Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38382e3231382e3230322e302f32332d3234203d3e2030.roa
File:                     38382e3231382e3230322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          amDB8Z7dKM15ASMZx3H68cTL8BQczzLBUkn1EmKW1SA=
Subject key identifier:   9A:07:8D:D7:32:F4:CC:82:AB:BB:47:A3:FD:CA:13:43:25:F6:1F:16
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       0A675CFA6D39F8AD467204E547C9C1BE7E13130A
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38382e3231382e3230322e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:20:57 +0000
ROA not before:           Fri 03 Mar 2023 16:15:57 +0000
ROA not after:            Fri 01 Mar 2024 16:20:57 +0000
asID:                     0
IP address blocks:        88.218.202.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:67:5c:fa:6d:39:f8:ad:46:72:04:e5:47:c9:c1:be:7e:13:13:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Mar  3 16:15:57 2023 GMT
            Not After : Mar  1 16:20:57 2024 GMT
        Subject: CN=9A078DD732F4CC82ABBB47A3FDCA134325F61F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:c7:37:8a:68:08:3d:9c:9b:37:9e:92:39:
                    72:ed:c2:1d:75:2e:f0:ca:4b:ca:06:c7:ac:03:18:
                    ac:6b:ee:22:dd:8e:6c:56:be:f0:8c:66:fd:14:8e:
                    15:43:8b:49:ac:7d:41:87:4d:cd:2e:cd:d7:3a:99:
                    87:47:69:57:90:8c:72:26:fc:0c:92:35:7e:1d:af:
                    57:1f:88:b9:d6:18:3f:b1:99:e2:76:8d:d3:01:4b:
                    8a:99:c3:3c:61:9d:ee:57:a9:5c:46:cc:90:54:db:
                    01:29:82:30:a7:53:58:30:7b:f2:1d:bb:48:b4:2f:
                    26:c1:92:cf:f2:55:38:a5:88:fe:34:8d:0b:ae:62:
                    92:49:60:05:5d:b4:24:fb:d3:b3:16:e8:57:2c:97:
                    91:49:ae:62:20:22:79:de:00:99:d8:b5:f4:0a:69:
                    9b:6d:fe:74:7f:e7:b4:cf:66:89:7a:56:a5:92:af:
                    fa:1c:4e:c1:8d:7d:c0:b8:4f:99:c8:94:76:4e:27:
                    3b:f6:e7:19:70:9b:9f:47:e8:51:dc:ae:be:d0:99:
                    0f:b3:4a:81:dd:30:fb:73:3a:b4:5e:c9:6b:34:b4:
                    87:b9:2f:1b:a2:b9:6b:f0:5c:71:f7:ff:25:02:22:
                    a7:55:de:da:1d:51:fb:2b:e5:56:67:50:17:8a:70:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:07:8D:D7:32:F4:CC:82:AB:BB:47:A3:FD:CA:13:43:25:F6:1F:16
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38382e3231382e3230322e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e8:f9:6b:9f:6c:f0:a6:a1:13:53:0e:02:cf:cf:e1:4e:2d:93:
         32:d9:29:a0:15:f6:e2:1e:67:21:0c:0b:8d:e0:be:a9:45:37:
         5d:2c:81:3d:5a:f2:eb:52:8f:d2:03:9e:ee:67:4e:01:1b:a0:
         15:56:e6:4b:b8:89:96:46:3d:38:c3:bc:84:b0:17:cb:94:06:
         3a:81:39:e9:d2:1d:a2:86:bc:58:de:a5:9e:b9:76:27:36:91:
         70:a9:1a:30:16:79:ff:4e:2c:df:7b:72:20:1f:f2:1d:6d:98:
         ba:20:f7:a3:a1:ae:37:cc:80:4a:c4:f5:ce:63:7d:1a:2f:30:
         fd:89:d3:fd:d7:f8:fc:a0:62:76:92:ff:3e:d5:6b:50:44:7d:
         8f:03:fc:4d:43:4a:00:27:82:b6:68:ce:9b:cf:9f:81:b0:1c:
         ab:05:fc:ea:eb:b5:4e:74:53:c5:7c:b0:0d:1f:5d:56:e2:6c:
         97:23:c8:d9:ab:c1:9f:41:17:00:20:a2:8f:89:9a:95:47:5a:
         f2:c3:7f:17:bf:8d:85:75:de:bc:0a:bf:9d:fb:b2:5e:c0:df:
         fc:c6:75:04:4f:fa:aa:ae:b6:a2:b1:cb:49:eb:9f:fa:59:d7:
         b0:ee:33:9d:77:5b:f4:1d:06:a1:7e:24:0e:2c:cc:b6:37:8f:
         a4:4f:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org