Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e203631333137.roa
File:                     3139342e3135362e3133362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          7DM9eOX3Sc0IETR4qqIfAxelnHED55bbkTMX5INZREA=
Subject key identifier:   A7:87:B1:A7:CC:F8:E8:C1:B1:21:3E:D6:B7:4C:92:1C:22:BA:C8:56
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       2A0FC874E281B3002C81E9BE4189E13BA8D4F641
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:55 +0000
ROA not before:           Tue 28 Jun 2022 04:35:55 +0000
ROA not after:            Tue 27 Jun 2023 04:40:55 +0000
asID:                     61317
IP address blocks:        194.156.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0f:c8:74:e2:81:b3:00:2c:81:e9:be:41:89:e1:3b:a8:d4:f6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Jun 28 04:35:55 2022 GMT
            Not After : Jun 27 04:40:55 2023 GMT
        Subject: CN=A787B1A7CCF8E8C1B1213ED6B74C921C22BAC856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:27:81:83:5d:25:fd:8b:68:94:6e:0e:df:
                    15:ea:e1:89:b2:73:ac:45:1e:85:41:e1:2e:cc:52:
                    c0:30:39:f5:5d:5c:48:c8:c1:77:41:aa:96:5c:07:
                    c7:5f:a8:19:89:95:50:a4:0b:30:3c:44:11:7f:25:
                    2e:f7:5a:fd:da:96:e1:df:60:c1:01:a9:46:09:b8:
                    99:4c:7e:3f:a5:88:3e:47:8f:e0:d4:13:c4:df:34:
                    e8:84:4f:ad:6e:1f:a1:94:fa:00:fa:46:4f:9b:ba:
                    07:b3:eb:e5:68:52:1a:e6:56:d3:7c:88:d3:b8:4d:
                    e0:63:14:b6:8e:40:d3:de:05:37:2b:85:23:cc:b0:
                    eb:82:d7:8b:54:ad:ae:51:51:3b:82:66:81:7c:42:
                    9f:74:ca:ce:0f:af:cd:87:84:68:f1:94:8c:6d:33:
                    ff:30:67:1f:01:6a:cc:50:1c:b4:23:66:f2:08:15:
                    fe:e3:c5:30:ce:b4:1e:9d:2a:60:5d:05:bd:aa:fd:
                    3b:35:bc:ba:09:52:e4:db:a0:b7:92:ed:f9:88:59:
                    60:d1:5f:59:fd:52:8d:d6:c7:71:06:23:07:41:a3:
                    d5:63:34:8e:16:6a:08:76:7b:1e:02:9b:f3:ff:2f:
                    0e:45:50:05:a4:a4:09:c2:46:13:61:1a:b3:60:e9:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:87:B1:A7:CC:F8:E8:C1:B1:21:3E:D6:B7:4C:92:1C:22:BA:C8:56
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:5c:b3:ca:cb:7d:fd:18:21:74:d1:07:98:d8:0f:50:7d:5b:
         c8:fa:11:1e:95:53:de:56:9c:b9:be:7c:d2:a9:77:13:a9:86:
         74:c4:9b:a1:f9:02:f1:62:fe:11:34:b7:ab:e9:1a:13:dd:74:
         79:e3:2c:21:1a:aa:83:26:f7:b8:55:8b:09:81:69:88:d0:dc:
         90:db:64:5e:a4:1d:73:32:66:90:b6:87:06:01:e6:6b:10:11:
         1f:b8:3d:c6:24:80:59:31:7a:75:61:0f:4b:d5:3d:4a:89:ac:
         d3:17:7d:66:1b:46:c2:9e:c8:5c:10:eb:4d:51:eb:61:98:e5:
         c3:40:3a:15:c4:8c:5e:7f:fa:5a:fd:d1:21:c9:b5:9c:a5:95:
         16:21:2a:a3:3f:1e:ea:bc:99:c7:fc:63:ce:ba:72:d3:6e:3f:
         40:62:66:96:6a:b3:eb:cc:a6:49:70:ad:7e:df:f9:22:b2:3b:
         bc:96:5b:13:93:64:b9:3f:4b:73:3c:21:7b:ba:61:f7:cd:dc:
         38:f1:33:fa:fc:16:57:2a:69:69:06:64:0b:8b:c6:1c:53:fd:
         0f:64:95:08:41:f4:70:6b:d3:30:29:47:4b:94:2f:70:eb:ce:
         39:4b:76:6c:b4:2c:c1:1e:0b:aa:52:1f:86:c2:c2:fd:04:4d:
         56:9b:dc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org