Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          WRpWB9SaY6vaKKFwD4YyT0bAtehGM1qqxamvMQCk8zQ=
Subject key identifier:   DA:C7:1C:17:A6:75:FB:D3:46:3A:29:00:5A:A3:45:8B:CB:04:95:03
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6840FBEA3665B38BAC5319EECDCF42C436C3FE09
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:21 +0000
ROA not before:           Sat 22 Oct 2022 04:28:21 +0000
ROA not after:            Sat 21 Oct 2023 04:33:21 +0000
asID:                     136787
IP address blocks:        185.222.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:40:fb:ea:36:65:b3:8b:ac:53:19:ee:cd:cf:42:c4:36:c3:fe:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:21 2022 GMT
            Not After : Oct 21 04:33:21 2023 GMT
        Subject: CN=DAC71C17A675FBD3463A29005AA3458BCB049503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:61:47:34:90:e1:9e:13:ef:b8:63:92:ac:
                    0f:c4:46:c9:61:cc:18:b4:cb:fc:eb:02:4b:04:c9:
                    1f:5c:5c:35:ac:de:2f:03:b2:6a:65:ee:24:e6:68:
                    73:b0:49:d1:fc:c3:19:1a:ea:32:7b:e9:a9:00:b5:
                    04:28:a2:c3:c0:7e:a9:9c:94:3b:bc:d8:d6:e0:a8:
                    5e:5f:35:25:e7:e0:42:c2:d6:03:03:82:6e:6c:65:
                    ce:b2:22:06:f9:e7:2c:1e:1d:f7:94:bc:7c:f4:3c:
                    a3:20:f5:d2:fc:b7:10:bd:fe:79:d4:67:e9:2d:c8:
                    c0:b8:1d:d9:df:89:ef:b9:94:3d:42:f6:23:87:98:
                    6f:ae:6f:05:15:01:4a:b4:ec:7e:a9:11:3a:78:75:
                    73:72:7b:bb:99:84:5a:0e:40:49:34:39:80:a9:30:
                    93:2f:11:a8:e1:a7:60:85:84:06:c2:4b:6e:b7:79:
                    81:df:32:6d:39:79:ee:23:45:c0:ff:c8:7a:2f:5a:
                    99:94:1c:6e:b7:ba:fa:a0:25:35:89:f9:cc:3a:47:
                    e7:9d:3d:74:33:64:0f:d5:72:87:0c:0d:fe:5d:3f:
                    0c:ec:32:42:a4:45:b4:b1:12:a5:e7:b6:d5:8e:ec:
                    20:50:be:4f:a6:ff:76:4f:13:30:96:be:97:ef:28:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C7:1C:17:A6:75:FB:D3:46:3A:29:00:5A:A3:45:8B:CB:04:95:03
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:19:0c:c6:00:97:49:60:77:77:19:79:4c:eb:1c:33:b2:86:
         7d:4e:9e:77:92:d7:d4:a9:ab:c3:93:be:78:71:ca:bd:6a:ef:
         81:6f:87:bb:b7:2b:5d:cc:a8:80:a6:3e:c2:1f:14:90:40:0b:
         98:da:12:2b:d4:f2:57:9e:a0:e7:24:c1:27:b4:6d:09:82:24:
         23:6e:68:94:06:a1:63:56:c7:98:90:85:79:76:34:20:8c:1c:
         f2:9e:be:3e:4a:30:54:29:fb:a2:f6:2d:92:07:2d:ea:ff:a7:
         38:ca:aa:d9:93:59:52:30:5e:89:41:ab:30:9b:e7:98:06:48:
         0c:aa:2c:4d:fd:b3:db:43:6c:23:64:39:17:16:27:50:5e:ab:
         28:0f:c4:89:53:3e:cf:36:30:b0:d7:1e:80:0c:f5:54:db:41:
         92:c7:0f:04:1f:12:c8:c4:54:b4:df:6f:a8:f0:ed:1c:5e:88:
         c3:2d:41:f2:f6:db:fe:a6:e8:73:44:02:07:db:97:1a:bb:bc:
         be:e4:f8:72:e2:e9:5e:00:a9:f3:29:c6:62:f0:9e:18:da:9e:
         db:cb:f5:44:bf:f7:f1:88:00:0c:7f:6e:98:2d:e4:a8:b3:bc:
         d9:08:f5:4a:db:9a:f8:db:5d:b9:b9:f1:39:49:21:18:65:ad:
         7a:1f:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org