Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          VLXh8sPv8aJGinBwFSCSYk2dT1Q/KbqQZ5kPQEjmN5s=
Subject key identifier:   A6:29:E5:E2:71:96:DC:EF:EA:6A:09:05:75:60:07:E7:73:2C:B4:AA
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       189959F95AD5B2A048647A21DA4270E051EA8F68
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:15 +0000
ROA not before:           Sat 22 Oct 2022 04:28:15 +0000
ROA not after:            Sat 21 Oct 2023 04:33:15 +0000
asID:                     136787
IP address blocks:        185.222.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:99:59:f9:5a:d5:b2:a0:48:64:7a:21:da:42:70:e0:51:ea:8f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:15 2022 GMT
            Not After : Oct 21 04:33:15 2023 GMT
        Subject: CN=A629E5E27196DCEFEA6A0905756007E7732CB4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:69:56:c3:da:98:e1:67:97:24:03:3f:38:
                    d0:f3:32:23:1b:d4:28:3d:42:44:2a:5c:93:17:b0:
                    01:69:86:fd:d3:dd:59:81:67:71:ee:d8:b3:1c:9a:
                    d7:5c:6f:d1:76:d4:7b:44:77:2b:d9:ff:95:c4:f6:
                    1a:40:e3:a5:1c:aa:e1:6d:75:ce:9f:cc:3e:5e:42:
                    b1:28:07:e0:ae:8c:74:b9:a1:81:5f:d2:80:51:a2:
                    3c:61:7c:38:02:a8:16:fa:41:2f:e0:b1:4d:6e:5b:
                    d3:dc:86:f4:8f:7b:cf:2f:e4:58:fc:d9:91:e8:9d:
                    d5:bb:f8:ca:08:fb:20:cf:d3:50:68:91:1b:db:fd:
                    2d:52:c6:ef:73:ac:b8:51:c0:cc:69:81:8d:94:8b:
                    e7:e9:7d:0f:d1:c8:80:1a:32:be:13:b7:95:41:c3:
                    75:de:c1:b3:ec:43:73:e4:06:5e:ab:4f:6e:f4:19:
                    df:50:5c:07:4e:03:b5:73:76:1b:14:49:b9:60:4b:
                    45:41:cb:6d:52:d2:89:7f:2b:18:ad:07:83:4e:1a:
                    7d:dd:ea:5d:cc:11:4a:1f:69:b6:f3:f1:c2:9b:6f:
                    d7:7a:d9:08:25:96:5e:34:7b:52:91:fd:0d:13:2b:
                    ed:0b:8d:3b:42:f9:51:d6:1a:73:98:d0:90:5a:6e:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:29:E5:E2:71:96:DC:EF:EA:6A:09:05:75:60:07:E7:73:2C:B4:AA
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:56:be:18:56:cf:2c:55:3d:95:24:67:02:09:a8:94:cc:f5:
         ca:d5:1b:c2:77:2c:bd:8a:55:96:fa:02:7e:43:83:cf:ac:9c:
         8c:94:49:03:e8:00:bb:4c:8d:d8:da:dd:2d:ab:62:ef:3d:e3:
         80:04:56:41:13:22:84:77:65:af:32:8a:0c:7c:b0:e5:71:34:
         5b:e6:b3:f2:b1:85:51:38:8e:6b:f0:7e:9b:be:c3:69:a1:21:
         ca:5c:e7:ed:57:37:48:46:ae:61:71:ec:b8:82:14:b5:16:92:
         9b:9a:9d:5d:a9:d6:3b:dc:f2:86:4d:16:9d:60:47:cc:3b:36:
         fa:27:d1:9d:d6:95:d4:63:e8:9f:26:6e:a6:95:73:7a:4b:95:
         82:81:3d:31:70:3e:a3:40:82:f7:f0:c9:8b:0d:6c:03:ee:39:
         29:01:20:ff:20:d7:93:8e:2c:59:e7:fa:b3:43:54:08:c7:3f:
         8f:20:96:60:e3:47:c2:66:b1:06:8c:f0:a4:f3:ed:29:6d:60:
         bd:a2:cd:5a:9d:70:f7:f6:62:45:7a:51:74:aa:1c:00:97:8c:
         14:c9:8e:cb:b0:3e:85:b6:4e:c6:95:70:e6:02:ba:e7:08:f2:
         59:5b:fd:dd:b8:31:6a:90:56:5d:1e:04:72:f2:19:e0:0f:ba:
         a4:6c:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org