Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
File:                     3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          ga/nTl0PQVc46feSc8K3FUQI7Ic9EYgwrFm/C3jrAok=
Subject key identifier:   B3:DE:77:3C:9E:06:80:F1:C2:43:33:EB:7A:76:00:46:5E:11:40:F7
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       444695836845CB7D753B424C43D6C692EAB8968C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
Signing time:             Sat 22 Oct 2022 04:33:20 +0000
ROA not before:           Sat 22 Oct 2022 04:28:20 +0000
ROA not after:            Sat 21 Oct 2023 04:33:20 +0000
asID:                     204170
IP address blocks:        185.182.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:46:95:83:68:45:cb:7d:75:3b:42:4c:43:d6:c6:92:ea:b8:96:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:20 2022 GMT
            Not After : Oct 21 04:33:20 2023 GMT
        Subject: CN=B3DE773C9E0680F1C24333EB7A7600465E1140F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:83:e5:7f:6e:d6:95:42:e7:ee:5f:6b:90:
                    64:c5:f9:5a:75:13:59:19:83:b6:1b:2f:c4:80:ac:
                    f6:ba:98:20:52:8e:d5:47:ec:c0:dc:6d:76:0c:51:
                    68:60:ae:f7:b1:e5:b3:27:2b:fd:4b:27:ad:11:b3:
                    7c:05:67:8f:ee:f4:d0:6f:40:dd:af:79:84:fd:5a:
                    ec:36:0b:1f:61:c8:1f:6f:03:f4:d3:97:d9:da:88:
                    c1:24:fb:01:a8:11:f8:9d:43:a9:d8:17:a0:1d:2b:
                    0f:0b:fe:9d:75:bd:39:20:e5:5e:3f:94:73:66:39:
                    eb:2a:a6:00:b9:37:a7:ed:03:81:3b:01:f8:ce:12:
                    22:ed:21:f4:04:cd:89:f0:3b:d5:c8:2c:bf:af:b9:
                    ed:0b:f7:87:60:6d:72:f2:dc:30:95:41:b2:ea:3c:
                    06:e8:37:21:03:ac:ac:31:a6:aa:32:65:14:8c:d1:
                    46:61:5f:90:87:e7:1e:4c:0e:0a:48:8e:b2:25:cd:
                    16:85:98:93:52:fe:63:4a:73:6f:0a:c1:12:02:85:
                    8f:18:71:03:4a:ba:75:58:7c:36:56:14:44:6a:af:
                    f9:f4:ec:92:c9:5b:44:3e:b9:6a:79:c7:14:58:c0:
                    12:52:8c:7d:35:8d:06:08:11:c6:0d:54:9e:b1:72:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DE:77:3C:9E:06:80:F1:C2:43:33:EB:7A:76:00:46:5E:11:40:F7
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:55:7d:f8:35:31:cb:f4:92:fe:87:a1:e6:09:74:b9:7e:ba:
         fc:57:df:e6:92:f0:6b:35:cb:0e:55:15:dc:bf:bf:9b:6b:a6:
         e0:77:4a:3a:6e:a6:f3:1f:57:25:0b:f2:91:0d:67:61:9d:4c:
         60:4c:f6:9c:a2:8b:cf:c0:46:df:bb:a3:32:ca:4a:3e:84:70:
         c0:e1:ef:ba:da:48:81:58:3c:a8:68:0e:31:49:3c:10:b0:a8:
         c4:d3:1f:83:78:53:28:c5:1f:48:ff:61:98:0a:04:e2:56:bf:
         dd:eb:eb:85:8d:de:64:42:c3:7a:48:9d:b5:6b:a7:eb:33:bc:
         ec:54:71:0b:ca:40:5e:a6:7e:0c:72:8b:4e:ec:38:ce:6c:56:
         63:90:15:24:a0:aa:c5:a7:31:eb:65:2a:46:60:6a:aa:4b:7b:
         c0:bd:c0:3f:40:51:2f:b6:c7:a4:23:b7:b3:d2:de:72:fe:09:
         a9:1d:22:ec:68:0a:66:40:4e:2c:3d:2d:01:43:04:54:60:cd:
         a5:65:3a:b7:7e:1a:9c:9e:50:3f:41:cb:b1:ac:92:e8:39:4a:
         fe:c6:9e:fe:18:2c:0d:b9:90:ba:7a:48:83:e4:45:52:97:af:
         ea:bc:6b:ec:51:cc:fa:9d:9b:a9:64:9e:c7:10:23:07:6f:41:
         62:70:df:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org