Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31342e302f32342d3234203d3e20323132373730.roa
File:                     3138382e3131362e31342e302f32342d3234203d3e20323132373730.roa (raw, json)
Hash identifier:          sROlPn+0Z56G+MpqVqEI/y2ljZTzRb/JaGRNZjcRZj8=
Subject key identifier:   44:00:DC:FD:47:24:44:99:B8:B5:45:C7:52:61:71:5D:42:76:E8:25
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       134DC66EAE08FFF8C5A82B762BE4E52C59448E5F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31342e302f32342d3234203d3e20323132373730.roa
Signing time:             Tue 28 Jun 2022 04:40:45 +0000
ROA not before:           Tue 28 Jun 2022 04:35:45 +0000
ROA not after:            Tue 27 Jun 2023 04:40:45 +0000
asID:                     212770
IP address blocks:        188.116.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4d:c6:6e:ae:08:ff:f8:c5:a8:2b:76:2b:e4:e5:2c:59:44:8e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:45 2022 GMT
            Not After : Jun 27 04:40:45 2023 GMT
        Subject: CN=4400DCFD47244499B8B545C75261715D4276E825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:fe:a1:cf:af:5d:69:3b:d8:4f:7b:49:87:
                    b4:c0:a8:ce:95:40:08:b9:8e:12:1f:b5:e7:ef:10:
                    fb:69:50:6b:5c:50:63:24:45:ea:36:05:41:21:42:
                    54:26:41:0a:27:99:d9:29:06:df:de:42:40:b4:de:
                    c7:9a:8e:3b:98:55:c0:59:47:9d:ef:6f:81:75:f4:
                    9d:a3:8d:76:39:c0:3c:db:86:bf:9a:d8:a4:cb:10:
                    46:97:50:81:24:a7:a1:d6:50:1d:53:bd:1c:60:1a:
                    cd:76:6b:29:9e:39:16:27:48:ab:2f:cd:f1:36:bf:
                    a5:25:a3:43:b1:ca:8e:2f:3c:4a:b8:cb:29:69:d7:
                    11:b9:a3:3e:ce:45:dd:6f:46:c7:34:a7:bd:c4:6c:
                    eb:54:8f:d0:27:ef:c1:2b:61:d0:b4:39:db:00:8f:
                    cb:a9:5f:c0:43:e2:c6:2d:e0:dc:11:d2:7c:90:06:
                    c9:70:c9:cb:8e:56:a2:b6:ba:c1:fc:be:5c:16:2f:
                    53:80:7b:49:bb:74:e4:e4:18:d1:bf:6c:54:5f:48:
                    68:b1:ba:e9:5c:8c:7a:2a:c0:c1:b4:f0:44:6a:4b:
                    9a:ea:a7:af:03:19:c5:26:0e:90:b2:08:af:26:83:
                    e4:9f:b1:05:a9:2d:a3:91:89:49:f3:a7:ea:3f:03:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:00:DC:FD:47:24:44:99:B8:B5:45:C7:52:61:71:5D:42:76:E8:25
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31342e302f32342d3234203d3e20323132373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.116.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:2b:b6:3b:39:6d:17:55:72:b3:9f:3f:f6:3f:45:37:ce:e3:
         cb:da:86:29:56:bb:5e:e0:67:63:55:df:e3:b3:8b:5b:3f:da:
         ba:d1:8b:4d:be:68:b8:8e:78:27:76:7a:4d:e6:ab:d8:73:3a:
         d5:fb:bc:0d:8d:59:9f:5f:f5:85:37:ff:81:85:02:8b:09:cf:
         f8:f1:8b:24:01:4f:47:91:64:9d:e7:4f:d9:fb:42:b5:f7:da:
         44:68:d3:dc:3b:9b:0a:dc:4f:08:3f:9f:12:34:86:af:80:76:
         1a:7d:1f:84:d0:2e:b4:3e:82:70:05:6a:2c:2e:2c:a3:2c:77:
         70:ad:55:e0:11:2d:7e:ae:e8:ec:7e:b5:4a:13:77:a4:b7:0d:
         d2:78:01:5d:f2:81:43:5f:3e:fd:aa:8b:66:b1:dc:e7:cf:87:
         77:36:a2:90:6f:1b:3c:3d:18:4e:c6:50:11:f9:0f:81:94:c9:
         c3:3b:ac:ee:40:be:54:e4:2e:46:b2:92:35:8c:c5:1b:f1:c3:
         8a:69:72:49:8b:3c:04:b9:55:ec:c6:09:3a:2b:ba:1b:d9:17:
         15:c8:b2:3e:61:14:76:94:a0:0b:f5:4b:22:f9:a1:f0:d7:26:
         2d:ef:84:3b:ca:21:0a:cb:0f:ec:20:c3:50:43:4d:f8:b5:c0:
         0c:dd:d8:c2
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUE03Gbq4I//jFqCt2K+TlLFlEjl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1NDVaFw0yMzA2MjcwNDQwNDVaMDMxMTAvBgNV
BAMTKDQ0MDBEQ0ZENDcyNDQ0OTlCOEI1NDVDNzUyNjE3MTVENDI3NkU4MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3EP6hz69daTvYT3tJh7TAqM6V
QAi5jhIftefvEPtpUGtcUGMkReo2BUEhQlQmQQonmdkpBt/eQkC03seajjuYVcBZ
R53vb4F19J2jjXY5wDzbhr+a2KTLEEaXUIEkp6HWUB1TvRxgGs12aymeORYnSKsv
zfE2v6Ulo0Oxyo4vPEq4yylp1xG5oz7ORd1vRsc0p73EbOtUj9An78ErYdC0OdsA
j8upX8BD4sYt4NwR0nyQBslwycuOVqK2usH8vlwWL1OAe0m7dOTkGNG/bFRfSGix
uulcjHoqwMG08ERqS5rqp68DGcUmDpCyCK8mg+SfsQWpLaORiUnzp+o/A61PAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQURADc/UckRJm4tUXHUmFxXUJ26CUwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzgyZTMxMzEzNjJlMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzEzMjM3MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALx0DjANBgkqhkiG9w0BAQsFAAOCAQEAqCu2
OzltF1Vys58/9j9FN87jy9qGKVa7XuBnY1Xf47OLWz/autGLTb5ouI54J3Z6Tear
2HM61fu8DY1Zn1/1hTf/gYUCiwnP+PGLJAFPR5FknedP2ftCtffaRGjT3DubCtxP
CD+fEjSGr4B2Gn0fhNAutD6CcAVqLC4soyx3cK1V4BEtfq7o7H61ShN3pLcN0ngB
XfKBQ18+/aqLZrHc58+HdzaikG8bPD0YTsZQEfkPgZTJwzus7kC+VOQuRrKSNYzF
G/HDimlySYs8BLlV7MYJOiu6G9kXFciyPmEUdpSgC/VLIvmh8NcmLe+EO8ohCssP
7CDDUENN+LXADN3Ywg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org