Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31352e302f32342d3234203d3e20323132323331.roa
File:                     3138382e3131362e31352e302f32342d3234203d3e20323132323331.roa (raw, json)
Hash identifier:          O8yG/z42kU3cxNOTzhaxLDFGPcZvI+MFp9tBxL/mOr8=
Subject key identifier:   A0:1F:AD:D8:00:87:73:A6:DD:24:AD:07:25:8E:9F:FC:5B:44:6A:E5
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       03FFA7C4F7142043EFA0C5D1B484061E0F54D698
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31352e302f32342d3234203d3e20323132323331.roa
Signing time:             Tue 28 Jun 2022 04:40:41 +0000
ROA not before:           Tue 28 Jun 2022 04:35:41 +0000
ROA not after:            Tue 27 Jun 2023 04:40:41 +0000
asID:                     212231
IP address blocks:        188.116.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ff:a7:c4:f7:14:20:43:ef:a0:c5:d1:b4:84:06:1e:0f:54:d6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:41 2022 GMT
            Not After : Jun 27 04:40:41 2023 GMT
        Subject: CN=A01FADD8008773A6DD24AD07258E9FFC5B446AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:02:23:ae:1f:91:f1:bb:53:df:09:04:2e:
                    4d:71:1f:96:79:09:8a:a9:88:90:0d:21:99:b8:95:
                    73:99:58:d9:9a:f6:23:27:67:0f:4e:b4:ba:ef:36:
                    94:a6:3d:20:bb:f0:a8:b9:15:d5:ee:bd:89:0a:05:
                    d6:f6:b2:ba:1f:a8:3e:78:c1:66:2d:7d:6c:30:8a:
                    90:60:da:c1:0d:10:8d:20:57:00:1b:b7:bd:f2:e9:
                    30:24:36:95:c4:5e:fe:d3:44:1e:71:54:2a:d8:62:
                    57:1a:05:5a:d4:a1:f2:4a:d2:02:6c:e5:fd:7a:66:
                    6d:97:88:60:58:6f:b8:c2:a8:72:db:fa:8f:ee:df:
                    d4:8c:83:26:87:99:65:99:2a:9b:1f:42:af:e1:de:
                    5d:29:37:91:f1:ed:ff:67:d7:65:2a:62:80:d2:e4:
                    75:1b:1c:04:ee:67:f2:a1:1f:f4:56:a0:43:dd:4c:
                    61:cd:f7:a2:97:6c:98:61:ab:02:5d:c8:ad:c7:ac:
                    c6:43:ba:56:40:df:48:ac:92:e0:78:3c:1b:8c:b5:
                    33:67:46:97:ec:ea:af:f8:00:52:df:f6:0f:cb:30:
                    e1:ec:06:16:57:e8:96:8c:80:0c:92:f4:9b:da:5b:
                    eb:72:03:6e:66:c4:a5:03:5e:cf:4f:7d:f4:58:b5:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1F:AD:D8:00:87:73:A6:DD:24:AD:07:25:8E:9F:FC:5B:44:6A:E5
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31352e302f32342d3234203d3e20323132323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.116.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:4c:47:d1:58:14:d3:d5:3d:50:a7:46:c5:94:1f:b9:18:5c:
         06:bc:1c:68:94:58:f2:06:c6:15:34:f2:d7:00:0f:3c:cb:e6:
         4a:8d:01:94:4b:b7:95:64:48:99:90:97:3b:69:ab:ba:a7:3f:
         15:d9:d0:82:b3:ac:a2:5e:37:cc:2f:d9:58:64:81:85:15:9c:
         3a:78:02:81:95:40:24:79:f7:02:93:f7:05:5f:7a:69:95:9d:
         c3:b5:92:6e:bc:42:12:c8:58:8d:59:35:00:cb:1a:d7:81:c9:
         43:dc:49:32:34:19:2e:96:61:55:f8:88:d8:50:0d:58:27:15:
         f4:ed:d4:b5:a2:8c:8e:c4:10:3c:19:43:72:95:d0:15:9f:96:
         52:91:21:48:fe:cf:71:79:4a:64:ba:e0:20:63:30:b4:8b:55:
         3e:e3:1d:63:b7:71:80:b6:74:6e:62:e8:b0:78:49:a6:e7:83:
         98:b8:7a:9a:cf:e4:73:5e:19:27:ec:eb:72:76:c9:20:40:41:
         71:b5:c5:e3:1d:8c:b7:fe:ca:7c:95:8a:90:01:b6:7d:99:59:
         e2:02:d5:75:0b:4b:21:57:72:04:b9:5c:da:10:cf:c9:96:d9:
         df:3b:15:c8:fb:f5:d6:30:81:fc:05:a6:72:00:54:67:b2:37:
         71:a9:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org