Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231372e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3230332e3231372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          i/ZQVtgTNA1RdICToKO3m+7F6U00kbk8py5lUX3HRz4=
Subject key identifier:   C9:A9:E6:2A:E7:2E:E1:A7:12:46:F7:40:43:6B:02:D2:47:A9:97:F0
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       2917FB767723E4AB6E07FD1BD0C48645DF130262
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231372e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:22 +0000
ROA not before:           Sat 22 Oct 2022 04:28:22 +0000
ROA not after:            Sat 21 Oct 2023 04:33:22 +0000
asID:                     136787
IP address blocks:        185.203.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:17:fb:76:77:23:e4:ab:6e:07:fd:1b:d0:c4:86:45:df:13:02:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:22 2022 GMT
            Not After : Oct 21 04:33:22 2023 GMT
        Subject: CN=C9A9E62AE72EE1A71246F740436B02D247A997F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:aa:0e:57:b4:b6:80:f7:ff:c5:5b:25:ee:
                    16:6e:db:d8:c1:f7:99:c7:9a:e4:12:f8:74:f8:a7:
                    fb:81:c9:e1:25:44:68:3e:73:af:bd:5a:6a:73:89:
                    f3:c0:95:3b:07:cb:b8:ab:1a:8f:67:58:49:17:af:
                    da:dc:65:a4:d2:fe:ee:0a:74:e8:5b:f4:a7:a3:cb:
                    27:55:be:59:7b:2d:75:73:35:89:a6:af:0c:d4:2b:
                    86:16:30:86:74:8e:56:02:6c:d0:dd:4f:8d:d6:db:
                    d0:69:9e:93:bd:86:c9:2f:51:2a:c2:c3:6e:c4:82:
                    21:a3:da:79:0e:5a:e2:4b:2a:b5:a6:12:7d:7b:67:
                    89:c7:93:a5:0c:80:39:60:e8:98:67:2d:63:a1:e0:
                    83:24:ce:3c:57:b2:1e:8b:83:36:59:9a:b9:1c:22:
                    72:e8:54:27:e0:8c:bc:da:17:e1:77:92:4d:00:88:
                    d1:13:9e:87:d0:28:5a:e7:ae:8e:aa:34:5b:47:97:
                    ae:51:7c:c6:2c:c4:5a:ed:9d:25:6d:e3:ba:92:b3:
                    15:0e:37:35:d9:8e:37:da:0f:c7:8c:cf:22:bc:51:
                    03:c9:ca:85:54:98:6d:5c:a8:f4:eb:4f:83:e8:7e:
                    56:b5:4a:9b:61:78:75:c0:0e:0b:db:a6:77:79:93:
                    69:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A9:E6:2A:E7:2E:E1:A7:12:46:F7:40:43:6B:02:D2:47:A9:97:F0
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231372e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:4a:ad:db:1d:81:e4:65:39:8c:21:ac:40:72:50:98:0c:45:
         c9:a8:8d:01:d7:71:04:09:e4:5a:af:be:2a:e2:fc:65:d4:ee:
         25:94:3f:17:72:0a:be:3a:e5:af:61:59:dd:ad:af:d5:9b:09:
         e1:5c:a1:cb:e6:4c:b0:9c:4a:8e:a8:62:27:7a:13:db:15:9b:
         87:41:f2:3f:ce:e6:67:ae:ef:df:bb:d8:8b:a0:0c:c2:65:69:
         ad:31:7c:b4:2a:e5:4f:16:8d:eb:4c:49:90:c0:e8:28:ba:cc:
         9a:f0:35:1f:0a:27:e2:54:77:34:1a:f9:f7:8e:56:31:f3:00:
         48:b7:86:3f:7e:1a:27:b6:22:fa:70:53:4a:9e:45:42:cd:02:
         3d:1b:9d:55:f0:1e:af:5d:3e:5f:c0:50:dc:b2:4a:f7:6c:0b:
         4d:d5:74:d1:7a:c9:20:0d:33:3c:0f:fb:5b:e3:14:55:c4:ce:
         01:0d:c6:c0:ce:10:f4:d3:69:70:cc:2f:4c:99:1c:ba:7d:af:
         ec:79:72:99:4c:1c:10:7a:7a:d2:45:ef:a1:c5:2b:52:50:aa:
         36:fe:7a:04:cd:61:61:e7:62:d0:39:be:94:67:27:6a:5b:07:
         0f:ec:e4:90:1a:b4:3e:e8:a8:d5:a1:70:cb:9f:e5:df:d8:ea:
         da:b3:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org