Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          vj2EtzyZ9xrv0SC8qSUNVVhgWNvK6O8NrjH+zk3+iFY=
Subject key identifier:   9F:A8:94:5F:77:59:F3:91:41:AD:EE:8C:B0:11:B0:07:14:AF:9C:39
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       7D907CBC5804C70D8501D4D63900EE98E0AD1230
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:26:17 +0000
ROA not before:           Wed 28 Dec 2022 09:21:17 +0000
ROA not after:            Wed 27 Dec 2023 09:26:17 +0000
asID:                     136787
IP address blocks:        185.207.249.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:90:7c:bc:58:04:c7:0d:85:01:d4:d6:39:00:ee:98:e0:ad:12:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:21:17 2022 GMT
            Not After : Dec 27 09:26:17 2023 GMT
        Subject: CN=9FA8945F7759F39141ADEE8CB011B00714AF9C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:1f:79:66:2e:b7:44:15:c8:53:59:da:91:
                    37:e9:ce:ce:ac:43:51:c9:0b:87:72:13:06:12:ba:
                    8a:8e:06:c2:d8:72:c2:cc:ac:e8:89:46:ea:b4:d3:
                    8e:56:4a:d8:f4:77:cc:e2:a2:23:1a:2f:33:3a:12:
                    fb:f4:0c:41:29:b3:a3:25:aa:2e:f7:a8:10:b0:c8:
                    cc:e5:93:e5:19:39:9d:dc:43:de:44:f6:06:91:bc:
                    af:e8:55:0f:50:be:7c:2c:00:dd:e5:c8:6f:f3:13:
                    48:34:bc:58:ab:6e:34:26:3b:f4:dc:be:9d:87:4c:
                    1f:ed:1f:45:6c:c7:22:dd:0b:48:43:a6:c9:38:cc:
                    11:11:91:79:c8:cf:e2:8b:ea:ba:31:6a:3f:af:8a:
                    b9:6d:c7:98:97:0f:d1:4b:ec:21:40:9a:fd:b9:b7:
                    ee:05:a9:3a:1d:7e:d8:8f:c7:16:af:87:34:9b:17:
                    6b:65:18:a3:76:9c:c0:34:d9:ea:f9:c1:9a:37:fd:
                    15:fd:ee:18:8a:b4:88:96:88:99:d4:32:d6:d2:77:
                    18:14:80:77:49:75:1a:f3:79:71:ca:59:e2:89:3c:
                    cf:97:b7:72:1e:8f:bb:58:3a:2c:fc:61:42:98:bf:
                    37:5c:a9:61:09:3b:c1:f7:e5:9e:a0:c6:d5:33:b3:
                    99:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A8:94:5F:77:59:F3:91:41:AD:EE:8C:B0:11:B0:07:14:AF:9C:39
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:61:80:a5:1b:eb:d9:39:fa:fd:e7:7c:41:85:df:c9:38:b2:
         42:1e:bc:c5:3d:53:cd:4e:48:b2:83:1c:ce:44:29:f4:fb:22:
         3a:e4:6a:75:4f:49:7b:75:f8:a8:b2:36:a7:89:ed:da:f3:96:
         2e:31:21:d4:b0:4d:dd:f9:4f:b8:f5:6f:9f:ba:2f:70:eb:60:
         c3:3a:c5:f9:78:9f:03:46:47:21:57:63:aa:c0:c4:d5:90:17:
         1d:ed:d7:8b:ac:19:4e:bf:5e:95:ba:5d:75:17:04:a7:61:9f:
         c2:28:99:69:7d:5c:c4:62:ee:f5:5f:9f:62:f9:f9:f7:e2:7b:
         38:96:b9:c4:f3:71:61:31:31:cb:74:a0:f9:13:78:13:41:f2:
         9c:74:c2:2d:4d:83:4e:ac:d7:90:00:d6:87:5a:c9:b3:1c:b4:
         1f:b4:af:8c:3b:c5:5d:10:61:af:d4:30:4d:ee:4e:35:ae:ab:
         2c:aa:ef:f6:01:d4:b0:41:47:d0:1c:57:f3:9d:86:66:88:c5:
         15:63:4b:ce:3c:14:5c:a3:4d:49:b1:70:61:fb:03:f3:ab:ac:
         0e:0b:33:8a:b9:34:a4:73:89:46:e9:ba:8d:b1:98:85:39:ff:
         93:af:ef:a6:e7:64:a8:8a:46:2c:f2:47:f9:04:94:c1:6c:e7:
         44:34:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org