Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231362e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3230332e3231362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          oFIKXU34kJPaHxRCxEGWsCG7WOCr9ZhK6eej0RVMzeI=
Subject key identifier:   C3:06:9C:0E:A2:17:10:F5:D4:4C:AD:11:67:41:D0:FC:DE:D2:20:45
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       375EEE024EDBE8FD7F4B1811D49691486B03F0B7
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231362e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:21 +0000
ROA not before:           Sat 22 Oct 2022 04:28:21 +0000
ROA not after:            Sat 21 Oct 2023 04:33:21 +0000
asID:                     136787
IP address blocks:        185.203.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5e:ee:02:4e:db:e8:fd:7f:4b:18:11:d4:96:91:48:6b:03:f0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:21 2022 GMT
            Not After : Oct 21 04:33:21 2023 GMT
        Subject: CN=C3069C0EA21710F5D44CAD116741D0FCDED22045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:d7:08:53:95:d2:3f:af:51:5e:b3:e8:c2:
                    51:e7:71:8d:72:5a:f9:09:b1:79:be:6a:40:2c:6c:
                    af:50:e4:50:b7:a9:7b:9a:80:a7:0e:0d:80:fb:08:
                    bf:7f:84:da:55:30:5c:7e:fb:75:ad:d4:79:d0:fb:
                    fd:71:cc:72:c2:00:45:49:9e:a2:76:7c:40:9b:3b:
                    b6:c6:62:d7:df:20:5b:3e:d2:e2:6d:3c:2f:cd:a1:
                    d9:36:df:22:6c:2d:59:6a:15:14:49:1e:af:0a:dd:
                    58:47:f1:1a:53:77:b0:26:3b:a7:bf:ce:aa:18:db:
                    73:e0:40:33:ab:5a:52:c8:19:d3:7d:8e:18:a6:46:
                    bd:a7:44:ca:8e:a7:f6:d7:1c:df:d1:38:da:24:9e:
                    55:a1:1b:3b:14:13:19:79:a7:72:dc:a4:fb:b1:47:
                    cf:57:49:5b:45:15:d0:94:29:5e:16:d2:44:d2:69:
                    54:d0:d3:b1:c1:0c:24:07:28:f1:9a:f3:85:b5:34:
                    6f:43:04:e6:0f:40:95:62:03:d4:3b:34:80:af:59:
                    a1:ab:e1:c9:fb:06:03:21:ac:80:6a:0e:d8:2c:e9:
                    f0:0d:63:e2:57:c8:27:33:6d:75:72:b3:3b:ca:13:
                    98:81:2f:e9:d6:95:72:4b:6a:b5:21:43:e8:9d:af:
                    a6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:06:9C:0E:A2:17:10:F5:D4:4C:AD:11:67:41:D0:FC:DE:D2:20:45
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231362e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:3c:49:10:64:ff:77:cb:20:21:98:59:6f:a2:6b:72:f6:42:
         48:5b:70:0a:cb:60:c6:65:d7:f4:fd:da:51:07:9a:d2:97:8b:
         d0:c7:cc:74:aa:54:e3:f5:28:29:15:67:1b:ea:83:30:8d:b2:
         3f:d0:4e:a6:a2:9b:cf:f5:95:5b:5b:8a:c4:58:fe:4c:e9:12:
         12:f2:73:16:65:de:62:11:9b:f7:0a:46:3d:c8:c1:8e:7a:fe:
         8b:b9:60:59:a1:46:9b:52:e9:2d:24:a9:ce:d9:fe:96:8e:fa:
         6f:0f:22:43:61:0e:57:3a:35:e4:4b:8c:6c:28:75:73:6c:cf:
         c5:7b:5a:ec:53:9d:75:0d:84:c9:fe:bd:2a:5f:9d:b0:a8:82:
         f2:28:98:af:90:8d:af:85:84:2e:f6:9f:9c:04:88:f9:61:6a:
         39:f5:35:a6:e0:94:97:78:61:7e:dd:b5:77:e3:76:6a:b4:20:
         9f:7c:66:80:e1:6e:88:77:c0:51:d1:64:17:bc:c8:00:57:d7:
         a1:d2:9d:ad:f5:26:d5:32:f4:0c:34:fa:45:b2:d8:ad:f7:01:
         8d:a6:af:54:48:1a:57:34:e4:1d:12:88:23:52:81:a3:53:98:
         96:02:d9:2f:1d:21:9c:d6:39:30:2b:e8:19:9f:39:ab:ff:2d:
         a2:62:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org