Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa
File:                     3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa (raw, json)
Hash identifier:          iMjSunkaYYWEONHRZB5LqhDhJGXWZcJDhm7OjZOwGe0=
Subject key identifier:   05:C7:34:4A:60:87:83:62:98:0B:1B:17:FC:C4:B0:F1:0F:D1:B7:63
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5B490E40C05B856D8DA6973A046375069E1D0A01
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa
Signing time:             Sat 22 Oct 2022 04:33:17 +0000
ROA not before:           Sat 22 Oct 2022 04:28:17 +0000
ROA not after:            Sat 21 Oct 2023 04:33:17 +0000
asID:                     34984
IP address blocks:        185.187.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:49:0e:40:c0:5b:85:6d:8d:a6:97:3a:04:63:75:06:9e:1d:0a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:17 2022 GMT
            Not After : Oct 21 04:33:17 2023 GMT
        Subject: CN=05C7344A60878362980B1B17FCC4B0F10FD1B763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:2b:f4:79:5e:ba:6a:03:5a:4e:a2:bf:a7:
                    6f:a6:87:4d:c2:db:88:7c:b1:fe:49:59:ce:24:6e:
                    1f:38:76:75:ed:5c:4c:46:76:cd:01:01:98:1f:4a:
                    56:6e:82:da:dd:ab:5a:02:d5:ed:92:8e:3d:ed:79:
                    6e:1c:01:61:e3:23:25:e7:6f:0b:fa:64:9c:15:ae:
                    51:37:6c:95:90:77:35:0a:34:f1:89:bc:92:69:c2:
                    18:97:db:52:c1:7f:87:24:28:81:05:41:fd:62:57:
                    00:11:ec:b2:38:3a:0e:ad:28:9e:2f:3e:d5:ae:d6:
                    d8:2b:c4:54:04:f1:e2:66:1d:fc:f3:19:c9:de:34:
                    0c:2b:ed:5b:97:6b:43:ea:44:2f:e9:85:26:2c:68:
                    0d:bc:d6:41:30:ed:76:50:dd:1e:3c:81:79:3d:57:
                    62:e9:1b:15:95:93:fa:bb:1e:4b:1a:b7:38:e2:f4:
                    92:54:3b:ee:06:e9:55:dd:fc:17:d0:59:e3:56:12:
                    d1:3f:69:eb:dc:39:9e:21:3d:15:fe:50:3e:e8:c3:
                    8b:b0:2f:ab:e7:e6:cb:dd:97:94:46:e9:d4:96:25:
                    a0:6b:ba:7a:bb:29:5e:3a:a3:ef:ef:16:03:54:3b:
                    5a:46:72:3a:6b:74:de:e0:59:a8:1a:c0:f2:23:bd:
                    ca:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C7:34:4A:60:87:83:62:98:0B:1B:17:FC:C4:B0:F1:0F:D1:B7:63
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:e9:f9:47:1a:bc:bf:fb:e2:d2:2e:4f:79:ab:9e:e6:18:25:
         d8:c0:bb:ed:2c:e9:0f:9e:93:f4:b1:bc:94:c2:1f:43:97:4f:
         73:2d:cf:4e:05:5d:5b:92:24:ce:11:ee:51:96:14:66:88:5b:
         76:60:2a:9f:1a:1c:5a:c0:fd:bd:7d:ce:9a:1d:a1:e4:4c:d6:
         b8:c2:41:3d:92:2c:1f:06:cc:2b:a5:ce:37:81:ac:26:6d:f3:
         0d:8c:9a:e0:cc:e7:fb:da:71:65:dd:e7:9b:dd:47:0a:21:62:
         bf:b3:83:49:fa:05:de:19:7c:85:76:7c:b9:08:7d:f5:a1:33:
         c2:bf:f1:ae:48:51:92:09:d7:2b:e1:af:4c:d1:1b:0f:f9:f1:
         62:b0:e1:2e:12:7c:7e:b2:6d:a3:fc:c4:ed:74:65:82:cc:71:
         2c:f7:4e:72:c0:01:f1:02:df:57:2a:6b:51:66:8d:f5:d6:b4:
         ff:1b:60:82:5a:52:21:4e:0b:b6:de:cc:ac:a7:3e:37:2a:cf:
         31:51:c0:4c:1f:01:29:52:e4:bf:50:cb:11:e4:15:c7:92:7a:
         25:b1:63:a5:2b:28:84:88:83:0e:25:00:e9:63:c3:79:9f:47:
         75:1d:dd:e1:75:9d:21:13:54:a7:1f:46:67:5b:b9:99:c3:41:
         f6:d3:7f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org