Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36352e302f32342d3234203d3e203630353438.roa
File:                     3138352e3139332e36352e302f32342d3234203d3e203630353438.roa (raw, json)
Hash identifier:          mBSAWnwf6NHeqgPNLomfM0wy0b7TgodNLmAW9MUP4oc=
Subject key identifier:   38:E7:F1:C8:6B:DB:27:87:EC:D5:CB:0D:24:39:16:F2:48:BE:B1:FB
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3FEA515D7B23DE0BF57F17398526BFF7B3D93522
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36352e302f32342d3234203d3e203630353438.roa
Signing time:             Sat 22 Oct 2022 04:33:19 +0000
ROA not before:           Sat 22 Oct 2022 04:28:19 +0000
ROA not after:            Sat 21 Oct 2023 04:33:19 +0000
asID:                     60548
IP address blocks:        185.193.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ea:51:5d:7b:23:de:0b:f5:7f:17:39:85:26:bf:f7:b3:d9:35:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:19 2022 GMT
            Not After : Oct 21 04:33:19 2023 GMT
        Subject: CN=38E7F1C86BDB2787ECD5CB0D243916F248BEB1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:80:3a:32:00:76:2f:cf:bc:6c:e1:6d:87:bd:
                    6d:33:85:83:be:4e:c8:4a:18:5c:42:e7:24:c7:96:
                    71:9a:e0:a9:34:2e:a3:3b:f0:f5:66:a6:b8:31:f9:
                    14:20:17:c9:f2:c9:e3:fd:3f:f8:51:57:bc:8e:b7:
                    a2:ca:3e:d4:cb:24:60:5f:90:3f:56:7b:55:90:96:
                    be:cb:ca:dd:d0:85:9e:b8:59:7f:9b:57:02:75:19:
                    4f:ed:0e:57:6a:b3:6c:22:47:1c:47:4f:29:e0:e5:
                    e0:3b:38:fd:06:1e:6e:70:ea:b4:da:80:5f:60:ee:
                    94:56:38:28:69:17:15:40:38:75:49:5c:bf:5f:2a:
                    e1:2d:b4:ea:64:97:b9:60:95:4d:dc:b0:d9:47:38:
                    f8:a3:9c:b4:7b:45:05:fd:2e:71:56:a4:ef:2e:fd:
                    02:44:e6:02:d9:51:6c:56:63:df:7f:a0:54:53:ab:
                    93:7f:c5:17:6b:ca:83:bc:18:ce:89:90:9e:01:29:
                    ea:bd:a9:f0:c1:76:8a:68:bb:63:69:4d:24:9c:e2:
                    a0:f5:3d:57:af:6a:aa:90:f9:34:00:e1:20:5a:58:
                    00:bd:99:0a:b8:73:0b:c0:cb:4b:fc:70:0d:9d:f7:
                    d7:b7:9f:e0:a3:16:22:e9:26:6a:88:18:ec:2b:90:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E7:F1:C8:6B:DB:27:87:EC:D5:CB:0D:24:39:16:F2:48:BE:B1:FB
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36352e302f32342d3234203d3e203630353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:71:8c:70:dd:cd:08:fe:2b:bb:a9:5e:e5:83:33:45:14:8f:
         0b:1d:0a:3f:a8:7e:39:1e:e0:b9:47:e0:b4:b0:0d:64:8a:25:
         73:7e:fd:24:e5:42:ae:f3:ff:65:58:1d:e4:f8:04:c4:f0:25:
         25:02:27:0b:d1:86:4f:d3:99:16:48:91:44:28:a6:39:6c:47:
         05:e2:c4:f3:8d:ea:e6:fd:d2:51:f6:68:7b:96:36:6d:64:f0:
         87:e6:9e:5b:98:b1:f3:40:c7:59:96:8f:c8:3f:d4:77:5e:52:
         b0:a5:6a:98:2f:cf:1a:2f:dd:b7:c7:72:9c:03:54:ec:13:38:
         57:a8:a1:47:a6:37:12:68:39:eb:04:87:31:61:7f:8e:30:5d:
         c6:38:4a:20:9b:45:00:41:17:43:9d:c4:91:f1:e6:2b:2c:b6:
         f4:f3:b4:22:71:32:5b:29:0f:1c:c8:09:26:af:3a:37:e5:d1:
         32:34:40:79:2f:f8:89:50:79:b8:e3:f9:0e:18:c3:23:b6:43:
         17:0e:b7:23:c1:9a:35:f3:5e:39:c4:d8:af:89:00:3b:c3:46:
         a0:59:b2:f9:89:06:4e:44:c1:1c:9d:86:5b:0b:13:e8:7a:a1:
         78:34:9b:84:70:78:cb:0d:92:15:91:35:a4:90:cd:99:ae:55:
         18:c5:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org