Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e37302e302f32332d3234203d3e20313336373837.roa
File:                     3138352e3233342e37302e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          2ab176FV4jP4sShdcFR+JcgAwVScZoQ5xvwSLmFI44I=
Subject key identifier:   F0:5F:3A:07:35:D7:D6:6D:44:D5:59:10:52:37:86:9A:46:73:F4:0A
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       36FC4D4750AC8950408AE483C87A05257DC817DE
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e37302e302f32332d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:17 +0000
ROA not before:           Sat 22 Oct 2022 04:28:17 +0000
ROA not after:            Sat 21 Oct 2023 04:33:17 +0000
asID:                     136787
IP address blocks:        185.234.70.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fc:4d:47:50:ac:89:50:40:8a:e4:83:c8:7a:05:25:7d:c8:17:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:17 2022 GMT
            Not After : Oct 21 04:33:17 2023 GMT
        Subject: CN=F05F3A0735D7D66D44D559105237869A4673F40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:04:80:4f:a2:b4:5a:9e:1a:74:a3:0d:0f:00:
                    e2:c7:a3:3a:73:86:a1:6a:2f:50:53:a3:2f:e8:73:
                    64:d5:da:3b:2e:11:7f:94:1d:7f:37:f8:b3:57:45:
                    b1:b7:6e:84:6a:69:9d:d8:56:49:bd:c0:fd:26:1c:
                    88:43:00:84:ca:9f:29:d9:57:76:2e:3b:1c:06:2a:
                    ea:dd:e9:58:f8:32:bd:97:5e:e6:99:58:92:e8:6e:
                    4a:1a:9d:d5:ac:15:f6:e5:f4:f1:b5:9d:04:58:c9:
                    37:95:bf:d0:6c:b2:8a:de:52:4d:9a:87:5b:42:79:
                    68:29:cc:f9:9f:04:c7:04:b7:e2:be:7b:c6:fc:1d:
                    51:a0:6e:d9:25:1d:d2:a5:8a:58:9a:1c:2c:50:ff:
                    7f:0c:9e:e7:09:34:20:e6:1e:c6:27:46:50:dc:b5:
                    b0:2f:23:d6:37:5f:b9:64:4f:64:3f:b5:c1:38:ab:
                    13:aa:52:ce:32:63:cd:d8:0b:0f:93:6c:65:0e:f1:
                    b7:57:38:33:61:c0:04:1b:a5:63:8a:a9:b2:eb:8b:
                    fe:c9:9a:f7:69:bf:60:1b:52:11:13:dd:ea:ac:c7:
                    6a:70:e3:9f:c0:db:63:6c:cb:12:b8:e2:4d:e6:f8:
                    16:df:88:c4:c1:e6:b9:7f:17:a8:f1:81:aa:1c:69:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5F:3A:07:35:D7:D6:6D:44:D5:59:10:52:37:86:9A:46:73:F4:0A
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e37302e302f32332d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:aa:45:6e:a9:d9:be:15:ea:b2:b2:a0:88:3f:87:e8:a0:ee:
         1a:a1:81:57:20:28:de:2b:54:d1:a8:6f:5d:8e:2b:2a:4e:b0:
         45:94:a8:47:f2:de:40:a6:e3:0b:56:aa:35:f1:52:5e:93:d7:
         85:82:d6:d5:5b:39:0c:1f:ff:4c:39:25:48:bd:02:c4:1a:fb:
         45:7f:a4:bb:04:4c:16:50:b2:90:b5:65:1f:6c:07:3b:a7:17:
         25:05:32:1e:5c:62:b6:b6:5b:bd:55:64:a0:f1:79:ba:bd:f3:
         9e:bf:61:e4:a0:3f:a6:f2:fa:07:56:b8:f3:ad:f1:86:37:2a:
         db:4a:62:0c:9e:73:39:cb:ea:20:10:8f:46:34:5d:51:29:04:
         c0:e8:e8:c9:4e:f5:ad:24:11:3b:dd:35:24:e9:de:52:7d:73:
         7f:56:1f:fc:dd:42:79:6b:5c:84:e8:27:7e:a1:81:31:a4:ec:
         5b:ee:c5:1f:47:a1:0c:c7:76:61:84:8d:09:26:c1:7f:a8:d0:
         7b:83:fc:7b:71:e2:7c:56:84:b8:6b:68:b8:cf:d2:25:a9:e7:
         58:07:17:ba:a8:dc:4d:f9:c5:86:5d:75:a1:0e:28:ce:7c:0f:
         93:9e:3c:d4:aa:6f:b2:74:55:75:cc:e1:45:f1:37:47:ca:ac:
         93:44:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org