Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34322e302f32342d3234203d3e203530363733.roa
File:                     33312e3232302e34322e302f32342d3234203d3e203530363733.roa (raw, json)
Hash identifier:          mcSi7HYbxxviBuX92LrTTtwIjs0YVmzdkGwohpGrJC0=
Subject key identifier:   51:8D:40:AA:BB:7B:80:5A:50:4A:42:FF:87:A2:5D:9F:01:B0:9A:DE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0F6164C8EEBD7F1DD328935816765F9BDF8B1590
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34322e302f32342d3234203d3e203530363733.roa
Signing time:             Sat 22 Oct 2022 04:34:24 +0000
ROA not before:           Sat 22 Oct 2022 04:29:24 +0000
ROA not after:            Sat 21 Oct 2023 04:34:24 +0000
asID:                     50673
IP address blocks:        31.220.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:61:64:c8:ee:bd:7f:1d:d3:28:93:58:16:76:5f:9b:df:8b:15:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:24 2022 GMT
            Not After : Oct 21 04:34:24 2023 GMT
        Subject: CN=518D40AABB7B805A504A42FF87A25D9F01B09ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:92:07:ec:41:1b:4f:7e:f1:02:0c:53:5c:
                    32:2f:a4:c1:b4:f2:d4:6e:d8:f8:82:24:bd:77:34:
                    aa:30:a3:c9:da:45:5a:27:0b:1f:bd:2f:65:0d:ca:
                    c6:23:c9:d1:76:f1:b2:f7:b6:5a:dd:ac:b0:b7:27:
                    8c:8d:b5:b0:84:15:ba:79:4d:e9:ea:ed:b2:9b:de:
                    ad:f1:3a:41:a4:91:e0:a1:84:aa:55:1a:b2:3e:47:
                    cb:ab:9e:81:b4:a4:ae:16:c4:40:85:77:c8:80:f0:
                    7c:e8:b9:73:97:66:db:d9:76:78:03:87:4a:9d:8d:
                    5e:e1:c6:1d:65:c3:e8:6c:51:07:89:3f:cb:22:3f:
                    6b:36:d6:52:ae:49:97:01:8f:92:9d:5f:d7:2a:db:
                    4a:c9:85:ea:9a:09:5d:e3:8a:a4:2c:46:fc:b4:6f:
                    79:19:92:e2:4d:a6:78:66:8b:78:7f:ff:bb:cb:3e:
                    d3:c6:1e:40:49:81:47:6d:10:9f:f6:1b:d8:5c:5e:
                    55:a1:2a:1f:5f:b6:59:d3:3b:f8:05:e2:08:65:08:
                    82:8a:ae:01:bf:83:dc:a5:cb:b8:72:bd:8f:e8:60:
                    72:65:f0:fb:3c:79:17:a8:92:d8:04:55:74:12:fa:
                    4f:bd:c6:d9:74:6e:26:9d:e4:26:09:a8:30:6a:0b:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8D:40:AA:BB:7B:80:5A:50:4A:42:FF:87:A2:5D:9F:01:B0:9A:DE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34322e302f32342d3234203d3e203530363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.220.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ff:1a:a4:77:08:7a:b4:a5:d6:0c:f9:2e:86:e8:f9:55:4d:
         16:d1:57:0e:75:56:23:16:2b:37:f0:d7:4d:6b:88:82:65:6b:
         a6:be:9b:ff:9f:c7:db:58:f2:66:a5:28:a6:63:09:a9:2a:e6:
         ab:06:db:36:3c:dc:64:10:5e:2a:84:1c:23:69:6b:5f:91:15:
         60:6c:9d:ed:a2:69:98:73:80:15:2d:b8:8c:f5:5b:cc:4d:28:
         1d:c8:67:eb:87:5b:23:49:95:33:b5:a7:eb:e6:56:3a:23:de:
         36:06:fc:2f:62:c0:3c:25:db:9b:3e:3c:fa:a9:87:ba:40:c3:
         bd:03:cf:7a:c1:2d:36:42:84:eb:01:26:7e:53:d5:d3:8b:b5:
         2f:d2:8a:0c:a2:de:20:c7:92:e8:19:45:94:b9:03:cc:a2:d0:
         d3:d2:66:fb:74:5b:23:36:7a:fc:b7:2e:e4:6d:a6:6d:bf:da:
         30:7e:02:22:26:8f:cb:25:a5:80:74:72:a4:f9:c3:c4:ad:90:
         4a:92:7c:d6:17:6b:cc:c8:0d:bb:93:5b:17:77:9c:1f:a5:3c:
         a5:76:ee:d4:f4:17:03:e1:9f:81:de:97:88:02:8c:9f:56:a8:
         69:e5:b4:95:d3:b5:2a:dd:d0:36:96:57:25:ae:0a:09:57:d9:
         34:4e:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:40 2023 by rpki-client on console-ams.rpki-client.org