Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32332d3234203d3e203631333137.roa
File:                     3138352e3234312e3134382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          F0pGvafufj1VUyDnh7p4QMJm7ed0Om1jcXa3dCp+iwM=
Subject key identifier:   B4:CE:A8:38:9C:DA:15:74:0D:7C:9D:F0:59:A9:62:89:D6:44:98:87
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6480C72E3720D33613B719EDCD2637A87955AC1B
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:19 +0000
ROA not before:           Sat 22 Oct 2022 04:28:19 +0000
ROA not after:            Sat 21 Oct 2023 04:33:19 +0000
asID:                     61317
IP address blocks:        185.241.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:80:c7:2e:37:20:d3:36:13:b7:19:ed:cd:26:37:a8:79:55:ac:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:19 2022 GMT
            Not After : Oct 21 04:33:19 2023 GMT
        Subject: CN=B4CEA8389CDA15740D7C9DF059A96289D6449887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:9b:68:26:8d:84:41:fa:6f:76:fb:96:79:
                    86:0c:25:15:a3:4e:82:b6:50:3e:4f:f6:74:59:ad:
                    0b:bf:61:ca:7d:53:72:54:66:72:ef:39:7f:14:ed:
                    5d:eb:e8:51:45:35:64:f2:14:86:4c:e9:64:de:60:
                    8b:08:9b:29:f9:64:03:64:ca:20:e3:7d:90:79:85:
                    66:b2:86:0b:b5:85:a0:ab:52:64:56:dc:a9:f8:70:
                    38:34:b7:31:d2:e3:7e:81:35:6a:3a:c4:8b:70:c8:
                    52:2c:e7:82:3b:62:62:bc:92:76:b6:3a:bc:e2:3f:
                    43:87:85:69:92:ed:f7:4e:ac:19:1a:6a:2f:64:12:
                    df:fe:7a:99:7d:60:67:51:20:bf:25:e7:c6:0e:00:
                    f9:d1:1d:9b:f2:c0:97:70:aa:61:b3:d9:ff:d9:06:
                    2d:d9:6e:4b:f9:2c:99:b9:96:a7:86:88:32:3a:ab:
                    b0:76:83:2b:ec:9b:f7:55:5f:eb:0a:5c:94:09:7e:
                    dc:6e:97:95:cd:5e:ff:4b:8b:93:9a:79:b9:26:39:
                    a1:23:ad:d3:df:07:99:8b:ad:e5:5b:30:06:14:d3:
                    5e:44:84:da:e7:0d:ba:12:4e:aa:f3:2b:db:5c:94:
                    ff:43:d2:56:73:d4:af:14:a7:5f:ee:a6:88:3d:d1:
                    e8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CE:A8:38:9C:DA:15:74:0D:7C:9D:F0:59:A9:62:89:D6:44:98:87
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:2f:24:b6:15:ef:7f:61:b2:db:30:75:48:8d:c6:79:fc:a4:
         e4:8f:62:e5:f8:4b:db:66:e4:3c:6a:5e:e6:55:79:e4:41:ec:
         db:a4:25:8c:b0:91:0b:b4:23:01:69:3e:47:1c:f9:c8:1d:3a:
         64:73:2c:ab:ae:47:6f:da:d3:2b:dc:8b:01:22:d9:5b:64:bf:
         0a:72:b7:07:45:de:0a:ef:af:3e:cb:ef:39:cf:eb:db:1b:34:
         ab:32:73:06:a6:1f:f9:5b:e7:c5:48:ce:eb:89:b3:10:16:9e:
         ec:28:18:b5:e7:30:1a:36:27:a9:f6:59:01:87:d0:98:a0:35:
         a0:5b:1d:49:02:ed:9a:79:96:58:02:fe:f7:7a:2c:7c:19:02:
         49:0d:9f:9b:8f:85:38:27:fd:1d:18:dc:5c:ce:11:76:5e:d2:
         df:1e:b0:81:40:d6:3c:81:05:07:23:5a:88:6f:f5:be:b3:e5:
         09:8d:2e:d6:33:6b:20:b3:45:85:ef:13:5a:f6:9c:59:47:22:
         6b:fe:1d:ea:0d:9f:6c:c6:7e:f9:48:04:01:f8:29:c0:9c:40:
         e1:a8:c5:66:54:83:c3:3d:ef:6f:33:e0:6f:6a:19:88:7f:ec:
         06:be:14:37:fa:77:e5:2d:b7:bc:bf:b8:fc:93:af:84:43:ab:
         ac:05:56:4c
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUZIDHLjcg0zYTtxntzSY3qHlVrBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTlaFw0yMzEwMjEwNDMzMTlaMDMxMTAvBgNV
BAMTKEI0Q0VBODM4OUNEQTE1NzQwRDdDOURGMDU5QTk2Mjg5RDY0NDk4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOM5toJo2EQfpvdvuWeYYMJRWj
ToK2UD5P9nRZrQu/Ycp9U3JUZnLvOX8U7V3r6FFFNWTyFIZM6WTeYIsImyn5ZANk
yiDjfZB5hWayhgu1haCrUmRW3Kn4cDg0tzHS436BNWo6xItwyFIs54I7YmK8kna2
OrziP0OHhWmS7fdOrBkaai9kEt/+epl9YGdRIL8l58YOAPnRHZvywJdwqmGz2f/Z
Bi3Zbkv5LJm5lqeGiDI6q7B2gyvsm/dVX+sKXJQJftxul5XNXv9Li5OaebkmOaEj
rdPfB5mLreVbMAYU015EhNrnDboSTqrzK9tclP9D0lZz1K8Up1/upog90eivAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUtM6oOJzaFXQNfJ3wWaliidZEmIcwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzQzMTJlMzEzNDM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIw
MzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnxlDANBgkqhkiG9w0BAQsFAAOCAQEATi8k
thXvf2Gy2zB1SI3Gefyk5I9i5fhL22bkPGpe5lV55EHs26QljLCRC7QjAWk+Rxz5
yB06ZHMsq65Hb9rTK9yLASLZW2S/CnK3B0XeCu+vPsvvOc/r2xs0qzJzBqYf+Vvn
xUjO64mzEBae7CgYtecwGjYnqfZZAYfQmKA1oFsdSQLtmnmWWAL+93osfBkCSQ2f
m4+FOCf9HRjcXM4Rdl7S3x6wgUDWPIEFByNaiG/1vrPlCY0u1jNrILNFhe8TWvac
WUcia/4d6g2fbMZ++UgEAfgpwJxA4ajFZlSDwz3vbzPgb2oZiH/sBr4UN/p35S23
vL+4/JOvhEOrrAVWTA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org