Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e203631333137.roa
File:                     3138352e3230322e3232332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          zi2Yh5f1KYnuYIf0HNa8liDjfAarCR0VJAnBsxMb1uo=
Subject key identifier:   31:5E:00:81:D5:7E:22:23:34:16:7A:03:E1:30:6E:34:55:84:B6:E8
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3DEE4B0E8A35524228EF1B8D73C10098513D7517
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:26 +0000
ROA not before:           Tue 28 Jun 2022 04:35:26 +0000
ROA not after:            Tue 27 Jun 2023 04:40:26 +0000
asID:                     61317
IP address blocks:        185.202.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ee:4b:0e:8a:35:52:42:28:ef:1b:8d:73:c1:00:98:51:3d:75:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:26 2022 GMT
            Not After : Jun 27 04:40:26 2023 GMT
        Subject: CN=315E0081D57E222334167A03E1306E345584B6E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:cc:a6:0b:69:c7:f7:03:93:97:c7:bb:21:
                    36:73:d8:80:42:bc:29:f7:ae:cb:ac:e7:9b:01:c5:
                    8b:f2:22:ae:75:c7:c5:ea:71:ed:1e:cb:60:e1:32:
                    73:4c:d5:1f:1d:7d:52:ba:5d:b4:d9:98:41:d2:00:
                    06:37:ae:c3:85:21:b6:d0:d7:9b:11:d8:1e:8a:b5:
                    b8:38:63:d5:85:4e:67:b8:8e:82:7a:18:2d:bd:df:
                    23:48:fe:4d:c6:4c:58:c8:65:ce:5d:b4:96:ee:b3:
                    17:42:d4:69:b5:bc:81:fb:c5:ee:0a:ad:9d:43:88:
                    cf:ef:1d:d7:12:fa:1a:02:e4:51:6d:1e:fe:cd:95:
                    42:86:c4:b9:6c:2b:59:b8:ad:f0:53:ea:39:5e:e8:
                    50:c7:ba:6f:df:49:a8:80:68:0e:00:c7:30:0b:a0:
                    d4:7f:ed:3d:ed:a0:51:39:36:51:62:7a:af:27:ec:
                    fe:23:6b:cb:c6:1c:bd:9f:6b:ff:84:21:56:1a:03:
                    15:c4:5d:58:f4:ea:f5:77:77:55:6a:25:88:7e:b0:
                    01:87:67:f2:a7:7c:4d:39:5d:8b:31:f7:7b:4f:0c:
                    39:e2:f9:4b:75:c9:ce:79:8c:1f:80:7c:43:81:76:
                    17:c1:99:7f:5d:7b:5f:81:9e:93:01:48:b7:7c:8b:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5E:00:81:D5:7E:22:23:34:16:7A:03:E1:30:6E:34:55:84:B6:E8
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:84:11:37:8a:c5:14:6c:c4:85:14:65:9b:85:d9:fa:98:7a:
         87:e1:d5:f7:07:e0:83:30:20:15:b2:72:67:4b:e8:d6:d7:dc:
         6f:3f:02:99:04:0b:fe:c2:08:a0:af:02:e8:5b:76:f4:9b:13:
         56:10:a6:69:c2:4f:80:f3:dd:07:db:82:e6:0b:14:c4:55:9f:
         bc:e0:b1:0e:f3:4e:00:fd:ef:d6:2c:4a:71:f3:61:b4:fd:be:
         f5:ef:17:0c:d8:fa:a0:80:ed:8d:78:6c:fc:71:f5:72:57:49:
         f5:d3:0f:d3:4c:27:21:be:ee:87:e8:ac:39:b7:31:43:37:c2:
         c5:43:a2:74:c6:c8:7f:70:5b:77:8d:cb:53:8f:2f:18:77:9d:
         55:41:c8:c7:b6:3d:5f:27:5b:9b:c5:25:b2:c4:68:d0:b7:f3:
         38:9f:06:25:41:c5:36:a4:a9:e1:a9:43:ee:40:0b:68:43:99:
         d6:4d:ed:b6:a1:02:24:66:9d:56:e5:0c:bc:1a:b3:fb:32:a5:
         38:8b:57:65:14:6b:74:11:a3:ed:42:6c:9b:5f:61:d1:53:1c:
         0f:46:5b:58:4a:41:d5:65:9c:d4:8c:44:2a:73:c2:13:33:97:
         74:72:7d:5b:65:da:3e:5f:c0:15:98:88:cb:7f:b3:70:ed:3c:
         14:12:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org