Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa
File:                     3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          qyvv1/SJ6AJ+gV2jc2r8d4TBKjcI7+J/JYDRbbik6Co=
Subject key identifier:   ED:5F:8C:D1:35:F2:CC:5C:93:4A:24:A1:EC:D8:C1:44:55:0E:F5:A7
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       41AF5336128B909F02C410367AF329BA07584BE2
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:24 +0000
ROA not before:           Sat 22 Oct 2022 04:28:24 +0000
ROA not after:            Sat 21 Oct 2023 04:33:24 +0000
asID:                     201341
IP address blocks:        185.237.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:af:53:36:12:8b:90:9f:02:c4:10:36:7a:f3:29:ba:07:58:4b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:24 2022 GMT
            Not After : Oct 21 04:33:24 2023 GMT
        Subject: CN=ED5F8CD135F2CC5C934A24A1ECD8C144550EF5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:dd:b0:c6:30:c4:fd:6a:a6:64:fb:cc:4a:
                    b9:13:ae:e1:3b:75:45:cf:22:4f:a1:af:6f:60:57:
                    92:b2:11:3a:ca:2f:50:c7:fc:d6:51:a4:f0:f7:20:
                    ef:91:85:76:cc:03:d0:68:79:97:4f:43:a0:86:dd:
                    f9:fb:60:44:f7:8f:8c:56:94:b0:5c:5e:3b:39:26:
                    3a:47:6a:44:2b:25:53:18:32:6d:1c:9b:2b:4b:d6:
                    37:68:87:34:b0:55:7b:ab:3b:3b:ff:b7:8d:46:6f:
                    15:40:0d:8b:23:c6:34:21:5b:71:35:27:c5:13:de:
                    c8:3b:60:b0:4a:2f:c2:43:f2:33:a5:4c:a0:64:5a:
                    bc:ba:fa:d8:98:9c:eb:13:26:06:48:ef:0d:78:35:
                    6b:6a:d6:92:3b:6d:cd:cb:bd:53:ff:b1:e2:55:55:
                    34:7e:9d:18:8e:b2:d5:69:12:77:0b:b3:5d:2f:bf:
                    e9:7f:c7:d3:03:67:2b:42:f0:80:b4:22:2e:5d:87:
                    2d:27:30:c7:03:7d:8f:da:63:ca:d1:64:d3:41:32:
                    d8:81:69:54:ba:8f:b0:42:b9:ff:ec:a4:4c:82:dc:
                    25:70:c2:c7:08:29:6c:0a:5b:ae:ed:71:58:5f:c3:
                    3e:2d:b9:b5:32:3a:7e:22:58:61:e3:30:5e:a5:4a:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5F:8C:D1:35:F2:CC:5C:93:4A:24:A1:EC:D8:C1:44:55:0E:F5:A7
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:4f:39:7e:9f:b3:79:71:0c:af:35:4b:a9:93:79:8c:9b:35:
         89:b8:f0:7c:85:87:ff:1f:5d:f2:30:d8:00:98:60:d6:eb:a8:
         f5:1d:5a:f8:8b:e7:17:52:bf:0d:45:c5:b1:eb:5c:bb:e7:bf:
         4b:12:3e:9b:ab:f1:67:fe:8f:54:5f:9c:db:0c:53:89:db:8c:
         3e:8d:40:d6:20:d7:31:23:0f:3a:13:d5:1f:ef:7e:24:7d:97:
         7a:c5:f8:b4:fe:64:f1:ad:82:be:b3:57:93:c6:c8:ba:3a:60:
         5e:ee:b3:f3:5c:50:b4:b6:71:89:ea:b0:05:7c:4e:c9:49:95:
         47:e1:a2:ea:fa:cb:1c:78:be:3b:ea:70:13:c5:cd:12:14:90:
         58:e1:bd:7b:20:a8:83:40:19:eb:26:3d:ab:f6:3d:31:92:30:
         2a:38:c2:7b:4c:16:fe:58:db:e7:ac:ea:be:5c:e3:84:f1:be:
         7c:f1:00:5f:21:c8:d3:74:7e:6c:68:8c:eb:a7:78:e8:8d:16:
         2f:b9:ba:6d:4d:52:4d:1c:9e:b6:59:af:31:da:8a:1d:de:5a:
         15:74:80:4b:37:e5:81:c0:50:cf:f7:ab:60:0e:7f:f2:f6:7a:
         d8:97:e0:79:68:55:01:eb:77:27:78:95:fc:1b:98:3b:48:fb:
         c1:5c:b6:df
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUQa9TNhKLkJ8CxBA2evMpugdYS+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MjRaFw0yMzEwMjEwNDMzMjRaMDMxMTAvBgNV
BAMTKEVENUY4Q0QxMzVGMkNDNUM5MzRBMjRBMUVDRDhDMTQ0NTUwRUY1QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVd2wxjDE/WqmZPvMSrkTruE7
dUXPIk+hr29gV5KyETrKL1DH/NZRpPD3IO+RhXbMA9BoeZdPQ6CG3fn7YET3j4xW
lLBcXjs5JjpHakQrJVMYMm0cmytL1jdohzSwVXurOzv/t41GbxVADYsjxjQhW3E1
J8UT3sg7YLBKL8JD8jOlTKBkWry6+tiYnOsTJgZI7w14NWtq1pI7bc3LvVP/seJV
VTR+nRiOstVpEncLs10vv+l/x9MDZytC8IC0Ii5dhy0nMMcDfY/aY8rRZNNBMtiB
aVS6j7BCuf/spEyC3CVwwscIKWwKW67tcVhfwz4tubUyOn4iWGHjMF6lSmmNAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQU7V+M0TXyzFyTSiSh7NjBRFUO9acwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzYvMzEzODM1MmUzMjMzMzcyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnt/zANBgkqhkiG9w0BAQsFAAOCAQEA
IE85fp+zeXEMrzVLqZN5jJs1ibjwfIWH/x9d8jDYAJhg1uuo9R1a+IvnF1K/DUXF
setcu+e/SxI+m6vxZ/6PVF+c2wxTiduMPo1A1iDXMSMPOhPVH+9+JH2XesX4tP5k
8a2CvrNXk8bIujpgXu6z81xQtLZxieqwBXxOyUmVR+Gi6vrLHHi+O+pwE8XNEhSQ
WOG9eyCog0AZ6yY9q/Y9MZIwKjjCe0wW/ljb56zqvlzjhPG+fPEAXyHI03R+bGiM
66d46I0WL7m6bU1STRyetlmvMdqKHd5aFXSASzflgcBQz/erYA5/8vZ62JfgeWhV
Aet3J3iV/BuYO0j7wVy23w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org