dd:cb:7c:65:f7:a2:
         d5:46:3f:2f:6b:9a:63:a2:55:d0:bf:9a:39:02:ae:8f:3c:72:
         b2:90:12:23:7c:65:3a:5c:ef:ef:34:38:13:fa:12:06:d4:3c:
         36:0b:d6:1d:96:ee:3a:07:f5:d6:c2:57:59:9b:49:6e:3a:90:
         46:79:9d:87:21:59:04:f1:ad:7c:06:8f:0d:c6:e4:c0:c4:16:
         39:5f:b9:e0:60:be:9f:a6:b4:5d:bc:90:07:69:17:cf:7a:e4:
         70:54:f6:84:90:66:ed:94:ce:9e:ba:45:2b:7f:25:4a:9a:2f:
         73:1e:3f:e9:83:c3:47:d0:b9:93:a4:72:ab:4e:91:aa:04:bf:
         7c:36:e4:13:05:e9:89:1b:c6:bd:a3:29:fa:9f:68:80:32:4a:
         6b:31:aa:98:93:3d:a1:c4:a4:9b:1f:5f:9b:08:9c:9e:ee:f0:
         fa:23:26:e0:6e:ff:1e:fe:af:79:d6:a4:c7:90:88:88:9f:09:
         8c:a4:1c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org