Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa
File:                     3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          St/L7PugCI+HgijU0HqPCOgVYCXBzSnDWRu5B4Di77k=
Subject key identifier:   3C:68:97:2D:10:FD:FB:CB:8F:DE:A6:44:A5:D4:6D:DA:F1:97:D3:3F
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4983A40FF635AE016C236D860D8AED6E685EBF98
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa
Signing time:             Fri 24 Feb 2023 07:46:47 +0000
ROA not before:           Fri 24 Feb 2023 07:41:47 +0000
ROA not after:            Fri 23 Feb 2024 07:46:47 +0000
asID:                     141039
IP address blocks:        185.202.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:83:a4:0f:f6:35:ae:01:6c:23:6d:86:0d:8a:ed:6e:68:5e:bf:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 24 07:41:47 2023 GMT
            Not After : Feb 23 07:46:47 2024 GMT
        Subject: CN=3C68972D10FDFBCB8FDEA644A5D46DDAF197D33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:6a:20:f2:75:82:94:e8:25:d0:ac:81:95:
                    05:bd:10:70:b2:36:7f:81:8e:d3:fd:aa:48:92:bc:
                    5e:0d:90:4f:91:e1:d7:8a:70:fd:d3:f6:ae:8e:60:
                    27:06:25:f7:49:8a:b4:f4:3b:d4:46:ca:45:de:0d:
                    4e:fb:62:07:b1:7f:b8:de:de:20:83:78:74:3f:f3:
                    46:d2:82:35:ab:dc:d3:8d:c1:91:6f:b1:54:9b:a3:
                    01:47:e8:ff:a4:30:e0:40:30:bc:78:49:5a:85:1e:
                    e9:d0:9a:40:db:22:d5:7d:7e:fa:1c:6b:91:bd:dc:
                    26:f9:7a:20:42:d2:5c:4f:db:62:db:37:5f:e6:6b:
                    32:2c:77:04:76:75:f7:0a:c1:41:a5:88:ff:ff:1f:
                    f7:a5:6d:c8:d5:b6:35:86:4a:bc:05:7c:f0:02:93:
                    18:8c:ae:9d:8e:d9:b8:1d:28:cd:b1:c0:24:cc:31:
                    1b:cb:53:46:d6:36:8a:24:ca:72:44:48:08:81:10:
                    e6:d1:41:da:a3:0f:64:00:3c:4b:8e:3c:82:4c:15:
                    2c:bd:fe:3a:0d:e8:a3:a6:e8:44:c5:d6:d3:e8:95:
                    cc:35:10:2c:74:be:71:50:44:b4:18:77:9c:d2:e8:
                    fe:7f:74:3c:ac:5c:73:74:58:41:19:cf:63:9d:8d:
                    3e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:68:97:2D:10:FD:FB:CB:8F:DE:A6:44:A5:D4:6D:DA:F1:97:D3:3F
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:aa:db:e2:f4:aa:de:14:d7:6c:13:1d:32:fc:54:a3:4b:db:
         e8:f3:4c:f4:29:a6:c1:a6:b3:22:69:10:ca:7d:3a:2e:b3:b1:
         09:29:a4:a2:42:0e:f6:2f:6e:b6:0f:9d:f3:48:4e:07:60:e1:
         9c:5d:e7:70:a9:cb:b4:87:57:b5:ca:47:ce:e0:b2:0b:bb:7b:
         54:25:4a:dd:8a:60:99:2d:6f:d9:a7:7b:36:53:7b:21:49:9f:
         87:69:7e:3a:88:23:d2:9d:3d:27:41:1d:c7:37:97:a8:44:9f:
         2a:81:25:92:45:12:d0:f5:e8:b5:06:fa:e9:dc:af:69:cb:ff:
         f5:3f:5c:96:1a:66:77:eb:43:e0:ba:b5:bb:4c:3f:8a:93:2a:
         5f:ae:a3:75:81:2a:0f:c3:06:c1:4b:3b:6f:08:51:75:67:a8:
         dd:e8:be:62:ff:03:7e:e7:94:8b:1c:22:ec:1a:2e:91:c5:e7:
         b0:27:1d:24:82:f9:ba:10:7e:6b:ee:1a:e5:6b:69:b1:07:13:
         9a:f4:00:65:bf:8a:ff:ee:66:61:50:fc:8d:91:eb:34:88:58:
         2e:bd:62:3f:6c:11:d2:75:bb:bf:62:e4:26:7e:e0:0b:17:f2:
         c0:9d:82:cc:dd:e2:49:77:0b:c2:8b:7f:23:bd:1d:80:c1:64:
         27:90:5d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org