Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          1J2zVWiRgOSpD1MvJ3kIW00go5flIWhSe86HX0zJA+E=
Subject key identifier:   6F:44:20:70:DD:2E:44:6D:95:C6:7A:33:C9:57:6C:71:84:96:A1:D4
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       09B1B384F91C64C37D86066DFBE78C14BD0B6DE4
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:22 +0000
ROA not before:           Sat 22 Oct 2022 04:28:22 +0000
ROA not after:            Sat 21 Oct 2023 04:33:22 +0000
asID:                     136787
IP address blocks:        185.202.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b1:b3:84:f9:1c:64:c3:7d:86:06:6d:fb:e7:8c:14:bd:0b:6d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:22 2022 GMT
            Not After : Oct 21 04:33:22 2023 GMT
        Subject: CN=6F442070DD2E446D95C67A33C9576C718496A1D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:29:56:f5:2e:01:c9:bf:cf:9a:ce:5c:ec:28:
                    be:1b:d9:18:40:83:fa:29:b4:d2:5a:72:c5:b8:4b:
                    eb:7d:06:2a:50:9e:7c:aa:d6:03:53:5c:1b:f8:ca:
                    d3:9f:8e:dc:99:60:b0:af:2f:b8:08:cf:1b:18:1c:
                    54:31:fc:9b:3a:3f:4e:56:7c:65:29:bc:02:6a:28:
                    cb:8d:f4:66:a7:56:63:a5:cd:1c:e6:6a:e7:5f:63:
                    7c:81:64:ca:65:31:8b:20:ab:e6:f5:e2:9d:f2:1d:
                    2f:ce:32:47:a1:7e:be:c5:2c:d5:bb:35:94:67:ad:
                    84:44:29:aa:59:e9:a7:5c:4e:e5:37:ce:46:9a:43:
                    c7:14:0c:59:30:45:3d:55:7a:27:af:c2:03:9b:c6:
                    17:b3:b2:67:1e:9d:e5:58:34:52:69:7c:f9:1b:e8:
                    04:81:be:8b:a3:5d:f5:a7:86:71:b8:ac:99:04:2c:
                    bf:f6:6d:34:e7:bd:79:00:f8:c6:00:aa:81:82:79:
                    24:da:ae:ea:2f:01:dc:78:c1:ff:d5:32:6d:12:ca:
                    5b:79:cc:ec:5c:9d:cb:f2:18:ab:67:2f:b1:0f:fc:
                    49:f8:80:ad:14:0f:0b:91:67:33:64:f9:77:1f:05:
                    b3:c8:8b:36:98:a7:03:ef:4b:07:e0:d7:af:8d:43:
                    bb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:44:20:70:DD:2E:44:6D:95:C6:7A:33:C9:57:6C:71:84:96:A1:D4
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:02:af:80:0e:77:dd:9c:40:75:56:4b:c5:37:c1:c5:ec:
         3f:78:dc:a6:33:fe:a1:5f:f3:55:16:c1:3a:79:62:97:3d:50:
         96:1d:01:d4:fa:de:2b:e3:0b:05:8a:ff:43:62:0d:e3:3f:46:
         f6:96:6f:d5:15:99:a7:de:6f:d8:05:22:8f:0e:8c:f2:29:02:
         16:71:7b:48:f6:67:a4:43:7b:7f:1d:43:ac:7c:44:29:94:6f:
         d1:60:6c:8b:13:fc:35:46:42:9f:86:52:5b:3e:9d:62:be:19:
         27:c9:a3:cc:66:3a:92:82:d7:ea:91:9f:12:5e:dc:6d:a9:5c:
         92:aa:a3:02:41:71:38:22:b8:3f:11:a1:fe:cb:6b:19:f9:6f:
         17:33:d4:b6:8b:dd:b4:ba:87:4b:03:7e:99:22:73:d6:fe:94:
         ab:12:e3:3d:53:03:7e:e6:e3:c6:16:01:ce:f4:a1:b7:20:07:
         81:c5:f8:21:3b:0f:fb:37:c2:74:ed:53:68:3d:ad:17:ef:71:
         f6:5b:24:5d:ff:1b:e6:13:0e:88:76:7f:25:3f:3b:41:1f:a6:
         9e:7c:99:a7:a7:7f:9d:72:b6:30:ad:cd:21:a8:6d:d8:3d:5e:
         8b:8f:aa:27:8f:fe:b0:1c:25:4d:05:da:27:44:9b:11:2c:30:
         6b:f0:05:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org