Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e3134362e31322e302f32332d3234203d3e203631333137.roa
File:                     3139342e3134362e31322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          jvF6ygfphIzNglVvStH0unKX+WclD2aIln5WeVEKzwI=
Subject key identifier:   A9:6C:56:C6:DB:92:44:ED:91:54:CA:B5:81:2E:D1:59:AC:31:89:25
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       36DC302425148AE72E72C269D0BECBCAB9B98AEC
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3134362e31322e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:24 +0000
ROA not before:           Fri 27 Nov 2020 15:05:24 +0000
ROA not after:            Fri 26 Nov 2021 15:10:24 +0000
asID:                     61317
IP address blocks:        194.146.12.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:dc:30:24:25:14:8a:e7:2e:72:c2:69:d0:be:cb:ca:b9:b9:8a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Nov 27 15:05:24 2020 GMT
            Not After : Nov 26 15:10:24 2021 GMT
        Subject: CN=3082010A0282010100B16EE00892A488104626A410E4E2AC2844240DADDD65C3C5DA9CBE82EB21BBD0881CD15987305CF60BDC40267E80D7529B45D53C5A09AAACC0C2CA374A1D0E9AE2C7872A0F4220783E62A44539A0FFFFE65071990536F7245621C1043074BB07599856749A6C6E1AAB44AE52BF3DAC007DB38634AB940338A1C97FCDF9834AEFEF74B2F739B3727281F2F00B4DFA4319D5838295448C4436C0D88AF3183CC887BA25D2F15B659E2E2B9862A40FF92168A7CEFA58C9E58179157AA7A9ECA60B85BB5EA36274669FBE0B17802DBF1E55B78A88DBE52DEA3D21569AA9558CCAACB9DA1A6A043DB2F4940C4470D5E1CAFB302C0996B55F48641E630F5713998EA9BF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:e0:08:92:a4:88:10:46:26:a4:10:e4:e2:
                    ac:28:44:24:0d:ad:dd:65:c3:c5:da:9c:be:82:eb:
                    21:bb:d0:88:1c:d1:59:87:30:5c:f6:0b:dc:40:26:
                    7e:80:d7:52:9b:45:d5:3c:5a:09:aa:ac:c0:c2:ca:
                    37:4a:1d:0e:9a:e2:c7:87:2a:0f:42:20:78:3e:62:
                    a4:45:39:a0:ff:ff:e6:50:71:99:05:36:f7:24:56:
                    21:c1:04:30:74:bb:07:59:98:56:74:9a:6c:6e:1a:
                    ab:44:ae:52:bf:3d:ac:00:7d:b3:86:34:ab:94:03:
                    38:a1:c9:7f:cd:f9:83:4a:ef:ef:74:b2:f7:39:b3:
                    72:72:81:f2:f0:0b:4d:fa:43:19:d5:83:82:95:44:
                    8c:44:36:c0:d8:8a:f3:18:3c:c8:87:ba:25:d2:f1:
                    5b:65:9e:2e:2b:98:62:a4:0f:f9:21:68:a7:ce:fa:
                    58:c9:e5:81:79:15:7a:a7:a9:ec:a6:0b:85:bb:5e:
                    a3:62:74:66:9f:be:0b:17:80:2d:bf:1e:55:b7:8a:
                    88:db:e5:2d:ea:3d:21:56:9a:a9:55:8c:ca:ac:b9:
                    da:1a:6a:04:3d:b2:f4:94:0c:44:70:d5:e1:ca:fb:
                    30:2c:09:96:b5:5f:48:64:1e:63:0f:57:13:99:8e:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6C:56:C6:DB:92:44:ED:91:54:CA:B5:81:2E:D1:59:AC:31:89:25
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3134362e31322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.146.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:96:0f:e4:1b:a9:52:5b:c4:76:86:a5:1d:36:ea:06:cb:88:
         b3:6d:c8:d0:2a:26:9b:29:c5:77:1b:f0:1f:bf:22:9f:dd:2b:
         3f:04:29:3b:03:57:96:45:12:0e:d5:4a:aa:a1:ee:1a:fb:69:
         08:fd:bc:43:fa:48:37:d9:d3:e5:71:cf:15:9f:06:a0:3b:64:
         cb:57:9f:39:26:9f:a3:b5:89:98:de:60:a0:cc:9d:5f:5a:20:
         4e:0c:bc:fb:7d:ec:64:5d:5a:4d:9c:75:3f:3f:4e:b3:c7:85:
         db:9f:22:4b:c3:bb:08:23:02:a2:bf:c6:91:04:cc:3e:1e:87:
         01:da:19:75:7e:4b:11:2f:9a:97:e4:19:eb:25:07:46:2e:02:
         57:22:5b:1d:7a:fa:dd:5b:86:21:03:34:35:2f:1d:f2:09:e3:
         95:94:44:94:36:5e:91:85:fa:6f:a7:62:1c:a8:c6:4a:7e:09:
         7e:c0:05:9b:31:11:a7:80:c2:f5:2d:9d:a7:ad:35:b3:29:87:
         53:4e:60:1b:31:cc:e3:ae:99:c7:e8:d6:ce:eb:8b:78:a2:82:
         78:15:f8:39:39:c3:4d:2a:3e:9f:cb:64:3e:a5:b8:c9:0e:9b:
         8d:e7:55:7e:eb:79:ea:24:9f:9c:d7:0e:77:75:0f:b5:2f:25:
         ef:e1:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:40 2023 by rpki-client on console-ams.rpki-client.org