Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231372e3136392e302f32342d3234203d3e203631333137.roa
File:                     3138352e3231372e3136392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          iZK4IeU9rLRtzhkhAlWbBUqBq6JILQ97vlVK6JPDi6M=
Subject key identifier:   38:A0:38:E5:13:68:4C:8C:DF:45:B4:A6:B2:72:D8:FD:E1:CD:2D:53
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1BCE4983E2030C9C18019A2AB8EC4BA6F0D259CB
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231372e3136392e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:09 +0000
ROA not before:           Sat 22 Oct 2022 04:29:09 +0000
ROA not after:            Sat 21 Oct 2023 04:34:09 +0000
asID:                     61317
IP address blocks:        185.217.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ce:49:83:e2:03:0c:9c:18:01:9a:2a:b8:ec:4b:a6:f0:d2:59:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:09 2022 GMT
            Not After : Oct 21 04:34:09 2023 GMT
        Subject: CN=38A038E513684C8CDF45B4A6B272D8FDE1CD2D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:7c:95:16:bf:8b:16:10:a0:98:1f:33:7f:
                    f5:09:c7:af:f8:b3:97:d1:e7:bc:5a:9a:de:b3:0f:
                    7f:da:59:9a:d9:9b:1f:cb:99:6e:b7:b5:7f:67:a8:
                    fe:b0:62:7c:2a:a8:46:f0:f9:15:b9:4c:cd:5a:46:
                    a2:82:e6:f7:eb:52:f8:77:87:1e:8c:0c:a4:29:82:
                    6d:24:b2:05:6d:d9:6f:9d:89:63:8b:cb:a7:d0:68:
                    7d:63:54:f3:06:ea:61:30:28:ca:d8:03:35:f0:27:
                    d4:90:a9:7b:d2:b0:eb:92:09:63:bb:1e:9c:90:72:
                    2b:c3:3d:c3:db:0f:2b:68:d5:9a:35:f3:77:7b:80:
                    0a:96:f3:6f:b0:93:d8:6b:ce:03:c7:88:b8:11:6b:
                    94:b0:1f:bb:c7:43:3b:9c:0c:6f:99:3e:5e:89:19:
                    93:8e:e3:74:ec:07:46:99:35:78:f2:6d:3d:f8:62:
                    0f:af:e3:f4:29:ea:c9:2c:b4:9f:d4:9e:60:e7:f3:
                    11:85:e2:a3:f0:7e:b0:51:da:79:16:07:bc:2d:69:
                    2d:6b:9c:30:cb:eb:1e:7d:d3:f2:d2:bb:42:dc:28:
                    a0:eb:a6:16:00:ee:6a:8c:44:b6:a8:0b:5c:c3:c3:
                    4b:cf:be:d4:0a:3f:96:20:f9:f9:a5:72:3b:3b:fd:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A0:38:E5:13:68:4C:8C:DF:45:B4:A6:B2:72:D8:FD:E1:CD:2D:53
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231372e3136392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:5a:e9:0e:97:95:62:4d:e8:03:20:7c:72:f8:61:c3:d9:
         8b:13:bd:b3:96:d4:b5:93:9e:5f:04:34:ee:8e:f0:be:fa:61:
         6d:35:0b:0d:49:f5:ec:5f:84:6b:b0:1a:9e:3f:bd:52:88:cc:
         80:1f:01:66:60:8b:be:67:4a:7a:49:f8:fb:df:d9:41:74:f9:
         1a:43:eb:e5:43:30:19:63:d5:87:ef:d5:b0:d3:8f:24:2f:2a:
         e4:23:05:83:bd:1a:a9:91:62:e3:fc:7d:e9:e5:5e:6c:1d:d4:
         44:ae:72:8f:94:fb:22:f9:c9:b5:b7:3b:dd:ea:f8:8a:e4:32:
         16:b2:a9:38:2a:6c:6a:ee:e3:30:d0:be:09:48:95:ed:8d:f1:
         14:73:95:5b:50:fa:a2:fa:21:07:28:e1:f3:36:bc:d9:3e:04:
         1a:da:4a:b2:2b:d2:db:8b:46:40:1a:4e:66:f5:38:35:d4:14:
         f5:74:97:e2:80:74:62:ca:53:1e:d8:7a:56:c9:41:7e:c2:f1:
         2f:50:ad:e8:f3:f2:cd:b8:61:26:2c:c3:3e:52:92:46:57:3f:
         de:6a:7a:8e:be:f7:d8:68:57:9f:d6:69:9e:3e:d8:a7:84:34:
         e1:e7:2f:f3:a2:57:f7:95:5e:d3:88:50:4d:3a:f8:cf:81:e2:
         f9:2d:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org