Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32332d3234203d3e203631333137.roa
File:                     3138352e3233302e3133362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          NsE71uudv+To9sxH+4spCmWWk4/FSxtkqJ/FQ385eso=
Subject key identifier:   21:64:92:EB:A0:50:2D:C6:43:68:C5:6B:59:06:A3:57:42:52:10:64
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       79E9229568F8F9D912EBF52DC5387260BF014A8D
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:19 +0000
ROA not before:           Sat 22 Oct 2022 04:29:19 +0000
ROA not after:            Sat 21 Oct 2023 04:34:19 +0000
asID:                     61317
IP address blocks:        185.230.136.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e9:22:95:68:f8:f9:d9:12:eb:f5:2d:c5:38:72:60:bf:01:4a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:19 2022 GMT
            Not After : Oct 21 04:34:19 2023 GMT
        Subject: CN=216492EBA0502DC64368C56B5906A35742521064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f2:3c:af:7c:ec:2c:ca:24:88:a3:ca:e4:5c:
                    df:9a:69:85:04:8e:1e:ae:f0:c9:2e:3a:5e:39:d4:
                    b4:d5:e1:c6:e9:34:b1:af:89:6b:98:a6:0d:1e:48:
                    fd:8d:be:bc:ad:7e:d6:2a:9b:ca:4e:ba:cd:e9:e5:
                    09:5f:c6:23:7e:f6:60:21:2f:fe:3e:74:90:7d:b9:
                    2b:6b:22:fc:2b:d1:9d:25:2e:cb:2a:84:e9:fd:17:
                    47:29:67:f0:e1:ac:7b:18:d3:04:3d:56:7c:f7:b3:
                    57:db:e1:9c:21:4b:f4:6b:67:53:96:85:69:83:c9:
                    16:f5:87:84:84:99:f2:5a:92:76:37:18:4c:1c:62:
                    6a:c7:4c:b2:da:4f:a6:98:a7:42:fb:9a:b0:e5:22:
                    04:14:46:c6:01:da:7a:67:59:01:b9:75:95:65:cd:
                    0f:b0:a5:93:3b:6f:36:30:25:68:da:8e:26:13:8b:
                    ee:a7:b4:4b:a1:29:a1:fa:cc:46:20:eb:0e:b0:a5:
                    34:03:75:3f:77:fe:25:7b:39:c0:56:b0:a6:ce:f1:
                    89:19:be:f9:16:a2:23:cf:d3:f5:45:ce:61:b6:cf:
                    39:6e:5e:22:67:98:4e:66:3b:86:17:0f:bb:98:f8:
                    f3:cb:db:15:00:57:ad:e1:98:6c:fc:66:e1:56:ca:
                    71:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:92:EB:A0:50:2D:C6:43:68:C5:6B:59:06:A3:57:42:52:10:64
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:52:4a:c2:5e:6a:36:a2:55:4f:f5:87:f0:7b:66:4c:56:99:
         e3:97:7c:d2:63:06:04:43:7c:6e:53:7b:3d:69:12:50:f4:f9:
         8b:b4:50:11:6a:b8:2f:5b:26:92:62:70:a2:ad:20:af:9b:a4:
         0f:68:de:ff:22:1f:44:19:45:9f:72:bf:cc:31:bf:78:00:79:
         f8:ab:68:74:28:45:94:da:48:40:6f:f1:2c:9f:04:49:94:fc:
         5b:98:4d:e0:ee:66:13:49:97:a6:35:b3:ee:28:8d:39:19:78:
         e5:de:fa:29:54:6c:67:28:13:24:b8:37:26:5c:a2:7f:05:3e:
         0e:ab:4f:53:94:31:55:38:8f:5f:c5:96:0f:54:3a:ce:25:46:
         03:62:d5:b9:86:a3:ac:ab:d3:0d:ae:72:bb:c6:7a:a0:cf:73:
         d3:fc:d0:ef:a6:60:6b:63:58:3b:06:f5:27:6e:d1:a0:2d:18:
         40:e2:36:82:01:91:67:65:47:0d:14:3e:68:98:bb:44:ea:90:
         fc:48:c9:a4:78:dc:5a:87:96:72:41:92:b7:c1:14:4e:7a:40:
         ef:2f:e4:28:a2:18:c1:b9:b0:f3:05:b8:2e:c5:24:c7:5a:fe:
         20:36:5b:e2:36:e1:01:42:84:80:16:45:30:48:22:a1:b8:fa:
         96:b6:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org