Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          5CS9MAlCt565IUG2W+5Nml0LRl1fELrvN0IkBtU7GWk=
Subject key identifier:   0C:56:A1:22:F3:15:90:03:D2:74:AA:4E:BE:74:92:CC:AC:ED:E0:7B
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       382673230D3981040F336B175CF497C851B68603
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:14 +0000
ROA not before:           Sat 22 Oct 2022 04:28:14 +0000
ROA not after:            Sat 21 Oct 2023 04:33:14 +0000
asID:                     136787
IP address blocks:        185.199.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:26:73:23:0d:39:81:04:0f:33:6b:17:5c:f4:97:c8:51:b6:86:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:14 2022 GMT
            Not After : Oct 21 04:33:14 2023 GMT
        Subject: CN=0C56A122F3159003D274AA4EBE7492CCACEDE07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:cc:d6:6f:57:29:70:67:2b:22:52:48:2b:
                    2d:7a:06:cc:05:ae:93:f0:2a:be:aa:77:63:89:56:
                    07:8c:5e:14:bc:45:67:9c:99:5b:50:0e:6e:dc:6a:
                    e6:2a:9c:41:26:66:59:a1:66:d4:55:aa:6e:c2:1f:
                    6f:b8:97:be:a4:aa:ba:88:a3:e6:77:6f:53:ae:c3:
                    dd:65:86:07:1b:20:22:f2:17:e2:db:d5:80:98:b3:
                    3e:d1:df:05:97:ce:78:a7:12:dd:dc:17:bc:12:e2:
                    b8:9e:cf:16:c1:b4:46:55:e6:1a:6d:5f:9a:34:b3:
                    ba:f2:c8:b1:81:d2:b8:cd:ea:6f:58:8c:76:65:2c:
                    76:de:d7:ef:11:a5:74:a1:0c:19:02:d6:d1:84:4a:
                    6b:e0:96:f4:3b:31:4e:4c:89:4f:31:55:32:3a:c9:
                    fd:85:a2:38:87:83:3b:de:88:e4:f9:f9:c9:0a:14:
                    18:4d:56:55:83:45:e5:a5:54:4a:d0:0c:47:8b:ef:
                    b0:8d:84:9b:e6:fa:4a:bb:14:5f:ab:4b:41:01:a7:
                    0f:5c:2e:8d:2c:af:8a:48:e1:da:5a:e4:dd:b4:06:
                    51:ed:a3:f4:e3:4f:82:86:e3:9a:67:9f:3c:47:75:
                    3c:7c:92:d4:4b:b7:9c:46:7d:62:1e:65:00:78:4c:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:56:A1:22:F3:15:90:03:D2:74:AA:4E:BE:74:92:CC:AC:ED:E0:7B
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.199.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:47:50:9d:5d:23:4e:3e:dd:5d:84:7a:0b:3b:c5:d1:89:a5:
         18:40:d6:07:25:b9:49:04:fd:ef:af:94:55:b0:e8:f6:2e:26:
         43:52:cc:21:34:94:40:e5:d2:a5:fb:22:a8:e7:16:44:be:53:
         9c:dc:6b:0b:12:47:80:c1:48:03:94:a1:cf:6c:f5:28:32:98:
         7b:fa:d9:53:48:b4:c8:b2:24:a9:b2:30:5e:d8:ac:6d:83:6b:
         33:33:9c:17:3b:8d:6f:29:79:bc:3e:8d:f6:be:0e:ca:73:a5:
         42:79:23:65:55:48:e7:2f:8e:1e:be:fb:0e:5b:a8:af:b5:22:
         68:fd:60:77:8b:fe:dc:ca:09:ef:d6:46:08:9f:db:a8:7a:7c:
         a9:5d:3f:b4:0a:54:ab:fd:c5:c2:64:c4:7a:60:fc:93:96:b0:
         fb:3d:26:9b:1b:1a:16:5f:45:54:53:eb:1f:65:e3:53:e6:6a:
         c2:44:9b:27:c9:a4:6d:a9:12:72:e6:70:78:8b:c8:c9:42:30:
         05:f4:50:8c:7c:50:fe:dd:33:56:0a:04:1d:30:73:29:7b:b9:
         6a:a3:cb:7c:56:3c:c8:75:c4:fc:96:e0:96:dd:f9:c7:a9:86:
         71:94:c6:4f:61:f8:a0:63:25:83:45:10:be:cb:51:b9:ff:15:
         ce:7f:04:63
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUOCZzIw05gQQPM2sXXPSXyFG2hgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTRaFw0yMzEwMjEwNDMzMTRaMDMxMTAvBgNV
BAMTKDBDNTZBMTIyRjMxNTkwMDNEMjc0QUE0RUJFNzQ5MkNDQUNFREUwN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjvczWb1cpcGcrIlJIKy16BswF
rpPwKr6qd2OJVgeMXhS8RWecmVtQDm7cauYqnEEmZlmhZtRVqm7CH2+4l76kqrqI
o+Z3b1Ouw91lhgcbICLyF+Lb1YCYsz7R3wWXzninEt3cF7wS4riezxbBtEZV5hpt
X5o0s7ryyLGB0rjN6m9YjHZlLHbe1+8RpXShDBkC1tGESmvglvQ7MU5MiU8xVTI6
yf2FojiHgzveiOT5+ckKFBhNVlWDReWlVErQDEeL77CNhJvm+kq7FF+rS0EBpw9c
Lo0sr4pI4dpa5N20BlHto/TjT4KG45pnnzxHdTx8ktRLt5xGfWIeZQB4THtvAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUDFahIvMVkAPSdKpOvnSSzKzt4HswHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzYvMzEzODM1MmUzMTM5MzkyZTMxMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnHZTANBgkqhkiG9w0BAQsFAAOCAQEA
PUdQnV0jTj7dXYR6CzvF0YmlGEDWByW5SQT976+UVbDo9i4mQ1LMITSUQOXSpfsi
qOcWRL5TnNxrCxJHgMFIA5Shz2z1KDKYe/rZU0i0yLIkqbIwXtisbYNrMzOcFzuN
byl5vD6N9r4OynOlQnkjZVVI5y+OHr77Dluor7UiaP1gd4v+3MoJ79ZGCJ/bqHp8
qV0/tApUq/3FwmTEemD8k5aw+z0mmxsaFl9FVFPrH2XjU+ZqwkSbJ8mkbakScuZw
eIvIyUIwBfRQjHxQ/t0zVgoEHTBzKXu5aqPLfFY8yHXE/Jbglt35x6mGcZTGT2H4
oGMlg0UQvstRuf8Vzn8EYw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org