Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234312e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3232322e3234312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          bPoKqzt1eOcALGGd43mQ+kcIlKyxhEcojbYhnjgQNv8=
Subject key identifier:   48:F9:80:70:69:38:98:B7:EF:BC:01:B8:38:26:D9:B8:74:C5:7F:AC
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       464BEE478CD1B8CC1C52395CA58E1036E1A95477
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234312e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:14 +0000
ROA not before:           Sat 22 Oct 2022 04:28:14 +0000
ROA not after:            Sat 21 Oct 2023 04:33:14 +0000
asID:                     136787
IP address blocks:        185.222.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4b:ee:47:8c:d1:b8:cc:1c:52:39:5c:a5:8e:10:36:e1:a9:54:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:14 2022 GMT
            Not After : Oct 21 04:33:14 2023 GMT
        Subject: CN=48F98070693898B7EFBC01B83826D9B874C57FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e6:9f:3a:4e:d7:ea:5b:f9:55:d1:6d:43:59:
                    3f:a5:bd:db:83:2f:a8:e0:0e:3c:b2:49:2b:a1:dc:
                    34:ba:15:24:bc:26:f5:fa:c6:05:ec:ba:63:27:d9:
                    ed:8c:bb:04:40:14:12:77:86:36:32:08:64:0a:96:
                    81:2d:44:b6:56:fc:8b:f1:aa:3c:ca:79:c0:43:70:
                    61:8a:6c:f6:af:1c:fd:e4:38:a0:24:a6:53:95:48:
                    61:43:84:4f:3b:63:2d:d4:c3:fe:7a:20:7a:58:61:
                    76:a3:f3:1e:f6:0a:8d:ee:31:17:08:c2:4f:4f:d8:
                    2b:5f:8d:09:ef:e3:de:93:52:d3:76:90:84:b3:59:
                    00:d3:19:0a:47:bb:fe:6c:66:70:58:1f:e5:92:af:
                    10:d7:6c:31:56:ac:8b:8e:2c:11:53:b2:a5:c7:5a:
                    9d:35:87:ec:c2:07:97:63:a1:52:d5:4a:2f:9f:8b:
                    59:58:a8:24:4c:a0:c3:cf:eb:5c:dd:6a:b4:19:46:
                    29:dd:80:68:75:bf:a9:e7:0e:d3:60:d5:8d:82:93:
                    32:27:75:0c:fc:17:b0:7a:a7:92:5c:4d:11:dd:88:
                    fc:97:1f:fe:12:45:1a:29:3b:ae:55:de:15:61:54:
                    5c:f7:36:37:da:2c:b6:2b:d8:7e:0a:bb:3f:da:03:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F9:80:70:69:38:98:B7:EF:BC:01:B8:38:26:D9:B8:74:C5:7F:AC
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234312e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ab:2c:2e:e1:d5:a5:03:94:eb:de:d4:65:3d:f3:c8:7e:c7:
         09:be:6e:c3:b1:05:f7:31:68:2e:c9:59:40:71:77:36:1b:6e:
         29:1c:80:46:6b:74:af:74:4d:70:5f:e5:5c:82:b0:b5:e4:58:
         da:92:96:c3:0c:71:97:10:92:df:3e:c8:45:1b:46:f8:ed:b3:
         e4:69:a5:c1:82:da:0a:b7:25:99:52:68:f3:ad:a0:0c:93:1d:
         2e:18:01:ce:26:8a:e0:92:63:ef:90:a0:22:c7:c4:13:93:3c:
         d6:79:46:e1:91:91:f1:0f:62:45:e6:7d:16:dc:74:17:61:ef:
         01:a4:a6:21:3c:6d:ea:b8:4b:81:de:fb:0a:6c:76:10:d5:86:
         c9:5f:56:0c:dc:cc:49:60:0d:1a:3c:38:04:be:55:11:4a:40:
         e7:92:a1:cb:24:0e:23:9d:d4:ff:fc:65:c3:13:a8:79:6e:31:
         0c:3c:f7:2f:27:e6:40:d8:7e:40:ed:d8:89:c9:b9:ae:f3:b9:
         e1:b1:4d:3e:03:15:14:d1:51:9e:ef:c9:95:3d:f6:90:a9:d7:
         21:b6:c1:55:ef:37:4e:91:3a:17:11:75:33:21:94:c1:6d:fe:
         5d:16:bf:ab:e1:c7:c9:37:5a:8c:eb:e9:84:55:17:57:f0:83:
         6d:ec:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org