Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31322e302f32342d3234203d3e20323132323331.roa
File:                     3138382e3131362e31322e302f32342d3234203d3e20323132323331.roa (raw, json)
Hash identifier:          FHuMe4KLcX9Bz97ByD2RtkFUB9Z0TGPjaqWBUhvxvVw=
Subject key identifier:   B4:1C:6D:9E:B3:80:04:1A:CF:32:FF:3A:3F:B4:43:91:F2:1D:AC:B4
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       36357B66E2003F279FAB9D7FE7A0656C382C86EF
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31322e302f32342d3234203d3e20323132323331.roa
Signing time:             Tue 28 Jun 2022 04:40:34 +0000
ROA not before:           Tue 28 Jun 2022 04:35:34 +0000
ROA not after:            Tue 27 Jun 2023 04:40:34 +0000
asID:                     212231
IP address blocks:        188.116.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:35:7b:66:e2:00:3f:27:9f:ab:9d:7f:e7:a0:65:6c:38:2c:86:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:34 2022 GMT
            Not After : Jun 27 04:40:34 2023 GMT
        Subject: CN=B41C6D9EB380041ACF32FF3A3FB44391F21DACB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:58:00:ba:eb:d7:8a:22:bd:a9:1e:07:1c:
                    63:68:e7:82:d6:9d:5c:49:fa:2c:c2:fe:d6:8b:47:
                    80:aa:9e:7d:d7:78:18:7e:e4:29:43:77:bf:80:d0:
                    01:65:58:7f:40:4e:6d:0a:15:0d:39:12:c4:ff:1c:
                    e5:75:27:a5:f1:af:db:bf:41:59:50:10:2c:30:a9:
                    a7:f8:d4:c4:e3:1d:ae:4d:7b:a6:e5:f2:84:8e:1a:
                    0e:53:3a:3c:a0:b4:b8:33:e3:2a:1a:ec:92:86:6a:
                    4d:97:fd:d2:2b:e5:37:27:78:1b:ee:9a:22:f3:71:
                    c4:b5:59:d5:e7:58:74:46:26:df:82:25:ce:97:b1:
                    ab:77:f0:88:f7:fa:77:89:11:c2:4b:9a:34:6e:c0:
                    13:1c:3e:70:d8:a9:26:2f:5c:d5:aa:f0:43:2f:68:
                    14:ce:eb:5e:bf:15:0a:34:82:8f:6e:f1:07:c7:c5:
                    d5:27:0d:55:26:47:7c:43:8a:5f:bb:1b:f7:48:89:
                    f7:f6:72:bc:d2:14:d1:82:a5:2e:c9:f5:c5:33:e7:
                    45:0a:d4:b2:00:ab:c6:e6:ad:b7:9b:08:3f:b3:7e:
                    cd:e6:7c:7e:d8:03:8e:5b:c8:ac:f3:ea:36:ae:e3:
                    74:bc:62:9d:77:5e:35:47:bb:9c:9d:d4:40:c6:39:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1C:6D:9E:B3:80:04:1A:CF:32:FF:3A:3F:B4:43:91:F2:1D:AC:B4
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31322e302f32342d3234203d3e20323132323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.116.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:41:f6:5d:b0:48:f0:0f:e1:b1:73:f4:b6:eb:60:67:d5:
         f8:0d:56:0a:d9:f7:49:79:73:a1:90:5a:4e:65:09:6b:d3:b4:
         cb:32:fb:8f:1c:8d:cc:b8:2f:00:66:23:ac:6f:0c:ef:ce:ce:
         28:2e:83:a4:bc:db:e6:c8:8a:64:b8:13:6b:bb:e5:d2:65:5c:
         11:64:a8:86:1e:af:9f:35:2f:1f:5f:8b:b1:da:77:cc:c4:65:
         44:c9:5f:6b:2f:61:5c:c4:fe:1e:d3:6c:82:fa:d8:4c:a5:cd:
         9d:91:6c:3d:24:af:1a:5d:c5:33:42:49:db:c4:ce:18:59:f7:
         8b:1c:4d:c8:0f:13:a5:b6:3f:e3:49:b8:33:a6:f6:a7:a6:9c:
         ff:f0:90:54:9f:31:15:8b:6e:30:e8:6d:a0:ec:7e:d4:33:73:
         71:7c:ba:30:78:3e:6d:6a:9f:f5:cd:2b:61:31:6a:b0:a6:e5:
         fa:00:df:7f:94:90:f4:52:0c:e8:90:06:f5:a7:45:28:50:31:
         65:01:b2:c6:eb:47:17:06:55:80:47:18:17:fb:4e:e4:f9:00:
         14:71:ff:15:fe:3f:0c:0a:ae:f4:aa:f9:68:5c:fb:f7:93:f8:
         4e:db:54:73:80:b1:3e:61:1f:c7:69:ca:18:f2:fc:34:27:26:
         cf:16:7d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org