Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134312e302f32342d3234203d3e20313431303339.roa
File:                     3138352e3231392e3134312e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          pECMgp6uL0dSFhDueGaDXIljQX0loRFFvfsu/PW7JPY=
Subject key identifier:   A2:31:4A:29:21:CF:0C:9C:4C:9E:85:80:00:04:85:7B:CE:8D:92:42
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       175DC3E0BA18E04936E2BB0F83C3F6C133CE65ED
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134312e302f32342d3234203d3e20313431303339.roa
Signing time:             Fri 09 Dec 2022 09:19:59 +0000
ROA not before:           Fri 09 Dec 2022 09:14:59 +0000
ROA not after:            Fri 08 Dec 2023 09:19:59 +0000
asID:                     141039
IP address blocks:        185.219.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5d:c3:e0:ba:18:e0:49:36:e2:bb:0f:83:c3:f6:c1:33:ce:65:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec  9 09:14:59 2022 GMT
            Not After : Dec  8 09:19:59 2023 GMT
        Subject: CN=A2314A2921CF0C9C4C9E85800004857BCE8D9242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2e:b7:5a:4c:4b:5a:d0:09:81:f5:72:c6:56:
                    b5:3f:45:45:e6:f0:fa:32:b1:6f:65:60:a0:ac:4a:
                    6f:ad:3b:a6:aa:68:f4:a2:83:96:75:2f:d1:b7:ae:
                    13:15:5a:cc:d5:1e:77:b1:ee:ee:08:dc:31:a4:1d:
                    7e:e0:40:69:ae:d5:00:9c:31:c0:ad:75:ac:dd:df:
                    cc:06:49:cb:80:3a:90:c0:82:8c:16:c0:6b:5c:35:
                    44:4b:84:ec:84:be:79:47:74:45:08:9f:5c:bd:71:
                    9a:2a:a5:e3:7b:a3:73:b4:3e:10:40:bc:6a:da:b4:
                    43:c0:84:4d:e0:c8:b4:63:ca:cc:b8:9d:b2:b1:7f:
                    c7:51:b0:28:d3:57:31:1d:f2:5d:c3:6a:1b:2f:17:
                    18:28:41:f8:e7:ad:ef:df:72:93:08:2a:d1:24:53:
                    b3:c5:ab:7e:2b:cd:47:48:7b:2b:dc:df:de:d5:00:
                    eb:0b:a4:ca:07:9b:41:4a:84:33:b7:1e:0a:af:91:
                    5d:c9:02:6f:e6:a5:a1:bb:e0:34:dc:3f:4c:c2:d7:
                    c6:38:62:f4:d4:eb:8e:75:b6:f5:8c:52:71:e9:69:
                    7c:eb:d0:af:dc:10:a7:d4:06:38:53:1e:1a:4e:a4:
                    23:f0:d3:1f:1e:96:fb:48:f6:53:f7:80:a0:e3:da:
                    b9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:31:4A:29:21:CF:0C:9C:4C:9E:85:80:00:04:85:7B:CE:8D:92:42
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134312e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:6c:f6:c6:a6:8a:75:0f:c9:7d:96:95:15:ee:f9:6a:af:85:
         ff:1d:b9:3e:f6:b5:8f:50:d7:8e:4a:a1:31:76:ea:02:b5:57:
         48:d6:7d:70:c2:ac:f4:cd:12:32:18:7f:a5:ff:0b:40:dd:bb:
         51:4a:01:72:1e:71:42:2e:2f:d4:7a:f0:a9:b5:4b:29:bb:12:
         e5:4d:b8:e1:49:50:61:c5:59:0d:74:29:69:97:71:20:8f:c3:
         75:a1:ce:1c:ea:83:ed:2c:13:99:d7:79:9c:89:f4:34:75:cf:
         e4:12:a6:db:8b:b4:09:4a:57:2e:ad:0f:31:b9:f2:e0:0c:ff:
         32:cd:6d:e8:52:6c:aa:21:bb:19:69:dd:ac:64:a3:36:c8:ec:
         dd:8a:a0:f4:a7:54:a3:30:00:28:dc:bb:80:f7:05:18:1e:06:
         5f:00:d2:94:c8:fc:ac:ec:13:10:cf:1f:f0:d4:a4:dd:f3:85:
         55:ed:c3:0e:1f:f2:e3:85:24:84:03:9e:3b:05:a8:ba:0f:84:
         fe:c4:64:03:f2:27:07:01:9c:ae:af:c2:d7:88:44:7e:e3:68:
         f0:72:95:ae:43:c9:99:6e:75:f1:e2:2b:1c:fb:29:24:44:95:
         97:3a:b8:e1:ed:d1:04:da:40:8b:d6:a7:88:cb:5c:6b:1e:c9:
         65:09:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org