Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e20323033333830.roa
File:                     3138352e3230392e3232302e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier:          TxLfnzQYV7/PHiihLsLe8Nx+yHbshbHUYHytBeWl4s4=
Subject key identifier:   53:08:40:EC:E0:77:22:86:90:AE:D6:9B:56:EB:87:0B:68:E5:AC:E4
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       461187882A206CE401D3B96412F3954A76C702D3
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e20323033333830.roa
Signing time:             Sat 22 Oct 2022 04:33:19 +0000
ROA not before:           Sat 22 Oct 2022 04:28:19 +0000
ROA not after:            Sat 21 Oct 2023 04:33:19 +0000
asID:                     203380
IP address blocks:        185.209.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:11:87:88:2a:20:6c:e4:01:d3:b9:64:12:f3:95:4a:76:c7:02:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:19 2022 GMT
            Not After : Oct 21 04:33:19 2023 GMT
        Subject: CN=530840ECE077228690AED69B56EB870B68E5ACE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:68:c0:fd:ed:6d:6c:98:3e:ea:4d:9e:46:
                    d2:93:46:a8:e8:61:7b:3d:42:da:4d:c7:80:59:3b:
                    59:af:94:c8:9b:a9:69:a4:83:67:44:44:f7:84:d8:
                    e7:13:69:a7:ff:43:f3:2c:7e:9a:fd:a4:44:d4:99:
                    eb:b3:82:71:16:7c:92:d3:f6:9e:c6:0f:76:08:75:
                    26:83:af:46:8e:c3:8b:75:37:b7:ca:e5:a0:f5:23:
                    6c:44:cd:8d:f2:31:47:ea:e8:5e:9d:23:8b:3b:50:
                    c7:ed:f0:f4:4f:81:b4:35:94:7c:63:29:ec:d2:64:
                    03:57:02:6b:6b:c0:ee:0e:8b:4f:06:43:e4:38:03:
                    aa:00:ba:fc:7e:72:94:1a:4d:07:2f:c4:06:06:21:
                    9c:a5:e8:50:e8:0e:9c:b3:55:d8:14:0d:0e:5a:74:
                    f2:95:e1:5b:e8:78:fe:c6:da:22:cc:d9:47:62:01:
                    e5:5b:34:a4:94:50:1e:04:d3:49:59:7b:ac:31:19:
                    58:af:81:06:e0:5f:3a:70:38:2b:8c:cc:54:22:c3:
                    8b:51:e3:c7:e4:d4:50:09:41:38:2e:38:f0:3b:82:
                    74:a1:b6:d6:ba:0b:a3:9f:2e:90:34:f4:06:d9:f9:
                    13:7f:fd:e6:5c:b3:8e:cb:d7:e3:c6:4c:e5:a1:fa:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:08:40:EC:E0:77:22:86:90:AE:D6:9B:56:EB:87:0B:68:E5:AC:E4
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e20323033333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:2e:80:f2:45:2c:f4:bd:50:9a:91:3a:da:9f:16:6f:b7:
         60:ba:bc:0f:5d:15:12:c4:f5:55:60:1e:61:85:82:ef:e7:45:
         24:81:51:5f:10:75:f3:0a:f8:2e:04:1e:63:b6:ab:cf:97:06:
         36:23:dc:2f:fd:46:71:9b:6d:85:d7:a1:01:10:ac:b9:89:72:
         df:d7:97:3b:a6:02:ba:5d:c7:50:dc:d2:7e:3c:dc:50:f4:cb:
         b8:1f:a8:d9:b0:fe:0f:75:2c:57:17:1a:3a:e3:d0:d5:86:d2:
         4a:00:03:2a:1c:1b:48:a2:37:1a:d4:da:eb:be:12:b9:d0:40:
         4e:85:1c:ec:a5:95:f3:54:1d:4e:dc:0c:6e:2a:3c:48:4a:89:
         0d:bc:ce:b1:51:6b:18:38:9d:33:e7:a7:f8:5b:0c:17:94:9a:
         0b:c8:23:01:dc:c5:77:2f:b3:88:d1:53:b8:c6:86:52:17:a1:
         1d:02:1f:60:b3:3b:be:9e:61:01:a1:96:46:8e:b2:ef:e5:58:
         5a:1e:eb:19:7f:65:90:3e:5b:19:6e:60:ac:0a:27:bf:3a:ff:
         d1:0b:1a:36:c0:d8:55:67:8b:d9:10:a2:4c:c5:77:52:58:52:
         01:c5:4e:11:4f:92:04:98:61:cf:2b:67:59:76:5f:28:e4:80:
         ea:f4:a9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org