Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa
File:                     3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa (raw, json)
Hash identifier:          O98d8yJ3w6fQ8KZXbjvhOnF+E481bCnYJBRAEGdzS7M=
Subject key identifier:   52:FB:7E:B1:E9:5D:89:43:38:01:38:08:E8:BA:06:21:CC:52:81:8A
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       749EC544B188B4A2A9AC51B037C0058F41CCD7B3
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa
Signing time:             Sat 22 Oct 2022 04:33:17 +0000
ROA not before:           Sat 22 Oct 2022 04:28:17 +0000
ROA not after:            Sat 21 Oct 2023 04:33:17 +0000
asID:                     201882
IP address blocks:        185.209.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9e:c5:44:b1:88:b4:a2:a9:ac:51:b0:37:c0:05:8f:41:cc:d7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:17 2022 GMT
            Not After : Oct 21 04:33:17 2023 GMT
        Subject: CN=52FB7EB1E95D894338013808E8BA0621CC52818A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:c3:20:1e:02:a7:63:eb:02:40:1d:18:5a:
                    ad:7a:a6:42:47:12:3c:97:9d:cd:13:5e:a4:e6:8f:
                    90:8d:b0:52:07:69:0e:4d:9c:12:a0:4b:7e:2d:b9:
                    0d:ee:8c:72:a2:2e:c8:c0:bd:90:0a:92:53:eb:54:
                    01:f8:e6:26:03:b0:1c:d5:d4:5b:c5:38:3d:5d:a1:
                    10:67:27:e3:12:5b:36:ec:ec:94:3b:8d:b6:8e:21:
                    75:33:28:de:0a:43:a0:55:61:fd:28:de:90:26:73:
                    ec:bc:86:14:48:82:99:43:b0:2c:ef:dd:9f:fa:ca:
                    79:05:b9:ee:c0:08:72:6a:d4:d3:97:69:01:2a:30:
                    11:d5:18:1a:94:31:67:4b:6e:a3:31:82:8d:4f:12:
                    da:76:9f:ed:44:f8:39:f9:9c:55:a2:e6:b9:6f:10:
                    2a:c1:95:02:f4:6d:55:13:c3:5c:82:db:57:fb:ee:
                    3f:9d:00:7c:ad:d7:47:f1:13:9f:6e:20:9e:f1:b2:
                    25:37:c7:30:a8:4f:eb:b4:ac:93:9c:a9:0c:d8:b2:
                    fb:3b:9c:b2:9a:dd:c3:63:ee:ba:6b:65:2a:b4:b2:
                    fa:cc:4d:3c:57:18:6e:68:4a:fc:f9:90:04:0c:f0:
                    d0:c3:d0:da:9d:eb:5d:44:8a:46:ea:96:55:70:d1:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FB:7E:B1:E9:5D:89:43:38:01:38:08:E8:BA:06:21:CC:52:81:8A
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:00:89:38:f1:2b:10:a0:93:da:7e:1d:3f:6f:93:0c:9c:
         d7:3f:d3:48:46:55:31:3e:a6:00:93:05:35:82:74:2f:10:37:
         52:f6:49:24:48:94:0f:c1:c8:65:56:14:e5:f4:48:14:26:71:
         db:ec:4c:7d:cd:3a:fb:4e:0d:c3:fc:79:c3:6d:36:7a:62:be:
         d1:31:4c:37:2a:75:05:59:5b:cf:06:c4:ea:b7:02:88:a7:12:
         d0:6a:30:57:91:5d:40:f3:95:dc:42:73:c5:b9:51:6b:a4:7a:
         a6:3b:e3:23:c4:51:35:7b:cf:84:3f:11:83:8c:13:de:4e:83:
         2c:d9:25:40:a6:c5:23:e9:87:46:60:8c:ee:fd:51:a1:a6:11:
         c0:85:b9:10:7a:38:d2:d6:15:b8:db:34:c8:04:ae:67:c1:70:
         9f:41:3d:46:bb:a6:01:25:43:b2:e7:f0:bc:db:ae:dd:cc:64:
         10:b1:5e:6b:56:43:78:5c:d0:05:51:62:ce:02:4b:96:b8:10:
         b6:f2:57:fb:4b:26:20:73:f7:1d:89:8a:58:51:87:75:f9:75:
         50:c1:ba:1c:5a:ca:08:35:68:0a:71:4a:95:95:bc:f8:b5:8c:
         80:d3:b4:92:97:f4:50:8c:f8:15:5f:32:70:c0:7a:af:37:4a:
         e8:38:9c:4f
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUdJ7FRLGItKKprFGwN8AFj0HM17MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTdaFw0yMzEwMjEwNDMzMTdaMDMxMTAvBgNV
BAMTKDUyRkI3RUIxRTk1RDg5NDMzODAxMzgwOEU4QkEwNjIxQ0M1MjgxOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYsMgHgKnY+sCQB0YWq16pkJH
EjyXnc0TXqTmj5CNsFIHaQ5NnBKgS34tuQ3ujHKiLsjAvZAKklPrVAH45iYDsBzV
1FvFOD1doRBnJ+MSWzbs7JQ7jbaOIXUzKN4KQ6BVYf0o3pAmc+y8hhRIgplDsCzv
3Z/6ynkFue7ACHJq1NOXaQEqMBHVGBqUMWdLbqMxgo1PEtp2n+1E+Dn5nFWi5rlv
ECrBlQL0bVUTw1yC21f77j+dAHyt10fxE59uIJ7xsiU3xzCoT+u0rJOcqQzYsvs7
nLKa3cNj7rprZSq0svrMTTxXGG5oSvz5kAQM8NDD0Nqd611EikbqllVw0btHAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUUvt+seldiUM4ATgI6LoGIcxSgYowHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzYvMzEzODM1MmUzMjMwMzkyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMyMzAzMTM4MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnR3DANBgkqhkiG9w0BAQsFAAOCAQEA
RuIAiTjxKxCgk9p+HT9vkwyc1z/TSEZVMT6mAJMFNYJ0LxA3UvZJJEiUD8HIZVYU
5fRIFCZx2+xMfc06+04Nw/x5w202emK+0TFMNyp1BVlbzwbE6rcCiKcS0GowV5Fd
QPOV3EJzxblRa6R6pjvjI8RRNXvPhD8Rg4wT3k6DLNklQKbFI+mHRmCM7v1RoaYR
wIW5EHo40tYVuNs0yASuZ8Fwn0E9RrumASVDsufwvNuu3cxkELFea1ZDeFzQBVFi
zgJLlrgQtvJX+0smIHP3HYmKWFGHdfl1UMG6HFrKCDVoCnFKlZW8+LWMgNO0kpf0
UIz4FV8ycMB6rzdK6DicTw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org