Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139332e302f32342d3234203d3e2033333536.roa
File:                     3138352e3139372e3139332e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          blUbz78eAVJiljt4Zs7E3g6MLQD38HsJFkQ4Zeg7VZQ=
Subject key identifier:   80:D9:88:73:63:C8:08:59:35:55:1C:79:52:E8:EA:74:C2:30:1B:FB
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       31F61FBEFAF2605A48B1289DAE1A252D6A456C6C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139332e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 28 Jun 2022 04:40:22 +0000
ROA not before:           Tue 28 Jun 2022 04:35:22 +0000
ROA not after:            Tue 27 Jun 2023 04:40:22 +0000
asID:                     3356
IP address blocks:        185.197.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f6:1f:be:fa:f2:60:5a:48:b1:28:9d:ae:1a:25:2d:6a:45:6c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:22 2022 GMT
            Not After : Jun 27 04:40:22 2023 GMT
        Subject: CN=80D9887363C8085935551C7952E8EA74C2301BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:a8:7f:97:40:b0:e2:92:ba:ac:18:c9:ef:
                    f4:50:2c:4b:57:bf:53:e2:a8:f6:c9:e9:a6:3f:f5:
                    2d:37:34:37:2b:2a:64:15:9c:1e:20:ae:21:cc:02:
                    b3:ab:59:8b:8b:45:c0:52:bb:e3:0f:58:05:f1:4f:
                    3c:cf:72:f1:96:30:33:d0:dc:87:51:ce:b2:57:ac:
                    ca:8d:d8:0f:0c:e0:be:9d:ff:4b:03:bf:27:85:58:
                    d6:63:ef:dc:88:30:26:81:b4:a4:a7:f1:70:75:17:
                    1e:a7:f4:a9:f0:bf:45:63:44:c3:98:b1:fb:60:82:
                    6e:a7:6a:a0:47:8e:a6:a3:4e:3f:09:f8:db:1f:12:
                    cf:8f:30:22:c9:af:31:e4:b4:a8:2d:05:08:97:20:
                    40:c4:a0:3d:05:f9:67:0a:b1:b6:09:5d:9d:ae:8e:
                    44:64:b2:52:50:a5:18:21:40:05:e0:b4:69:d4:ed:
                    07:b1:a1:84:60:bc:f5:d4:ac:2d:0c:93:59:d2:f8:
                    2f:6e:3e:88:d6:85:e7:8f:04:93:39:c4:2d:14:6a:
                    e5:d6:d1:43:25:6d:61:7c:3a:c7:74:47:fa:98:99:
                    47:80:59:4e:ba:75:b6:4e:30:01:d7:4e:1f:54:7b:
                    53:e0:e5:1b:3a:23:cd:fe:9e:22:f2:33:61:81:d8:
                    bf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D9:88:73:63:C8:08:59:35:55:1C:79:52:E8:EA:74:C2:30:1B:FB
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139332e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:99:cd:5c:80:21:0a:2b:89:37:c2:a4:e1:fd:98:4e:e4:47:
         3f:19:23:f0:f5:de:9e:9e:25:5d:63:80:0e:14:03:6e:c1:81:
         07:38:04:b5:2d:fb:e6:37:cf:62:9f:82:54:59:59:4f:4b:01:
         b6:cf:4a:e6:ff:6f:08:73:d1:df:05:bd:e2:26:f5:0c:24:77:
         ba:30:e4:ab:cb:c5:90:ea:a8:c3:ba:32:51:c5:64:60:fd:5c:
         3a:ed:20:3f:57:39:63:72:48:ea:9b:a6:29:17:37:cd:3d:dc:
         bc:2e:11:be:83:1d:43:9c:b0:b1:1d:94:52:5c:e8:7b:92:63:
         ce:d2:5f:c4:a5:54:62:42:7b:5f:49:0a:e7:75:a7:3c:40:db:
         84:ff:d5:e7:3c:72:49:55:e2:90:d0:01:57:8a:8d:00:1a:da:
         6c:d1:37:bf:b9:76:66:09:bb:a6:e7:97:5c:4a:67:f1:73:26:
         4d:92:22:30:1f:9c:81:d8:04:ff:bf:08:57:64:1a:12:b7:a3:
         a5:ce:b7:b2:18:a8:0b:25:4a:8d:73:28:2f:5f:63:23:e3:e5:
         57:ff:20:a7:89:4c:9f:e1:bb:0a:5d:6f:92:6c:06:2a:ea:b4:
         72:cb:61:a6:13:10:74:89:72:d8:a3:0b:f7:eb:59:e4:55:d3:
         ad:da:30:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org