Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36392e302f32342d3234203d3e203434363835.roa
File:                     33312e3138372e36392e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          8wiYIP+xvqyxEcLn4ULjBGDPkX9X4nr8VBzBn1fB2og=
Subject key identifier:   0D:3A:AC:34:3E:2B:23:F5:0F:94:C7:AB:27:FD:7E:72:7C:C8:B9:D4
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       94E6EFBE9481B54E81FC4240A9C2F86F78E394
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36392e302f32342d3234203d3e203434363835.roa
Signing time:             Fri 27 Nov 2020 15:10:30 +0000
ROA not before:           Fri 27 Nov 2020 15:05:30 +0000
ROA not after:            Fri 26 Nov 2021 15:10:30 +0000
asID:                     44685
IP address blocks:        31.187.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            94:e6:ef:be:94:81:b5:4e:81:fc:42:40:a9:c2:f8:6f:78:e3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:30 2020 GMT
            Not After : Nov 26 15:10:30 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:c7:46:ce:b7:b7:3b:ff:6d:92:0b:9f:04:
                    1d:48:4e:c8:e4:d6:84:83:ae:88:27:0f:80:91:3b:
                    cf:f1:06:cb:ea:2a:a3:5f:30:e0:08:f3:a8:ae:da:
                    1c:d9:de:af:66:a6:de:dd:b2:c6:20:3a:fe:07:ea:
                    05:cc:06:81:89:7f:9a:a9:91:65:d7:51:b8:9e:07:
                    d1:11:8a:58:02:0e:2f:ee:72:ed:e3:53:31:58:af:
                    b2:2d:a4:47:19:e4:9d:8f:15:39:d4:b1:25:9b:ef:
                    08:91:e6:a5:27:ad:93:20:4c:28:c5:5b:83:26:28:
                    0f:36:69:c1:0c:c6:16:87:51:62:99:9c:8b:f9:1f:
                    04:56:ed:c7:44:69:0c:f5:92:8a:8b:2e:9e:43:d0:
                    b2:10:4b:a2:de:b2:bf:af:0d:ad:30:b3:22:1d:d6:
                    79:1a:96:57:09:45:c6:a5:92:32:0e:7b:48:d6:87:
                    3b:c7:9d:f6:bf:22:19:c7:48:52:88:44:25:4d:6d:
                    6c:6b:97:ba:79:ac:15:a1:19:f9:63:73:ae:6c:e4:
                    06:d9:f7:35:fb:36:69:bc:f4:85:c8:69:51:71:ac:
                    bc:d4:6d:d4:ad:78:9e:ab:e8:19:97:79:6c:e2:60:
                    47:34:f2:3f:98:d0:87:07:7d:bb:c5:f2:2d:c3:5d:
                    9e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3A:AC:34:3E:2B:23:F5:0F:94:C7:AB:27:FD:7E:72:7C:C8:B9:D4
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36392e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:eb:a2:2d:ba:ef:21:50:4c:50:9c:40:bd:e0:f2:14:a0:
         2c:6c:97:90:f0:67:7e:6b:5f:84:23:b3:7a:48:7b:ca:75:0a:
         b4:1b:c2:ef:ea:ff:50:c5:52:ef:82:34:52:d5:06:37:e9:f1:
         7a:0a:3d:cd:9b:bc:e7:9e:57:a6:ab:04:85:c0:ae:2e:12:fc:
         58:04:93:07:9d:5b:cf:4d:8c:df:b1:d4:17:78:c0:90:1e:b2:
         62:f9:5d:31:02:a3:86:f1:d2:83:23:4e:f9:3c:35:3f:4c:03:
         5d:87:e7:21:7a:e5:d4:7d:0b:6c:61:0a:4d:e0:af:4d:bb:60:
         d2:82:af:d4:1b:a1:a1:4b:19:69:82:88:97:ce:3f:bb:57:07:
         28:8d:3d:7d:5b:78:79:c3:49:fd:71:a7:ad:0c:2c:4e:b7:77:
         fd:5b:69:63:a5:be:e1:e0:ad:8d:8e:53:4c:d8:94:8c:35:fa:
         2c:4c:f6:c8:e8:a3:71:36:59:16:21:01:41:fd:2f:0a:62:16:
         86:8f:5a:38:85:4a:d2:ec:2b:d6:6f:c8:1e:2c:27:5d:e2:4e:
         a3:f1:6d:54:e5:60:84:d8:cf:ad:fe:67:4d:b3:ae:07:20:fa:
         de:07:5f:47:96:c4:85:ba:15:d0:cf:dd:1e:cc:1b:92:b0:f6:
         ae:c3:bc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:40 2023 by rpki-client on console-ams.rpki-client.org