Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e2037393232.roa
File:                     3138352e3233302e3133372e302f32342d3234203d3e2037393232.roa (raw, json)
Hash identifier:          40Vr9R8MijuUgn5zgFRbjLT8WW+lvSlR/zv6wXoRV0M=
Subject key identifier:   57:69:80:26:3E:5D:7C:0E:A7:58:44:CD:09:4A:E3:F9:BD:EF:B7:9F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       29BDF083E078E0B25ED6FD4B9A9EA7F6EAC421EA
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e2037393232.roa
Signing time:             Sat 22 Oct 2022 04:34:16 +0000
ROA not before:           Sat 22 Oct 2022 04:29:16 +0000
ROA not after:            Sat 21 Oct 2023 04:34:16 +0000
asID:                     7922
IP address blocks:        185.230.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bd:f0:83:e0:78:e0:b2:5e:d6:fd:4b:9a:9e:a7:f6:ea:c4:21:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:16 2022 GMT
            Not After : Oct 21 04:34:16 2023 GMT
        Subject: CN=576980263E5D7C0EA75844CD094AE3F9BDEFB79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:7b:1a:57:93:23:d5:99:a5:4f:91:cb:44:
                    ed:1e:70:9c:ad:45:75:a5:53:68:f7:38:d5:8a:0f:
                    38:33:0d:22:1d:a5:16:36:be:0a:86:a4:d8:16:ca:
                    05:4b:ad:52:3c:ac:f5:99:70:6b:87:d6:ad:f0:95:
                    36:76:62:48:d9:d8:52:91:ae:a6:b1:f3:fb:0e:99:
                    85:25:a6:2e:f4:b1:c4:3d:1b:45:05:f7:b7:81:af:
                    70:8f:05:02:e3:c0:47:c5:e3:62:d2:96:5a:36:1e:
                    9d:ee:66:3b:34:17:57:9a:97:d6:1c:90:b8:ad:46:
                    33:dc:7e:10:26:96:01:e7:f9:4c:1e:1d:6f:e8:5c:
                    8b:1c:b3:f2:4d:08:33:be:1c:ed:17:10:93:77:f7:
                    f9:c4:36:1d:61:a5:0a:1c:b9:5d:d3:d0:47:1c:78:
                    ea:12:9f:f8:f0:11:06:73:2f:57:ea:77:7d:9f:4d:
                    5e:22:ac:b4:29:3f:dc:f8:45:31:cb:99:59:c7:be:
                    72:ca:24:65:8e:ab:0d:3e:4a:90:79:8f:9f:ad:79:
                    43:ab:a5:5c:77:7e:f4:1f:56:56:8c:92:db:e8:54:
                    ce:c2:93:41:23:83:a6:b5:df:ed:69:70:09:24:35:
                    86:e9:dc:39:95:e3:db:94:76:aa:85:88:f3:5b:20:
                    90:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:80:26:3E:5D:7C:0E:A7:58:44:CD:09:4A:E3:F9:BD:EF:B7:9F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:f4:2f:ab:2c:01:cd:f2:a9:e1:26:72:e5:a9:c4:44:1c:fb:
         6d:dc:0c:6c:2e:20:2a:8e:df:c0:9b:34:71:4f:6b:f0:38:1c:
         4b:26:67:92:c4:27:8f:f8:44:fd:06:a8:f2:87:a1:96:e9:7f:
         c6:55:74:1c:62:a5:21:2c:cd:af:c9:3d:2f:15:06:e6:eb:11:
         7c:f6:b1:bb:7f:72:4c:5e:d9:b5:12:9b:1f:07:ad:c0:69:ce:
         14:03:b5:34:0b:df:b5:05:19:4a:5c:ff:da:de:7b:14:98:e4:
         b4:6a:dc:fc:5d:8d:53:b6:56:a8:12:f4:31:25:29:e3:d9:7d:
         ea:76:e1:73:8d:5f:73:f6:a3:d2:0c:70:b7:ab:31:55:39:8b:
         13:0c:dd:7a:4d:a5:78:fe:44:b3:69:e3:85:6f:2d:98:ac:49:
         dc:f9:96:d2:c0:0a:8b:93:0c:32:8f:9e:80:6a:bb:52:09:4e:
         3f:88:9f:34:7e:f9:00:4f:87:c3:ba:49:01:0a:e4:01:60:21:
         ca:67:fa:7e:1d:32:76:1a:eb:b6:11:59:51:a7:7a:74:58:1d:
         a3:a0:08:b2:e0:f5:66:0d:e8:43:ea:5d:ef:5f:f7:4b:c6:a2:
         07:a5:0c:34:e4:49:44:ed:fb:c4:6a:93:98:54:fd:5b:17:e0:
         46:28:93:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org