Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa
File:                     3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          FHjOQwyfXdUlRfAjyhqTJh4uMeYZep1ZjbFpVpoYK9s=
Subject key identifier:   05:AA:E7:04:19:D6:11:8F:5C:4D:AD:89:A3:1D:9F:89:07:DC:BA:48
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4A7B434C9727A2A22F751973AFF2C3E8B897B2C4
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:15 +0000
ROA not before:           Sat 22 Oct 2022 04:28:15 +0000
ROA not after:            Sat 21 Oct 2023 04:33:15 +0000
asID:                     61317
IP address blocks:        185.187.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7b:43:4c:97:27:a2:a2:2f:75:19:73:af:f2:c3:e8:b8:97:b2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:15 2022 GMT
            Not After : Oct 21 04:33:15 2023 GMT
        Subject: CN=05AAE70419D6118F5C4DAD89A31D9F8907DCBA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:51:1e:eb:9e:50:5a:31:a8:e1:b3:7a:82:
                    97:36:d1:e5:8b:95:8a:f4:15:75:27:ee:a8:00:0b:
                    cf:a6:e7:1b:42:b8:40:40:c6:d2:ba:ef:90:86:0f:
                    04:6c:86:fa:84:cb:3c:7a:d7:e4:44:c5:a6:ca:9d:
                    72:db:4f:67:a5:57:2e:88:b7:27:ae:f2:ac:18:0e:
                    4b:a0:c7:9a:89:cd:54:24:21:31:71:3f:24:a9:3f:
                    33:b8:ee:c4:d5:ce:97:b2:5e:6d:ef:96:a9:09:1b:
                    31:c3:07:cb:d3:4a:ff:52:e8:12:0b:44:ee:3a:f4:
                    16:43:34:39:9c:47:a0:90:db:25:dd:53:3f:a4:e7:
                    99:88:ef:ef:7f:32:5e:0d:6d:db:40:49:04:eb:53:
                    88:1e:88:6b:58:65:55:7e:66:e2:f0:37:2a:71:20:
                    ee:3a:ca:62:1e:88:a4:3f:ec:3b:4a:21:ae:10:92:
                    33:b3:5b:4a:f4:b4:f1:8e:ff:a8:c0:08:af:3f:a7:
                    17:7e:b0:ce:7f:94:38:dd:11:79:0a:50:45:7f:d9:
                    29:51:4b:28:e6:29:af:31:53:86:a0:84:71:3b:bf:
                    c7:aa:bc:97:90:bc:b9:df:33:19:1f:2d:a6:7d:08:
                    0c:bd:df:5b:40:74:66:a8:ad:a4:c3:f1:40:8b:7a:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AA:E7:04:19:D6:11:8F:5C:4D:AD:89:A3:1D:9F:89:07:DC:BA:48
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:14:54:82:d3:a5:d1:ab:4c:3b:eb:a9:9a:fe:5b:f9:c5:a6:
         d6:3f:b7:a0:59:0d:e8:f2:ba:7a:8a:7c:c4:e7:8a:31:46:92:
         9f:4a:4b:cc:ce:46:ac:41:6b:c1:1a:80:ff:3e:72:f4:2c:36:
         5a:6e:f6:a1:f7:ff:ee:27:b9:fe:db:15:72:c1:a0:88:2d:d0:
         a2:6e:71:14:a3:a4:74:21:c9:5a:0c:91:bf:28:f6:a9:cd:96:
         66:b1:f8:42:44:68:3b:42:e8:5c:c4:14:11:81:9a:62:20:e4:
         9f:23:a7:13:ce:15:1d:9b:f7:24:f2:46:da:06:13:63:a7:cd:
         e6:04:61:3d:d2:94:0c:f8:17:70:68:99:25:39:26:90:ab:94:
         66:6b:d0:f0:4d:cc:d7:d2:57:18:72:7e:62:87:47:4f:34:3b:
         f8:f0:1d:fd:a8:e6:16:1e:18:a3:e9:b7:d3:71:41:19:64:6a:
         ab:e1:86:be:42:f5:4a:d7:b1:92:42:62:28:ef:ee:30:7f:3f:
         2c:72:8f:62:f9:f4:70:30:ef:23:36:45:86:6a:6c:5e:47:95:
         58:9b:ab:18:08:8c:f2:2f:40:24:3a:7e:9c:4a:dc:a2:4c:f1:
         05:1b:9c:72:86:d6:6c:08:61:74:2a:f0:7b:2e:d7:e9:a9:24:
         96:04:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org