Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
File:                     3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa (raw, json)
Hash identifier:          YDjm4G/pIFiLsd6V7w+23tU4GXGQt7ua1EDqqW4Bg5I=
Subject key identifier:   7F:EF:E9:2F:99:4B:51:59:C0:22:22:48:E7:8B:CD:C2:05:89:9F:C4
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5EACD9671323CE790684911E7FAB6B229E9738F3
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
Signing time:             Tue 24 Jan 2023 09:41:09 +0000
ROA not before:           Tue 24 Jan 2023 09:36:09 +0000
ROA not after:            Tue 23 Jan 2024 09:41:09 +0000
asID:                     6597
IP address blocks:        185.221.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ac:d9:67:13:23:ce:79:06:84:91:1e:7f:ab:6b:22:9e:97:38:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jan 24 09:36:09 2023 GMT
            Not After : Jan 23 09:41:09 2024 GMT
        Subject: CN=7FEFE92F994B5159C0222248E78BCDC205899FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:75:23:85:db:f6:67:00:51:b1:3f:ae:6a:
                    52:15:5d:61:29:37:1a:ba:5e:b7:f8:9f:17:64:b7:
                    53:be:7e:33:3b:fe:6b:a5:ee:01:13:36:e2:60:1c:
                    01:a8:8e:10:0b:33:65:c9:b3:b8:c6:90:89:32:71:
                    6f:41:f2:51:7b:e4:5d:39:36:cc:e7:17:f6:7d:5f:
                    bf:49:aa:70:43:e3:ea:2d:76:35:be:96:0d:13:ca:
                    77:30:6f:62:d7:a3:60:2e:52:09:7a:bd:68:7a:d1:
                    0f:f7:b5:a0:60:b6:9e:91:33:0a:3c:a0:15:b2:7f:
                    0e:26:23:86:92:22:f2:38:9f:ae:08:ba:5e:90:9e:
                    56:35:1f:0e:ac:1d:c9:3e:19:0a:b8:d0:7c:13:f8:
                    f4:92:fa:bc:24:17:25:7d:ae:b8:ca:9e:9d:30:8e:
                    0f:e3:60:f3:15:83:93:7a:15:af:7a:64:2c:d5:7a:
                    f6:c3:91:43:37:d0:89:68:16:91:a8:78:85:49:87:
                    46:14:d8:97:df:28:b4:07:14:82:0e:5c:dc:e3:05:
                    c4:c2:2a:8a:13:ad:f7:d3:f9:fa:12:15:60:c3:82:
                    25:e5:3d:be:87:f1:02:fa:cb:c4:20:7d:60:5c:0a:
                    1a:26:c2:ea:9d:33:31:1b:fc:26:2f:67:72:03:30:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EF:E9:2F:99:4B:51:59:C0:22:22:48:E7:8B:CD:C2:05:89:9F:C4
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.221.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e1:f7:98:3f:69:47:06:28:6d:44:e4:09:62:59:53:1c:0e:
         c3:84:ba:cf:a6:81:e2:07:82:d1:d5:c3:98:55:b5:e1:1d:ff:
         9d:0f:e4:72:c7:4d:28:75:42:16:33:0d:f2:da:af:27:b5:d0:
         61:d0:36:5a:06:0a:fb:ce:43:99:21:21:9b:2f:87:85:69:90:
         40:b6:b3:d3:28:70:14:cd:05:70:02:0b:3c:f3:1e:5f:30:3e:
         e8:15:d6:91:c4:68:49:82:be:8f:db:53:e8:e6:2f:f1:f7:55:
         2f:f4:e5:64:92:49:f6:bd:3f:f8:cb:79:52:4d:ec:79:22:3f:
         58:5a:32:69:76:b5:ce:c3:8e:3a:a0:9d:31:1a:48:6e:fe:84:
         4b:ab:72:f5:70:19:bc:3a:be:0c:2a:56:3b:72:f2:da:ad:f2:
         30:f1:cf:a6:24:3b:48:8a:cf:0e:11:c4:0d:7e:a1:0a:80:a0:
         8c:aa:46:75:8b:bf:18:37:5a:fe:8d:d6:39:a4:67:a0:1d:68:
         fb:43:e5:4f:85:fe:ab:1e:8b:e6:fa:e3:1f:f4:26:51:a3:62:
         39:78:1c:47:8c:2e:03:6b:ff:7e:0d:80:19:f6:e3:c4:67:e4:
         0c:2b:bf:3f:5c:63:6f:37:39:c4:76:d0:c5:2d:51:7b:bc:a3:
         7d:17:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org