Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232342e302f32342d3234203d3e203631333137.roa
File:                     37372e3233372e3232342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          k48BSApP+Juh1xQIG8vukmDBCRLSmVQ/veQJCU+kQ+g=
Subject key identifier:   90:89:15:39:6C:E8:12:38:BD:AE:61:04:75:73:8D:39:B6:B0:F5:A2
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1AA79261984CFBC774DE38E7A79A7F51E2CEA53C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232342e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:31 +0000
ROA not before:           Sat 22 Oct 2022 04:29:31 +0000
ROA not after:            Sat 21 Oct 2023 04:34:31 +0000
asID:                     61317
IP address blocks:        77.237.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a7:92:61:98:4c:fb:c7:74:de:38:e7:a7:9a:7f:51:e2:ce:a5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:31 2022 GMT
            Not After : Oct 21 04:34:31 2023 GMT
        Subject: CN=908915396CE81238BDAE610475738D39B6B0F5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:5c:b1:54:c4:44:ce:83:f0:fc:05:c1:ad:
                    9d:da:68:2d:fb:c1:68:f9:7c:cd:3f:cf:65:8b:bd:
                    74:d0:a7:61:97:6a:69:6f:70:8c:9e:39:99:aa:84:
                    f8:d7:a8:78:3b:bd:2f:14:c4:db:4e:6c:b9:1a:55:
                    ac:22:54:19:5e:95:d8:42:63:bc:89:6c:4f:a0:c4:
                    de:de:b6:1d:fc:9a:27:fb:1f:ae:5c:fe:45:43:ed:
                    cf:dc:42:88:73:bc:47:5a:a9:29:e7:ce:fe:98:2f:
                    c2:65:12:07:d0:b9:74:97:18:8b:27:a9:22:da:a3:
                    ed:fb:8a:6c:1e:92:14:9d:c6:dd:c3:c7:a7:58:3d:
                    0e:a0:33:7e:dd:75:f8:3e:33:e0:d2:2d:ce:99:40:
                    8b:23:bb:18:df:48:7c:4c:72:7c:4b:87:ab:52:b5:
                    ff:da:cf:0b:3d:10:65:52:bf:29:22:b3:80:6e:9b:
                    f9:02:9f:72:a2:6b:2e:66:24:2a:be:e3:b3:78:6b:
                    47:b7:a7:90:fe:46:39:b3:e1:3a:c8:b5:39:e5:3d:
                    99:99:93:de:97:4f:2d:19:3b:08:a7:21:25:fc:ff:
                    ec:49:b8:26:40:5a:85:5c:b5:c5:4c:f8:55:20:81:
                    74:4c:94:ad:40:a9:10:8d:c4:57:a1:34:47:ae:5b:
                    ed:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:89:15:39:6C:E8:12:38:BD:AE:61:04:75:73:8D:39:B6:B0:F5:A2
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.237.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:67:f2:be:40:5a:70:b0:4e:b1:99:54:ea:44:ec:20:e6:
         2b:aa:e0:50:36:03:6f:8d:d0:1d:71:ae:d6:03:23:6e:d7:2f:
         10:f6:59:02:6e:a2:57:45:b8:78:13:71:c2:1e:48:fc:ba:58:
         fc:22:69:64:68:97:53:95:fc:b2:94:3c:bc:86:43:02:b2:02:
         ac:28:3b:a4:7a:3f:e5:55:28:01:0c:12:42:f7:0b:9b:3a:15:
         d6:10:82:ea:fd:37:5d:e2:31:eb:8a:66:21:21:6c:83:18:a3:
         c3:f1:d1:ec:41:d3:0d:2e:b0:99:61:41:ae:07:e4:d0:79:0b:
         3b:ef:00:6d:78:6a:ed:12:64:e9:80:6c:d5:ab:19:4e:f8:62:
         a3:c4:2f:a7:e1:9e:97:a1:84:09:a2:b1:61:83:80:d2:72:e5:
         e6:82:6d:dd:41:85:09:95:8d:4d:a4:31:31:f1:47:bd:b9:c5:
         b4:04:71:11:85:0a:db:dd:78:29:54:f0:79:2e:9c:18:25:bf:
         4c:8e:df:9a:52:36:7c:55:68:e1:77:62:ed:c4:61:08:91:42:
         af:19:7a:e2:0d:68:c6:b2:1e:3d:3a:e5:a3:d1:c3:ca:c5:d5:
         62:9a:45:26:f4:cc:ee:57:54:75:43:e1:ff:f7:b3:4e:1e:af:
         6a:0b:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:50 2023 by rpki-client on console-fra.rpki-client.org