Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231362e3230322e302f32342d3234203d3e203235303938.roa
File:                     3138352e3231362e3230322e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          JA87Hp8KsERTNvCSOnXImWQ8IDMjja9OO4gZlUQjAsc=
Subject key identifier:   F8:91:55:44:8F:CD:F0:6C:AA:F9:B1:97:62:58:8E:82:1C:C5:13:D8
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       610C836547641AB45AFC21B3C10E54CF89A1EFDB
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231362e3230322e302f32342d3234203d3e203235303938.roa
Signing time:             Sat 22 Oct 2022 04:34:17 +0000
ROA not before:           Sat 22 Oct 2022 04:29:17 +0000
ROA not after:            Sat 21 Oct 2023 04:34:17 +0000
asID:                     25098
IP address blocks:        185.216.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:83:65:47:64:1a:b4:5a:fc:21:b3:c1:0e:54:cf:89:a1:ef:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:17 2022 GMT
            Not After : Oct 21 04:34:17 2023 GMT
        Subject: CN=F89155448FCDF06CAAF9B19762588E821CC513D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:84:63:c0:e3:39:fa:bb:b8:5f:1e:11:aa:
                    f1:fb:d9:ac:c3:74:00:15:fc:c0:a4:e2:08:4b:08:
                    1e:73:50:6d:66:29:22:19:23:b3:fd:6b:94:ab:35:
                    85:c0:c1:d0:c8:c5:11:52:8f:57:00:85:c7:42:4a:
                    78:fe:c1:b4:e5:d8:51:66:69:44:59:ea:51:66:4d:
                    21:c1:53:d2:6a:40:bc:96:e3:dd:96:1f:9f:33:0e:
                    0c:4d:a1:ec:1b:27:54:1a:cf:eb:9e:7e:72:14:9c:
                    97:21:7d:74:6c:59:20:84:64:c8:45:ff:cd:89:35:
                    c3:4f:72:dd:2e:31:b1:17:23:3d:55:12:04:3a:8a:
                    92:df:24:af:59:ef:47:8f:f5:95:a7:cc:5f:b4:56:
                    7a:89:e0:b7:6f:1c:30:c3:b2:39:cb:8d:56:80:0f:
                    4c:2e:e3:5d:8c:4a:3b:6e:31:34:cd:3b:3c:fb:56:
                    61:70:37:e3:55:e9:c9:5e:28:08:ad:42:47:34:6b:
                    d2:39:95:bb:be:1d:22:6b:ed:32:07:1d:5d:50:4b:
                    6d:79:2a:98:6d:f3:84:12:72:b6:fc:10:39:0f:f9:
                    69:91:f3:c7:5e:5c:d9:b9:93:52:ad:11:ad:99:cd:
                    98:ff:75:6f:44:3a:a2:a4:68:d9:02:cf:52:c2:f7:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:91:55:44:8F:CD:F0:6C:AA:F9:B1:97:62:58:8E:82:1C:C5:13:D8
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231362e3230322e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:d5:bf:cd:00:38:2b:b6:71:fe:1d:d1:38:08:d1:4d:e1:
         34:8c:96:19:45:9c:b6:3a:ee:7c:05:4b:25:64:c6:10:4c:10:
         f7:5b:2b:cf:37:5d:b3:6c:df:7e:2c:e3:5a:b2:0e:c1:ce:fe:
         66:6d:f2:9d:4c:05:ff:58:9f:d8:e2:bc:bf:66:2f:58:f2:6c:
         ff:bd:8e:eb:91:66:e9:92:c0:19:b8:09:86:c8:91:e1:24:1a:
         97:f4:91:ba:1f:71:c7:36:19:fb:ac:7e:40:17:91:6f:8a:70:
         2f:9b:9c:a5:49:2b:ac:bb:99:c2:a6:54:47:b1:e9:7a:9b:dc:
         c1:61:88:27:a8:03:b2:07:b8:86:2f:d8:b3:36:37:e1:20:89:
         aa:50:51:8e:a1:d7:80:1b:cb:e8:55:df:12:5d:cd:bc:a3:74:
         d9:22:25:a5:8c:19:e5:77:10:f2:55:e4:ad:1f:f5:9d:34:54:
         67:98:07:29:0b:41:e1:29:07:d8:b1:4a:86:be:a8:b9:1e:08:
         2e:c9:73:ca:ca:0a:4f:bf:ce:97:6e:8a:aa:c5:9d:2e:d0:ef:
         67:d2:28:23:cd:66:79:27:b5:65:d0:2e:bf:a1:9f:08:2c:8b:
         1b:db:f8:de:28:e1:72:37:b0:ca:ea:5e:3d:83:43:00:d0:85:
         fb:9a:d3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org