Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31352e302f32342d3234203d3e20323132373730.roa
File:                     3138382e3131362e31352e302f32342d3234203d3e20323132373730.roa (raw, json)
Hash identifier:          L1L24teqY+HiSyHaTU4btgq+dz0lptLGXw+rAd2JTBo=
Subject key identifier:   32:43:91:E7:49:EC:25:93:05:3D:38:24:AF:F6:37:E0:2F:A1:0C:81
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       39AE0C37CEB30E81C928FAF75C7B402CCFE167CE
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31352e302f32342d3234203d3e20323132373730.roa
Signing time:             Tue 28 Jun 2022 04:40:51 +0000
ROA not before:           Tue 28 Jun 2022 04:35:51 +0000
ROA not after:            Tue 27 Jun 2023 04:40:51 +0000
asID:                     212770
IP address blocks:        188.116.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ae:0c:37:ce:b3:0e:81:c9:28:fa:f7:5c:7b:40:2c:cf:e1:67:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:51 2022 GMT
            Not After : Jun 27 04:40:51 2023 GMT
        Subject: CN=324391E749EC2593053D3824AFF637E02FA10C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:6b:9c:d3:7c:47:f8:b0:0b:dc:eb:74:e6:
                    ed:22:fc:e8:a8:ce:36:56:38:fb:06:14:4d:76:88:
                    95:5f:8b:b0:39:0a:33:48:f1:44:7e:0a:5b:74:00:
                    43:31:76:94:7d:4f:68:79:82:f4:96:30:61:43:c2:
                    95:ee:51:22:99:04:cb:7b:6d:72:f0:46:d8:fa:6d:
                    25:ea:ab:6c:01:40:45:e2:cb:74:8e:ec:ef:1e:21:
                    95:27:46:13:2a:df:c3:d4:de:a3:1f:c7:e1:24:de:
                    fc:29:96:c0:54:be:35:f7:a4:d6:43:9c:4e:4f:25:
                    71:84:27:65:37:52:29:59:10:9b:1b:75:02:7e:85:
                    58:76:e9:67:73:9b:61:6e:80:06:12:ba:b2:e8:14:
                    23:cf:13:0f:87:9d:3a:23:fd:a9:b6:38:b2:21:ed:
                    83:5d:60:ec:d6:19:c1:1c:f2:94:f6:e6:06:cc:6e:
                    dc:b9:14:85:7a:18:dd:c3:96:4f:b8:06:af:e8:7e:
                    dc:70:c2:f0:1c:2f:21:bf:c7:66:b8:8e:4b:92:66:
                    57:59:e0:72:51:bd:9d:7b:dd:ac:d6:7e:57:00:39:
                    b3:25:a6:f2:5e:fe:ff:f6:e6:f8:10:ef:d7:e6:21:
                    8a:56:ea:22:2b:48:8b:61:4a:da:5c:87:f1:39:b4:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:43:91:E7:49:EC:25:93:05:3D:38:24:AF:F6:37:E0:2F:A1:0C:81
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31352e302f32342d3234203d3e20323132373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.116.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:81:ff:30:07:ee:5b:58:ad:cb:95:a1:75:e2:78:43:f1:48:
         ce:e0:53:75:74:4b:de:be:a4:a9:ed:6c:9b:f4:24:38:b2:f5:
         82:97:c7:4b:fa:1d:d4:20:39:98:92:47:e5:12:eb:5d:c9:eb:
         47:dc:4d:34:11:0b:34:06:8b:a5:97:07:e2:29:03:17:31:11:
         38:c3:1c:b1:e4:57:e2:2a:1e:7b:31:53:ab:ec:85:e4:f8:e3:
         78:5c:21:8d:30:2f:94:59:5c:61:04:d0:31:4b:ac:06:db:e4:
         59:0e:9d:5c:81:c5:ed:13:7c:94:ca:49:76:72:65:15:5a:b4:
         20:a4:d7:fe:65:b8:d4:d0:62:fa:ff:d8:dc:95:3b:ed:9b:36:
         ad:2a:b7:df:83:d9:52:fe:e8:99:5d:51:98:0d:a2:83:33:ac:
         fd:85:a5:7c:f4:ff:e0:7a:15:b7:6c:d0:dc:71:ab:f2:8c:44:
         85:05:4f:f6:83:74:70:dd:01:e4:86:1c:f9:6e:db:77:a7:ca:
         01:d5:41:43:62:84:4f:91:2f:b6:84:f1:48:0a:0a:6c:49:6b:
         52:a7:62:3f:71:5a:0a:f9:a1:19:b6:4f:52:44:65:2c:e3:1c:
         44:69:df:15:2e:41:13:e0:b6:fa:99:20:67:3f:4b:0c:0a:d8:
         d9:28:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org