Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32332d3233203d3e2037393232.roa
File:                     3138352e3139372e3139342e302f32332d3233203d3e2037393232.roa (raw, json)
Hash identifier:          1XtJk3O8pZgXk/FWEUAwxYZvokXI967+Wjidv9AndeI=
Subject key identifier:   8D:32:F9:29:B6:2D:07:05:50:3B:36:40:88:C7:1B:0C:C9:57:C9:EB
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       372C5C413C50F09E8301EF369DB49DC4BEF445DA
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32332d3233203d3e2037393232.roa
Signing time:             Fri 27 Nov 2020 15:10:11 +0000
ROA not before:           Fri 27 Nov 2020 15:05:11 +0000
ROA not after:            Fri 26 Nov 2021 15:10:11 +0000
asID:                     7922
IP address blocks:        185.197.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2c:5c:41:3c:50:f0:9e:83:01:ef:36:9d:b4:9d:c4:be:f4:45:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:11 2020 GMT
            Not After : Nov 26 15:10:11 2021 GMT
        Subject: CN=3082010A0282010100D5365E6CF4898186B4AA4131F092BF95BE04C8D4905D9CFADAED3FBBB2353EB363BC580367AB2A10C3C823F48CF34C734BC510A1CB2ED6834DA7796D8F37C17B3B08B52E9112B548DD8FBBD6EBA1CA178E1790F847C3F5FBB4F3BEA96C85C6B076E7034C9CFA6B10E45245786FFE74217D2B81CC7A97D7D319D42724DC020BD8867E88645D4DB110B3B04878C9AEAFE2811BF713ADE7A7B1624D52A7140F68F686A23FB1C888A9F01D69AD6DA734E7BFDD6EE949C65431E9BB32A322094074F81774ECCE0987BA22E6972BDEDE700C4227F3A6F6F83188919F506EE41C03DFCC434D9C0F46C6DD41070817670876FE31F629F3B307D47BC7EA8AC13DEE9840D30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:36:5e:6c:f4:89:81:86:b4:aa:41:31:f0:92:
                    bf:95:be:04:c8:d4:90:5d:9c:fa:da:ed:3f:bb:b2:
                    35:3e:b3:63:bc:58:03:67:ab:2a:10:c3:c8:23:f4:
                    8c:f3:4c:73:4b:c5:10:a1:cb:2e:d6:83:4d:a7:79:
                    6d:8f:37:c1:7b:3b:08:b5:2e:91:12:b5:48:dd:8f:
                    bb:d6:eb:a1:ca:17:8e:17:90:f8:47:c3:f5:fb:b4:
                    f3:be:a9:6c:85:c6:b0:76:e7:03:4c:9c:fa:6b:10:
                    e4:52:45:78:6f:fe:74:21:7d:2b:81:cc:7a:97:d7:
                    d3:19:d4:27:24:dc:02:0b:d8:86:7e:88:64:5d:4d:
                    b1:10:b3:b0:48:78:c9:ae:af:e2:81:1b:f7:13:ad:
                    e7:a7:b1:62:4d:52:a7:14:0f:68:f6:86:a2:3f:b1:
                    c8:88:a9:f0:1d:69:ad:6d:a7:34:e7:bf:dd:6e:e9:
                    49:c6:54:31:e9:bb:32:a3:22:09:40:74:f8:17:74:
                    ec:ce:09:87:ba:22:e6:97:2b:de:de:70:0c:42:27:
                    f3:a6:f6:f8:31:88:91:9f:50:6e:e4:1c:03:df:cc:
                    43:4d:9c:0f:46:c6:dd:41:07:08:17:67:08:76:fe:
                    31:f6:29:f3:b3:07:d4:7b:c7:ea:8a:c1:3d:ee:98:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:32:F9:29:B6:2D:07:05:50:3B:36:40:88:C7:1B:0C:C9:57:C9:EB
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32332d3233203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:42:56:ec:5c:ce:19:5c:ab:50:8e:f6:ae:d2:f7:aa:f7:8e:
         b3:04:e6:25:48:59:e0:e8:1d:52:9e:dc:52:b4:fa:a2:5a:40:
         84:52:62:74:ba:59:6f:37:09:e5:b3:8c:69:e2:5d:1d:80:ea:
         f3:11:63:df:17:50:77:ed:7a:f8:1e:7d:b2:38:f0:e8:87:fc:
         ac:ac:e5:4f:6a:c6:8d:9c:68:e5:dd:92:6c:6d:c6:3f:32:55:
         4e:99:a4:97:9d:4c:61:ec:ed:bc:80:42:ab:3b:b1:53:88:6e:
         99:8e:ab:e6:15:8e:06:dd:84:43:44:d7:8c:bc:44:98:95:1c:
         34:8b:dc:8e:2d:66:a6:6f:43:6d:50:3c:e4:7c:87:fc:7e:78:
         bf:1c:3b:d9:32:d9:7f:9e:03:7e:29:02:d1:92:ec:60:e7:f5:
         37:c6:64:1b:e0:1a:a8:fd:4b:1e:f1:40:4e:d6:12:11:b8:3c:
         92:86:70:b8:6d:43:75:da:46:d9:44:a2:71:65:86:63:50:c2:
         e9:eb:25:13:66:73:61:aa:36:21:62:d0:5d:4d:59:fd:4f:b5:
         1d:72:48:ae:cb:cc:4d:c7:74:69:95:49:5e:5c:29:f3:0d:58:
         64:6a:68:1a:21:27:9f:0e:e8:90:f9:0a:e9:f5:0e:4e:87:d7:
         f1:99:f2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org