Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa
File:                     38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          K4oyBGC9q4KDniQHDHh0uFO86NFEkcO725E9E+4eA3o=
Subject key identifier:   0C:81:30:A8:25:54:05:38:1E:DC:D6:20:68:B3:D2:97:57:82:54:A9
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       07D7C03C32F51FF543BE51C3746F08C9C0EDCD4E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa
Signing time:             Sat 22 Oct 2022 04:33:21 +0000
ROA not before:           Sat 22 Oct 2022 04:28:21 +0000
ROA not after:            Sat 21 Oct 2023 04:33:21 +0000
asID:                     204170
IP address blocks:        88.218.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d7:c0:3c:32:f5:1f:f5:43:be:51:c3:74:6f:08:c9:c0:ed:cd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:21 2022 GMT
            Not After : Oct 21 04:33:21 2023 GMT
        Subject: CN=0C8130A8255405381EDCD62068B3D297578254A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fa:6e:8c:bc:76:22:fe:38:31:85:da:19:cc:
                    78:ec:e0:f2:c9:e6:a7:65:09:7f:34:1d:84:58:9c:
                    6b:9e:bf:53:af:4a:ae:84:d2:10:91:4f:8f:1d:e7:
                    0e:62:9a:db:4f:0f:ba:e5:18:28:63:32:11:53:6c:
                    c5:b9:a2:26:83:5d:44:8f:09:bc:d3:a6:b8:87:73:
                    84:bd:ae:0b:5f:bf:81:d6:41:5c:20:3a:c7:5e:d3:
                    14:ee:ef:d2:90:1f:19:35:a3:35:93:f5:c0:f8:3d:
                    06:19:fb:9e:fc:4e:f5:dd:35:2f:86:ea:34:09:53:
                    da:94:d3:81:04:97:86:fb:15:38:b4:82:9d:53:07:
                    2c:fd:50:2e:a2:40:1f:75:24:98:ce:51:7c:12:85:
                    b1:37:8e:46:0d:eb:bd:3a:51:8e:52:72:e1:b4:23:
                    e1:a3:af:85:89:7b:b9:23:c7:57:f5:d1:08:de:99:
                    d7:87:68:1e:0f:c0:50:26:81:29:d6:e3:2b:59:c6:
                    c5:47:70:ce:7f:af:44:ee:fb:50:94:40:e8:fe:dd:
                    a0:8e:af:80:3f:39:63:93:49:3d:a5:22:2e:70:dc:
                    a2:8a:ad:12:bb:dd:ab:dc:0a:d4:ff:e4:78:04:e3:
                    45:bf:a7:51:69:09:18:dd:a1:25:dd:02:58:79:fa:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:81:30:A8:25:54:05:38:1E:DC:D6:20:68:B3:D2:97:57:82:54:A9
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:95:31:4c:77:c2:73:29:07:55:40:7d:e7:a9:4e:ac:5c:32:
         54:48:8c:c1:b2:de:83:10:66:c1:43:db:24:ec:49:30:2b:b8:
         70:c8:28:10:2a:7d:b6:3c:07:33:1c:63:3c:a5:b4:3f:2c:c0:
         88:68:53:d3:1a:01:43:7a:16:18:ca:64:b0:35:a0:7f:b7:ed:
         5c:28:02:5a:db:0c:29:27:8f:4a:7b:e4:6b:73:e8:d7:a7:90:
         00:e9:02:4c:7d:17:0a:46:c9:f1:fb:36:fb:57:43:d3:c5:d1:
         4c:66:c3:1b:ff:4c:9a:a0:6b:b7:6b:26:75:2d:f7:bd:0d:b3:
         b9:17:53:f8:d2:72:f4:39:22:ec:34:eb:10:68:c5:92:c7:a2:
         66:47:3a:0e:6d:f9:77:0a:4e:91:9b:ec:49:e9:73:ea:bf:ac:
         fd:6a:e6:e9:08:f1:8b:de:b9:26:48:5b:31:e8:7c:0a:b9:ec:
         84:f7:46:61:4c:5b:3e:4f:e0:46:9f:1c:d9:32:54:79:5d:95:
         50:07:08:01:c7:27:02:39:34:88:b9:e5:c1:85:95:ce:95:0c:
         29:1b:20:00:0c:ee:2e:68:8b:9f:19:bc:f1:13:ff:bc:b1:1e:
         e4:2c:ae:4c:ac:9b:58:9e:2a:d9:2d:f4:29:3c:6c:d7:b6:9c:
         ca:31:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org