Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33362e302f32322d3234203d3e203631333137.roa
File:                     3138352e3235302e33362e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          eZi2vWZW/bE5FqzftLCgVr/w/9sNt0tQbwbVerT+P/o=
Subject key identifier:   70:1A:15:C4:7B:26:5B:34:82:B8:56:E2:65:87:8E:B7:91:39:74:65
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6F3527C5EEFE326142C9DCBC1F0CF5CD1BDE5595
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33362e302f32322d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:26 +0000
ROA not before:           Tue 28 Jun 2022 04:35:26 +0000
ROA not after:            Tue 27 Jun 2023 04:40:26 +0000
asID:                     61317
IP address blocks:        185.250.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:35:27:c5:ee:fe:32:61:42:c9:dc:bc:1f:0c:f5:cd:1b:de:55:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:26 2022 GMT
            Not After : Jun 27 04:40:26 2023 GMT
        Subject: CN=701A15C47B265B3482B856E265878EB791397465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bd:d2:3a:78:20:89:af:9e:b2:19:fc:ef:b6:
                    36:db:cb:ae:7c:b1:74:9f:7f:5a:37:56:ca:36:c7:
                    7d:3f:6b:af:ef:dc:8e:2a:c4:51:eb:b5:62:14:c9:
                    a4:60:dd:18:c1:1a:42:b1:73:54:b0:90:07:05:5b:
                    ab:cb:cb:78:b0:90:a0:3f:4d:fe:20:c7:8d:b2:d9:
                    58:77:21:46:43:1c:e0:c5:b7:79:8a:b3:da:69:e2:
                    e8:23:72:e5:de:72:3c:dd:ff:34:b7:a0:e8:f4:72:
                    15:0e:be:0d:49:e4:c9:47:a0:df:3f:e6:17:05:60:
                    d5:88:f2:1c:9b:cf:52:af:50:e5:86:15:ef:ef:70:
                    5a:94:41:bb:05:d1:d8:2e:86:29:21:45:60:27:e6:
                    79:6f:e3:c7:16:a0:d3:34:2c:e1:97:4a:3d:7d:85:
                    1e:a1:c1:b7:47:2d:be:58:7e:87:08:61:9d:ef:75:
                    d8:00:b6:77:ba:6c:e3:44:21:28:cc:ee:24:2f:09:
                    4b:dd:bc:0d:40:19:26:15:af:7d:7c:9e:07:fc:d3:
                    a3:ee:29:8d:e3:e3:f5:8d:45:13:4b:e9:ef:5b:cd:
                    f2:70:6d:99:81:f4:82:21:50:87:10:6d:af:d3:a7:
                    bc:60:81:0e:cc:bf:33:e0:c9:b9:53:f7:cd:86:a3:
                    7c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1A:15:C4:7B:26:5B:34:82:B8:56:E2:65:87:8E:B7:91:39:74:65
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33362e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:58:b0:35:2c:1b:28:49:63:13:ec:7b:c2:c2:d3:a6:5e:0b:
         f8:2e:32:fb:ce:5d:e7:ab:1d:5a:fe:b5:d2:9f:df:7b:6b:5e:
         d1:24:71:ef:e2:ea:bc:ec:81:14:23:d7:d3:78:7f:13:36:df:
         b6:f8:d7:dc:e3:11:8b:5f:92:49:4b:b4:a5:a6:19:49:ac:87:
         bf:64:ed:2a:8c:43:69:4d:6f:5f:27:15:0b:86:87:4c:e0:6a:
         a5:56:3f:f6:b1:00:78:10:e3:4c:c5:ec:8b:df:33:88:c1:75:
         70:fa:0a:48:85:fe:c5:3a:77:33:1e:a3:dc:04:eb:dc:79:83:
         b8:64:12:56:01:ab:e7:e6:27:1b:61:58:9b:79:9b:06:31:c4:
         01:78:ed:4e:95:ae:8f:16:e5:d1:5a:7e:da:0e:d3:cf:19:0b:
         97:b3:19:a0:e2:35:96:4b:90:b2:64:50:4e:c1:13:bb:2a:94:
         42:4e:80:b4:5d:3d:0e:5c:56:42:e3:a4:2a:d5:f7:ca:eb:9c:
         79:41:e4:b7:38:cd:33:be:ff:de:06:df:a2:18:fe:ab:5a:20:
         2c:be:a0:31:1b:9e:52:58:19:46:06:7e:a5:c6:3c:71:42:1f:
         3d:b5:56:0d:e3:68:f4:36:bb:6e:ed:d6:ec:5b:4e:1f:dd:44:
         3b:be:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org