Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa
File:                     3138352e3235302e33392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          uz3lzGRCG73wR2d6hoizN/gBaic0TvrHhTDcxs3Yud0=
Subject key identifier:   99:B3:7D:A5:20:66:97:14:D1:FA:2D:2C:A4:F1:66:61:6B:E6:6E:79
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       28F90DE866357B5B4B626A726F1E173E20164E63
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:25 +0000
ROA not before:           Sat 22 Oct 2022 04:28:25 +0000
ROA not after:            Sat 21 Oct 2023 04:33:25 +0000
asID:                     61317
IP address blocks:        185.250.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f9:0d:e8:66:35:7b:5b:4b:62:6a:72:6f:1e:17:3e:20:16:4e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:25 2022 GMT
            Not After : Oct 21 04:33:25 2023 GMT
        Subject: CN=99B37DA520669714D1FA2D2CA4F166616BE66E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:74:53:12:08:df:75:f4:05:01:e1:b4:3d:
                    de:43:95:5b:ce:ac:5b:86:f1:a4:52:f1:ee:3c:c1:
                    33:9d:31:3f:7f:45:68:02:b5:08:75:96:dc:45:0a:
                    dd:7d:d4:91:68:96:2d:89:04:35:58:50:48:e4:df:
                    6c:64:82:dc:06:1e:b5:bc:ba:05:21:1b:d6:25:96:
                    f4:26:56:3e:53:73:2e:29:ed:09:ea:6d:74:bd:bf:
                    0d:e7:43:01:f9:8f:aa:bb:80:73:6a:de:46:c2:d9:
                    cd:e8:2a:cc:d6:ce:50:98:59:48:b3:a4:3a:46:6d:
                    f0:52:04:13:c6:81:a4:01:cf:e0:a5:d9:13:81:3e:
                    5b:bc:b9:0d:96:28:ba:2f:f0:5a:c8:22:a6:3f:ab:
                    53:88:bc:b5:af:c4:e4:97:ee:6d:f3:62:6c:95:6b:
                    02:ce:35:70:bc:32:4a:ca:8f:7f:f5:be:11:4f:42:
                    51:49:1b:9e:34:29:ef:b4:c8:3b:e3:e6:0b:ca:3e:
                    c8:39:2c:ec:c4:51:0a:59:d1:bd:6f:0f:6a:46:95:
                    b5:c7:13:3e:f0:51:ff:72:7c:34:f1:ba:a1:76:13:
                    30:0a:05:9f:cf:d0:cf:36:bc:4b:61:42:8e:18:e5:
                    78:8f:49:cf:80:e8:a1:e4:a0:8a:e5:74:51:3f:04:
                    26:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B3:7D:A5:20:66:97:14:D1:FA:2D:2C:A4:F1:66:61:6B:E6:6E:79
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ac:d7:c7:f5:a4:6a:5a:c7:4a:3f:94:4c:d1:0d:01:77:f5:
         7e:81:b7:aa:c0:13:00:ab:50:f7:2c:03:0d:25:d0:d0:1a:5b:
         35:cf:b4:15:d6:dd:1c:5f:6f:7b:20:e8:b7:22:b7:9c:47:ed:
         83:63:1e:c0:e4:26:fe:50:26:21:4e:c0:67:09:66:5f:d8:18:
         b4:40:ea:ef:13:34:3b:e6:83:d0:08:5f:a0:03:54:03:54:8c:
         c4:7e:7c:fb:80:d2:0e:52:2d:b1:d1:58:95:7d:0c:c1:7e:df:
         f2:95:67:29:ea:04:83:60:c5:2c:ab:35:54:53:1a:29:a6:47:
         1f:8d:f2:a9:5b:3a:6b:ac:08:dd:4e:f2:85:ce:c0:d9:69:57:
         3b:11:98:49:e5:7e:b2:bc:81:ba:35:48:53:b6:4d:53:6e:20:
         f1:65:15:6a:f8:f3:ba:d1:27:21:13:4f:1b:af:73:c6:20:4c:
         f6:e4:31:1e:5e:12:0f:44:b2:36:fd:af:68:1f:da:78:ea:6d:
         32:00:f9:97:16:30:d5:da:cc:0c:05:95:8f:cc:b3:f0:2a:a5:
         27:e4:01:9c:d1:6e:c8:a0:40:e4:4a:8a:40:2a:28:3d:e1:e4:
         16:ea:34:9d:b7:17:62:44:67:8e:c0:e0:4b:47:02:10:3a:e8:
         9d:24:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org