Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
File:                     3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          g1707IDHcbJ75oMyBJL9ScWpBRms3aOx58NbYl1dYWM=
Subject key identifier:   1B:02:AC:D4:BE:86:0B:7C:4D:30:1A:87:AD:2F:54:80:DA:20:06:23
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       422884493E3B879AF2267DDFB797571B53B98776
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:12 +0000
ROA not before:           Sat 22 Oct 2022 04:28:12 +0000
ROA not after:            Sat 21 Oct 2023 04:33:12 +0000
asID:                     47583
IP address blocks:        185.229.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:28:84:49:3e:3b:87:9a:f2:26:7d:df:b7:97:57:1b:53:b9:87:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:12 2022 GMT
            Not After : Oct 21 04:33:12 2023 GMT
        Subject: CN=1B02ACD4BE860B7C4D301A87AD2F5480DA200623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:3b:3f:2c:a2:31:78:68:56:d5:36:75:ea:
                    4b:9a:3e:2b:ec:4e:cb:c1:fe:07:5d:94:ad:e2:9e:
                    64:66:30:96:60:da:9d:ee:17:9e:19:4b:3d:3b:83:
                    0f:8f:ed:c8:3d:88:4f:4f:41:d4:17:be:a3:38:1c:
                    4e:7f:5c:fc:ba:68:a3:b7:29:c3:5a:8d:bb:42:79:
                    79:b0:9e:5a:eb:30:01:51:5f:60:d6:e3:72:3d:84:
                    d0:96:26:62:16:b9:5e:68:71:f2:11:ac:89:73:87:
                    41:5a:7c:99:5e:5a:c5:d1:d4:53:76:d0:88:6e:7e:
                    1d:6a:0a:36:2d:30:5d:5a:90:b9:ea:d5:10:68:c8:
                    f3:d4:d9:fd:5c:98:29:b4:31:6f:d8:89:8f:7c:77:
                    68:7c:54:0b:a9:e7:8c:44:10:d6:41:e1:67:c0:44:
                    bf:9d:8a:d0:e3:70:1f:b6:e0:5d:71:39:56:5e:9f:
                    00:fd:34:8f:08:52:93:d7:bf:ad:ee:06:9d:bd:cb:
                    b0:af:a8:dd:ff:e2:dd:3a:5f:37:ed:d9:69:56:c6:
                    40:7e:2b:7f:22:2b:bc:f4:9c:77:93:bd:84:6f:5f:
                    30:6c:15:ca:02:a6:4d:6e:46:3d:75:e8:e8:b7:ec:
                    06:89:a8:27:03:f0:9c:c7:af:4e:ba:32:d7:54:fb:
                    33:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:02:AC:D4:BE:86:0B:7C:4D:30:1A:87:AD:2F:54:80:DA:20:06:23
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c2:f4:c9:7e:3d:00:47:97:6f:3c:14:dc:fa:e9:45:2b:1d:
         09:1b:56:d6:54:5e:6b:15:b3:7d:71:5b:3b:aa:06:22:5e:47:
         ee:43:8d:ae:08:87:66:4d:ce:d6:27:53:29:10:de:df:87:e5:
         c0:9a:b4:6b:d4:12:13:62:aa:65:dc:fd:6d:24:e0:4a:48:73:
         7f:69:60:ed:e1:47:16:36:42:ab:e7:6a:8c:e0:fc:3b:06:99:
         b4:6f:82:7d:25:64:cf:94:2d:99:ed:c4:74:2b:39:86:5e:4f:
         fe:e1:d6:de:39:f2:55:15:5a:3a:89:69:c6:bc:57:70:f9:ff:
         7e:7a:0b:d9:13:67:1e:37:05:93:af:4d:b2:6f:f5:fc:ff:23:
         34:75:2e:75:bc:a2:73:a9:be:b2:35:e8:db:e6:5e:c7:3b:f4:
         87:af:72:fe:df:93:62:0f:a6:ef:65:36:3f:88:f8:a3:95:fe:
         ff:56:85:9b:49:4b:e6:da:24:a1:e4:c3:e9:be:35:b2:a9:8f:
         b1:3a:08:8c:bf:39:ec:27:e8:67:0e:50:d7:19:5a:ef:b2:aa:
         62:a3:55:b3:da:3c:fe:60:7f:1b:0b:56:a0:b1:39:3d:fb:2b:
         6e:16:dd:0a:01:8f:9f:84:be:9d:88:8e:d9:78:78:52:ca:4a:
         9a:e6:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org