Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa
File:                     3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier:          Z0zyrwp1wpILMbG2rkxKyDEiTZHExlpNZ3SazDMG89w=
Subject key identifier:   5D:35:CF:3E:82:26:AA:5B:94:A5:5F:41:51:F0:8B:77:97:61:21:46
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       266CF0B38C184A675606F8C22BEC0079302FB70E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa
Signing time:             Sat 22 Oct 2022 04:33:20 +0000
ROA not before:           Sat 22 Oct 2022 04:28:20 +0000
ROA not after:            Sat 21 Oct 2023 04:33:20 +0000
asID:                     141995
IP address blocks:        185.250.38.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6c:f0:b3:8c:18:4a:67:56:06:f8:c2:2b:ec:00:79:30:2f:b7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:20 2022 GMT
            Not After : Oct 21 04:33:20 2023 GMT
        Subject: CN=5D35CF3E8226AA5B94A55F4151F08B7797612146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:f5:d7:18:6b:46:29:8f:dd:f3:82:45:a5:
                    27:5b:ca:19:a1:8f:b8:9a:55:09:e2:a7:37:37:94:
                    86:42:42:58:fc:53:4c:b6:b4:96:88:0a:d5:5d:6a:
                    5e:86:78:23:b6:0f:23:b5:c2:a0:37:53:ec:02:25:
                    5e:98:d4:98:d0:3c:b4:3a:ac:a4:7b:1b:06:cf:b5:
                    5f:19:d5:a4:5c:ce:b5:a7:f3:72:23:03:ad:ff:6a:
                    ff:4f:5f:03:35:3b:ab:49:13:55:24:8d:e2:d5:da:
                    11:a6:95:30:fe:af:ac:f2:b8:cd:85:46:45:48:0b:
                    a4:40:eb:e4:11:50:01:36:56:4a:d0:13:ef:4f:bf:
                    4c:b5:7b:1e:55:82:e6:31:2a:7c:b1:2b:04:e5:30:
                    64:22:cb:2a:72:2d:76:0d:a8:f0:4c:6c:da:ee:1a:
                    b0:bc:ad:b7:90:21:c0:49:f6:7e:05:52:b4:83:87:
                    73:94:08:c5:d1:1e:02:a9:6e:11:66:c0:eb:31:8f:
                    61:2a:07:6e:ab:de:47:ac:03:04:0c:f8:2c:61:85:
                    76:ec:b9:1d:8b:98:f1:bf:98:78:d6:a8:32:ed:f3:
                    07:42:84:96:1e:53:11:cb:47:c4:e1:0c:14:f1:fc:
                    95:d7:83:e8:85:26:65:c9:59:a8:b2:1c:58:dd:9c:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:35:CF:3E:82:26:AA:5B:94:A5:5F:41:51:F0:8B:77:97:61:21:46
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:4f:22:af:9e:a7:d4:fd:dc:51:1d:43:45:46:4d:64:21:21:
         3a:76:e1:61:87:75:8c:17:d6:47:d4:c9:07:ac:e9:e4:09:27:
         e8:ef:f4:07:5e:8d:8a:38:b6:cc:26:f6:c6:29:df:9c:3a:c1:
         c4:f5:69:9c:9d:b1:50:ca:a6:d4:9a:37:c3:d1:90:81:9b:31:
         06:ae:43:51:ca:92:5e:19:24:06:a9:4b:d5:13:95:cc:6b:86:
         83:c1:24:ba:45:a7:3c:4b:f8:2b:ab:f1:3b:a2:e6:ae:a5:9f:
         2b:8b:a6:a9:12:23:84:4d:0e:45:76:e4:89:dd:63:a2:96:0d:
         11:89:b9:03:1e:d0:e6:07:ce:53:31:af:88:5f:f6:d5:7a:41:
         ff:78:80:9b:86:b8:ee:0a:2d:72:bf:18:20:0a:5e:b2:58:e1:
         24:c7:51:2a:33:66:b3:50:8f:08:11:44:15:8b:01:b7:48:ba:
         6f:37:36:08:f2:c9:75:0e:9f:e4:f1:a4:fd:7a:12:bf:da:64:
         fa:0d:95:f2:8a:b6:4f:12:a6:b5:00:a3:18:5e:38:a5:ed:a4:
         f4:98:5b:84:b0:29:49:75:49:b9:65:f2:e7:09:2f:49:fb:db:
         7c:39:65:0c:80:91:4c:0d:2c:c0:51:dd:f9:f6:47:e2:f0:27:
         0f:96:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org