Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa
File:                     3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier:          UFEkODfirSx3wyoJ3+vCaTcaRgHl3C2dwiXKsYIKyiM=
Subject key identifier:   E5:FA:2B:13:7A:8F:DF:BE:98:BE:65:03:95:49:31:FE:60:F3:B7:93
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6844E902FBEBFF83D36F4EB6B1532A8C5017ACC1
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa
Signing time:             Sat 22 Oct 2022 04:33:12 +0000
ROA not before:           Sat 22 Oct 2022 04:28:12 +0000
ROA not after:            Sat 21 Oct 2023 04:33:12 +0000
asID:                     203380
IP address blocks:        185.221.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:44:e9:02:fb:eb:ff:83:d3:6f:4e:b6:b1:53:2a:8c:50:17:ac:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:12 2022 GMT
            Not After : Oct 21 04:33:12 2023 GMT
        Subject: CN=E5FA2B137A8FDFBE98BE6503954931FE60F3B793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:aa:de:a2:7d:1d:5c:a0:cc:4c:30:33:85:
                    ee:c4:ab:e5:b4:5b:16:9d:80:76:21:fe:c9:3c:80:
                    8d:76:ef:97:bb:a2:47:5b:8b:07:20:a2:be:d8:38:
                    0f:a4:a3:c6:a4:a4:92:bb:11:f2:64:d4:1d:1a:1a:
                    9c:d4:44:e5:30:e3:2d:aa:33:fe:2c:03:dc:e2:55:
                    da:4b:c8:ce:21:c1:4e:27:6f:1e:56:9a:c5:a1:0b:
                    24:b7:fe:4a:07:9f:23:f7:35:41:4e:e9:cc:cf:ee:
                    80:9a:12:54:16:fc:58:31:11:a5:b0:f5:d6:ba:ce:
                    dc:87:ce:eb:de:ee:b6:de:47:59:d2:59:c7:41:5f:
                    91:21:53:77:76:e1:c6:dc:68:31:aa:54:5c:34:5d:
                    df:13:95:22:82:2d:fa:94:20:c9:58:54:bb:96:93:
                    bd:1e:80:55:42:fa:75:a5:9d:19:4c:d0:91:14:cf:
                    9d:ae:38:12:aa:d5:24:eb:29:1d:1d:2e:23:f1:46:
                    2f:9c:b3:28:c2:a5:4c:27:0e:c7:7d:50:5a:f4:e3:
                    38:49:9b:33:26:92:7b:18:03:12:2f:32:6d:21:fd:
                    99:56:5b:4b:c6:6a:6b:3b:2f:f5:75:cf:7b:ac:3e:
                    16:65:b5:7f:ef:bd:f2:d8:37:85:2a:59:bb:f3:21:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FA:2B:13:7A:8F:DF:BE:98:BE:65:03:95:49:31:FE:60:F3:B7:93
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.221.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:62:00:27:c6:26:65:d2:54:e3:2b:fb:30:04:6d:98:de:4d:
         92:89:7d:19:89:72:07:96:93:ab:35:6a:48:bc:86:13:79:c4:
         c7:6f:b4:49:39:5a:ad:f5:4d:95:c9:5d:63:47:72:5e:48:52:
         e3:77:70:d3:7f:10:2b:72:61:ca:2d:30:e1:b7:e9:c3:95:61:
         11:e9:cd:66:a8:fc:14:f2:ad:f5:1b:9b:7f:43:3a:13:cf:76:
         bc:1e:62:54:ac:9c:a3:c1:60:a7:a4:7f:2b:d7:50:64:39:7a:
         74:65:4c:d1:10:9c:b7:a3:58:f5:5d:ff:1b:09:e6:ac:c3:8e:
         4e:8a:72:eb:29:af:f9:52:2e:f6:cf:2b:f1:34:0d:3b:89:3d:
         41:05:e6:8e:64:0c:6d:ba:4f:7b:5d:1f:fc:b2:5f:4b:d3:e0:
         55:03:cd:35:53:a9:ca:f6:cd:77:2d:15:c1:e8:f6:21:24:37:
         a6:3c:1d:fc:7e:4c:df:15:41:9b:d8:a3:6c:58:5c:bb:57:af:
         c0:c7:ee:bb:74:14:5c:89:59:13:a1:75:2c:b6:26:cd:c6:68:
         da:bf:c5:50:f3:33:4c:0d:b6:2e:31:18:1d:e8:6d:ac:52:1f:
         94:20:26:41:70:7c:33:54:5e:34:85:21:bc:e8:24:bb:ea:f0:
         8d:dd:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org