Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234332e302f32342d3234203d3e203434363835.roa
File:                     3138352e3232322e3234332e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          2jZ/61+9y1PQGr0cnnzLk1VJgIzofjKDegxAAFMeU/E=
Subject key identifier:   D6:46:38:06:4B:FC:24:6A:FE:0C:DB:C4:42:66:DB:01:C3:3C:94:C3
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       153E3CEE7ED50D5425B22CD40643BFC4E0540D78
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234332e302f32342d3234203d3e203434363835.roa
Signing time:             Tue 28 Jun 2022 04:40:24 +0000
ROA not before:           Tue 28 Jun 2022 04:35:24 +0000
ROA not after:            Tue 27 Jun 2023 04:40:24 +0000
asID:                     44685
IP address blocks:        185.222.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3e:3c:ee:7e:d5:0d:54:25:b2:2c:d4:06:43:bf:c4:e0:54:0d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:24 2022 GMT
            Not After : Jun 27 04:40:24 2023 GMT
        Subject: CN=D64638064BFC246AFE0CDBC44266DB01C33C94C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:2b:e5:21:80:d6:45:c2:47:59:ec:44:24:
                    ed:c1:04:49:70:13:dc:37:d2:ab:72:52:2c:88:68:
                    44:b8:3b:86:ed:51:0e:26:bd:89:e4:d5:8f:8e:d5:
                    37:0e:0b:10:d1:53:aa:85:92:00:b2:a3:d4:c8:c4:
                    d8:55:41:61:30:a5:47:5b:bc:dd:1c:2a:b4:58:c2:
                    e4:12:96:db:b5:57:88:e5:ac:2f:b0:27:6c:96:fa:
                    fa:e4:2b:41:68:e2:84:25:97:5c:88:62:bc:51:ea:
                    40:92:e7:68:f9:df:ca:7b:76:8e:14:4b:68:71:1f:
                    dd:91:51:db:0b:c6:17:92:aa:b8:7e:13:b0:bd:d2:
                    bc:16:03:fd:56:b3:0b:b4:de:10:37:c4:9f:4c:0e:
                    6c:91:c4:df:33:a0:e3:d4:8f:7c:c9:04:a2:1a:08:
                    6f:d3:78:b8:00:83:70:d8:c1:95:f3:86:07:e6:cf:
                    72:c5:55:fb:ac:85:fd:99:09:d2:52:5c:5a:39:92:
                    78:53:dc:61:df:5b:79:08:e1:58:c2:73:d3:5f:51:
                    23:56:e6:d4:99:0e:88:f3:50:74:10:2b:e9:47:95:
                    05:9c:a9:46:70:db:a7:23:6a:a8:09:3e:34:3f:0c:
                    aa:c1:5a:70:9d:5f:e3:a0:b2:95:32:25:32:f8:4b:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:46:38:06:4B:FC:24:6A:FE:0C:DB:C4:42:66:DB:01:C3:3C:94:C3
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234332e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:f5:af:83:5d:4f:0e:83:35:d5:d4:93:02:05:0c:73:aa:e2:
         6f:f5:e6:7d:86:9e:41:08:bf:8f:7a:2e:34:b9:d3:88:5e:3e:
         51:80:91:16:bd:1b:1a:8a:8a:d3:d9:65:69:a6:f2:00:8d:d1:
         9f:3b:78:63:8a:40:69:38:13:cd:bb:d9:85:07:8f:f6:da:e0:
         5a:04:b8:fd:7f:20:43:71:0e:55:4d:df:9b:0d:ec:cd:78:e1:
         fc:62:9e:3d:eb:54:01:58:6c:5c:83:b4:9d:4c:04:37:ad:95:
         26:9a:48:dc:1e:38:80:0b:c8:83:c4:8c:80:40:84:d3:f2:58:
         76:c6:89:4f:39:f4:36:2b:22:0c:18:e4:be:ca:34:45:5a:2f:
         f0:35:f1:14:26:57:ea:a7:89:51:1f:9f:c8:b7:29:9d:31:1d:
         e6:12:b8:f2:f0:02:a9:03:77:54:59:6e:47:06:ce:4d:8a:ea:
         c2:6b:47:a9:c4:a1:76:ea:7a:76:cb:af:9e:01:04:e4:06:1d:
         9d:d7:e7:95:4e:2a:f6:31:34:74:f0:99:c2:7c:3b:b9:8f:23:
         ab:42:f0:41:9d:91:1a:34:6d:d6:4a:36:75:21:95:32:48:b0:
         76:65:95:79:e8:34:71:57:d8:8a:df:78:83:e1:23:04:98:c0:
         ac:86:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org