Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32332d3234203d3e203631333137.roa
File:                     3139342e33312e3134382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          arMML3lIrV8NCGoc5XPnCdqfJd2YktVxSdr0+ElBAcg=
Subject key identifier:   EB:E5:25:01:DD:A2:D5:0B:3E:C1:10:51:5B:CC:91:3E:B7:0E:43:73
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       378DB1384905F19815A13F1CF7C1F9D2CB1C1927
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:57 +0000
ROA not before:           Sat 22 Oct 2022 04:28:57 +0000
ROA not after:            Sat 21 Oct 2023 04:33:57 +0000
asID:                     61317
IP address blocks:        194.31.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8d:b1:38:49:05:f1:98:15:a1:3f:1c:f7:c1:f9:d2:cb:1c:19:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:57 2022 GMT
            Not After : Oct 21 04:33:57 2023 GMT
        Subject: CN=EBE52501DDA2D50B3EC110515BCC913EB70E4373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:e3:8f:84:74:12:c6:f1:b8:3f:cd:9f:ac:
                    37:cf:ac:98:2e:80:13:ad:9f:ff:4f:c3:72:20:30:
                    2b:05:57:bc:f6:b8:86:01:d2:f8:97:96:fa:31:57:
                    d1:cc:a6:11:28:61:66:c6:4f:0d:ca:2d:17:76:84:
                    61:d1:75:ef:1e:6a:50:08:d9:1d:2c:fc:a5:9d:33:
                    32:a5:48:35:4c:89:d9:51:1b:22:17:1e:ea:c6:c5:
                    67:58:c9:68:73:11:39:da:88:30:1c:75:b6:85:f4:
                    8f:0c:71:e7:41:c5:9a:a2:c0:14:d9:02:33:e2:0d:
                    f5:88:f2:18:c3:67:65:41:19:be:51:ec:a2:b6:de:
                    b3:11:a8:19:83:61:1e:c4:75:05:9c:5e:46:fa:69:
                    62:03:4d:d8:69:c1:53:7e:a0:be:81:4b:85:bf:4c:
                    8e:00:11:af:6e:e7:af:4a:39:90:72:7f:90:6f:1e:
                    25:e1:3d:12:56:f3:f8:e2:a6:19:db:72:d9:aa:2e:
                    97:b6:ee:f9:4d:ae:14:f0:1c:8e:d5:1a:7f:d2:ce:
                    a2:5c:ab:64:de:1a:19:d6:4b:aa:81:8d:60:55:d6:
                    27:22:e1:16:33:14:f5:b5:0b:53:7d:e4:33:b4:6e:
                    1b:0a:f0:fb:49:fb:17:f9:bf:9f:f4:0c:c5:b8:3a:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E5:25:01:DD:A2:D5:0B:3E:C1:10:51:5B:CC:91:3E:B7:0E:43:73
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:8b:69:04:8f:1b:72:29:59:a4:de:d9:20:3f:f6:c9:ac:9d:
         89:68:b3:dd:99:fe:28:82:74:a9:62:62:86:2d:b7:a5:ac:c6:
         63:67:28:9e:23:61:b3:eb:d1:d9:f2:e2:32:f7:eb:58:c5:8a:
         3e:d2:2e:b3:94:67:a6:e4:d1:10:c3:93:45:c9:2f:8e:a9:b4:
         c6:08:39:c4:6a:8c:ea:06:91:b8:da:e2:08:5a:19:03:c8:f9:
         32:81:d9:c5:74:ba:d2:be:8b:d2:e0:bb:18:00:c3:a0:80:00:
         62:fb:79:ec:f8:25:df:47:cc:79:63:83:c5:b5:5a:02:b6:43:
         43:f6:84:16:af:20:c9:f7:f1:b6:bf:f1:91:36:a1:90:e7:b7:
         c2:f8:4e:06:93:23:87:82:97:1b:a4:0e:33:06:b4:a7:7a:be:
         ee:65:5f:3a:16:e5:51:ef:47:8f:03:6b:20:c4:ee:65:51:33:
         33:26:40:55:d9:e9:88:fd:f1:a9:45:98:e0:30:16:dc:e6:9f:
         30:c1:bf:e8:cb:cc:19:ce:d6:a9:7b:40:9a:5f:0a:0e:5f:f5:
         49:26:c3:13:b1:cf:f8:de:eb:d7:cf:c4:ce:3d:4d:0d:cf:42:
         e2:e1:72:21:21:d3:f0:4f:a4:90:e3:0d:70:fd:a1:76:1b:bf:
         3b:94:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org