Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32342d3234203d3e203139343337.roa
File:                     3138352e3234312e3134382e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          60DMHDqlJeiYK7gRJwTfof7lS13EQB0mXoT53ra2TMY=
Subject key identifier:   6C:68:87:DE:D9:4E:8F:A5:3E:E4:58:92:96:2D:92:6D:7F:24:D0:50
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6731AA22113DFD291CADDA0443FFE44D5FBD4896
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32342d3234203d3e203139343337.roa
Signing time:             Sat 22 Oct 2022 04:33:15 +0000
ROA not before:           Sat 22 Oct 2022 04:28:15 +0000
ROA not after:            Sat 21 Oct 2023 04:33:15 +0000
asID:                     19437
IP address blocks:        185.241.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:31:aa:22:11:3d:fd:29:1c:ad:da:04:43:ff:e4:4d:5f:bd:48:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:15 2022 GMT
            Not After : Oct 21 04:33:15 2023 GMT
        Subject: CN=6C6887DED94E8FA53EE45892962D926D7F24D050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:32:ef:91:15:9b:c1:73:0b:7d:85:1e:5a:7f:
                    21:2c:21:31:6f:7b:5a:28:2a:76:51:a2:f3:30:ba:
                    92:46:99:41:dd:73:00:59:7e:c9:1c:a0:8d:aa:82:
                    b5:76:7c:64:72:55:b0:36:41:bb:51:c6:c7:7c:49:
                    f5:7d:8d:e7:4b:77:0d:32:9b:46:03:d4:40:8d:ca:
                    7b:d8:4d:62:e4:d2:55:c3:60:5d:ab:7a:6e:64:d2:
                    51:6f:64:b2:a2:02:7f:29:95:66:8b:b7:c9:16:cb:
                    80:83:22:24:2b:97:d0:88:59:b8:a8:70:dd:26:3a:
                    71:03:71:f2:6a:a0:9e:da:d7:f0:9c:72:1a:08:3f:
                    04:cd:21:04:5b:31:28:63:95:50:62:8d:a5:f8:a2:
                    96:c0:f2:be:bf:76:15:e7:37:a6:4d:5a:cd:ad:ec:
                    88:ad:07:4c:4b:13:23:55:55:6c:9e:ae:ce:f2:23:
                    7c:aa:24:f6:f3:d6:ad:74:7e:8d:93:db:80:ab:1d:
                    f9:e8:75:3d:c5:04:73:3b:b6:9c:42:f1:73:e2:7d:
                    04:e6:c6:dd:b1:c2:b6:9e:71:9d:b9:c6:ec:19:28:
                    de:db:ad:2e:08:95:5e:49:4e:31:1b:48:a5:92:4d:
                    29:0e:35:6f:9c:89:fa:8b:78:19:5c:4b:d5:45:96:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:87:DE:D9:4E:8F:A5:3E:E4:58:92:96:2D:92:6D:7F:24:D0:50
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f6:1a:12:94:37:cd:f3:8e:22:f7:ff:fa:a4:3f:d1:54:67:
         dd:de:46:97:9c:f8:2c:8f:bf:61:d0:0a:8d:fd:d6:c2:20:79:
         7c:3f:a1:c4:74:6f:95:21:0a:bb:de:f9:c0:da:82:fc:5e:71:
         d3:94:6d:e2:5c:bc:e7:7e:8a:5e:8f:10:52:8e:1a:46:fa:3e:
         df:ba:82:82:1a:43:93:ad:e4:40:54:30:8e:f5:48:4f:2e:d6:
         5c:d9:e0:7c:1a:fd:90:60:9b:08:6f:84:01:c5:ae:82:d9:9c:
         34:fb:66:54:f3:f9:a5:35:57:0a:2b:14:66:9f:a0:14:f6:69:
         af:af:f7:db:75:13:13:0e:d7:55:7d:3a:fc:6b:6d:8e:0f:31:
         6d:5d:4d:8a:19:cb:e2:72:7b:40:08:24:f0:1d:1f:37:58:3e:
         c8:55:5d:d3:e3:7b:81:d5:c7:ea:0f:8b:e1:59:fc:22:7c:5c:
         a3:1b:66:03:91:cb:d9:13:2f:c5:e2:12:7c:05:66:fb:e2:85:
         84:0c:a4:07:f2:2a:53:68:05:58:60:bb:4e:51:2c:32:bb:72:
         3c:d8:3c:01:fd:c3:1c:f4:19:85:e3:72:fe:31:33:49:28:31:
         fc:a5:c4:c3:c8:0e:27:2c:ef:3d:e6:35:8b:27:c3:cf:06:24:
         57:f2:a8:dc
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUZzGqIhE9/SkcrdoEQ//kTV+9SJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTVaFw0yMzEwMjEwNDMzMTVaMDMxMTAvBgNV
BAMTKDZDNjg4N0RFRDk0RThGQTUzRUU0NTg5Mjk2MkQ5MjZEN0YyNEQwNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcMu+RFZvBcwt9hR5afyEsITFv
e1ooKnZRovMwupJGmUHdcwBZfskcoI2qgrV2fGRyVbA2QbtRxsd8SfV9jedLdw0y
m0YD1ECNynvYTWLk0lXDYF2rem5k0lFvZLKiAn8plWaLt8kWy4CDIiQrl9CIWbio
cN0mOnEDcfJqoJ7a1/CcchoIPwTNIQRbMShjlVBijaX4opbA8r6/dhXnN6ZNWs2t
7IitB0xLEyNVVWyers7yI3yqJPbz1q10fo2T24CrHfnodT3FBHM7tpxC8XPifQTm
xt2xwraecZ25xuwZKN7brS4IlV5JTjEbSKWSTSkONW+cifqLeBlcS9VFlvJdAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUbGiH3tlOj6U+5FiSli2SbX8k0FAwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzQzMTJlMzEzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzEzOTM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnxlDANBgkqhkiG9w0BAQsFAAOCAQEAZPYa
EpQ3zfOOIvf/+qQ/0VRn3d5Gl5z4LI+/YdAKjf3WwiB5fD+hxHRvlSEKu975wNqC
/F5x05Rt4ly8536KXo8QUo4aRvo+37qCghpDk63kQFQwjvVITy7WXNngfBr9kGCb
CG+EAcWugtmcNPtmVPP5pTVXCisUZp+gFPZpr6/323UTEw7XVX06/Gttjg8xbV1N
ihnL4nJ7QAgk8B0fN1g+yFVd0+N7gdXH6g+L4Vn8InxcoxtmA5HL2RMvxeISfAVm
++KFhAykB/IqU2gFWGC7TlEsMrtyPNg8Af3DHPQZheNy/jEzSSgx/KXEw8gOJyzv
PeY1iyfDzwYkV/Ko3A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org