Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3234203d3e203432383331.roa
File:                     38352e3139302e3232392e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          u9+Y10X91nC3STOHvT0J3Gjuto9wNUWhsXvJvQt6Gho=
Subject key identifier:   26:28:EA:24:5B:C6:F8:31:16:B4:72:0E:AA:E4:67:91:13:66:CE:AB
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2FD94AC389E07EB6D9ACCEB6EE00D5056CB87139
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3234203d3e203432383331.roa
Signing time:             Sat 22 Oct 2022 04:34:12 +0000
ROA not before:           Sat 22 Oct 2022 04:29:12 +0000
ROA not after:            Sat 21 Oct 2023 04:34:12 +0000
asID:                     42831
IP address blocks:        85.190.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d9:4a:c3:89:e0:7e:b6:d9:ac:ce:b6:ee:00:d5:05:6c:b8:71:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:12 2022 GMT
            Not After : Oct 21 04:34:12 2023 GMT
        Subject: CN=2628EA245BC6F83116B4720EAAE467911366CEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:51:16:28:4e:2c:40:1f:82:d9:83:d9:3e:
                    11:d7:98:23:99:7e:d5:15:3f:73:a9:af:e1:6d:8f:
                    4f:91:7f:96:53:de:01:53:ff:a9:f2:73:43:ea:00:
                    b8:5e:be:e2:9c:f2:22:4c:99:ff:b2:11:19:d6:d3:
                    d3:8f:9c:d0:bb:d9:8c:ad:a2:24:b7:c0:d8:ca:94:
                    45:d8:5b:5c:b7:4d:01:55:03:44:cb:db:4b:ab:20:
                    76:ca:55:9f:d6:92:fc:c4:9e:52:13:23:c2:fc:fe:
                    0c:d9:01:2f:31:c5:74:f9:ec:ce:b6:1e:d6:9b:57:
                    b3:9f:45:b7:d3:a0:de:90:c5:ac:24:cc:61:d9:69:
                    1e:ee:12:b8:32:6a:cf:1d:b7:cd:6d:bc:d2:5a:d4:
                    bd:57:b7:66:4d:29:3a:fa:c2:5f:b1:ac:9c:57:d0:
                    99:6e:0c:f7:e8:98:d0:8d:9a:ed:a2:39:91:aa:a7:
                    11:5f:82:2a:d1:86:e3:ea:e1:0d:8b:09:18:0d:e6:
                    8b:aa:1b:43:d6:bc:e3:64:78:86:25:bd:9e:99:97:
                    3c:7a:b3:ab:07:19:7d:50:d5:2b:fb:02:ef:6f:63:
                    ac:b4:3c:cb:5a:20:ef:75:b3:8a:bc:4f:9f:05:5e:
                    d5:b1:09:8b:25:b6:52:09:4b:a9:9c:d2:21:8c:e1:
                    70:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:28:EA:24:5B:C6:F8:31:16:B4:72:0E:AA:E4:67:91:13:66:CE:AB
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3232392e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.190.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:3c:46:37:ac:d4:bc:c1:03:58:fc:bb:50:2c:92:cb:0d:78:
         a3:a5:e4:73:54:bf:08:8f:36:5e:55:88:08:95:4e:46:2e:e2:
         bf:2e:a6:9d:b0:c0:cd:32:b6:fc:5f:7b:7b:12:cc:f8:20:09:
         e4:ce:65:ab:23:5a:d2:1c:bd:fd:5e:c5:06:ed:1e:88:5c:a9:
         5d:17:f7:0e:4d:1d:0e:74:32:0f:05:bb:f8:9f:8e:90:20:d3:
         40:75:02:10:51:f6:0c:c6:3e:97:20:cc:10:80:60:71:f0:72:
         e5:87:dd:c3:dc:9d:4d:0f:d8:32:68:63:2f:84:a1:2d:90:1d:
         ad:79:f4:74:17:2c:4e:75:65:5e:a0:a2:0c:f4:51:82:4b:6a:
         27:e7:e1:70:9b:3a:f4:33:d8:1c:de:53:2f:d0:49:39:55:2a:
         f2:34:70:98:1c:e2:e4:56:74:da:d5:8d:79:18:14:c6:02:f5:
         f9:5a:50:55:c3:06:1b:a1:c7:5e:63:cb:cd:14:0d:31:81:fa:
         79:86:f2:3e:79:ee:dc:85:17:7b:ae:03:47:02:ce:82:07:5b:
         77:01:65:fd:92:98:d0:76:d6:36:e2:21:a8:18:cb:6e:fd:17:
         58:a2:9a:22:b2:ab:50:33:5d:68:01:2f:de:18:eb:3c:6a:a7:
         12:85:ce:ec
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUL9lKw4ngfrbZrM627gDVBWy4cTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MTJaFw0yMzEwMjEwNDM0MTJaMDMxMTAvBgNV
BAMTKDI2MjhFQTI0NUJDNkY4MzExNkI0NzIwRUFBRTQ2NzkxMTM2NkNFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZlEWKE4sQB+C2YPZPhHXmCOZ
ftUVP3Opr+Ftj0+Rf5ZT3gFT/6nyc0PqALhevuKc8iJMmf+yERnW09OPnNC72Yyt
oiS3wNjKlEXYW1y3TQFVA0TL20urIHbKVZ/WkvzEnlITI8L8/gzZAS8xxXT57M62
HtabV7OfRbfToN6QxawkzGHZaR7uErgyas8dt81tvNJa1L1Xt2ZNKTr6wl+xrJxX
0JluDPfomNCNmu2iOZGqpxFfgirRhuPq4Q2LCRgN5ouqG0PWvONkeIYlvZ6Zlzx6
s6sHGX1Q1Sv7Au9vY6y0PMtaIO91s4q8T58FXtWxCYsltlIJS6mc0iGM4XAZAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUJijqJFvG+DEWtHIOquRnkRNmzqswHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODM1MmUzMTM5MzAyZTMyMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0
MzIzODMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBABVvuUwDQYJKoZIhvcNAQELBQADggEBALk8Rjes
1LzBA1j8u1AskssNeKOl5HNUvwiPNl5ViAiVTkYu4r8upp2wwM0ytvxfe3sSzPgg
CeTOZasjWtIcvf1exQbtHohcqV0X9w5NHQ50Mg8Fu/ifjpAg00B1AhBR9gzGPpcg
zBCAYHHwcuWH3cPcnU0P2DJoYy+EoS2QHa159HQXLE51ZV6gogz0UYJLaifn4XCb
OvQz2BzeUy/QSTlVKvI0cJgc4uRWdNrVjXkYFMYC9flaUFXDBhuhx15jy80UDTGB
+nmG8j557tyFF3uuA0cCzoIHW3cBZf2SmNB21jbiIagYy279F1iimiKyq1AzXWgB
L94Y6zxqpxKFzuw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:40 2023 by rpki-client on console-ams.rpki-client.org