Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/39352e3231342e3131322e302f32322d3234203d3e2030.roa
File:                     39352e3231342e3131322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          NG47ypRpRk74oB/Cic99FvKOOjhxAl7UyBwZOOevVoU=
Subject key identifier:   2D:37:43:44:04:C6:6B:5E:1C:ED:84:D6:F0:6E:A9:F6:79:77:34:72
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3771F833D465045E8D33347A86ECFF54251BE95C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/39352e3231342e3131322e302f32322d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:21:15 +0000
ROA not before:           Fri 03 Mar 2023 16:16:15 +0000
ROA not after:            Fri 01 Mar 2024 16:21:15 +0000
asID:                     0
IP address blocks:        95.214.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:71:f8:33:d4:65:04:5e:8d:33:34:7a:86:ec:ff:54:25:1b:e9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Mar  3 16:16:15 2023 GMT
            Not After : Mar  1 16:21:15 2024 GMT
        Subject: CN=2D37434404C66B5E1CED84D6F06EA9F679773472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:1e:44:79:88:ae:e4:ce:55:eb:65:91:d5:
                    2c:d0:1f:44:a3:db:0d:f3:53:e4:96:60:87:b5:03:
                    c9:00:3d:32:b8:4b:d9:ce:bb:ae:6c:10:b9:d8:81:
                    79:1e:02:5d:f4:98:93:b1:d3:17:fa:7a:b3:c0:10:
                    06:ec:d7:1e:86:9f:f6:77:3c:3e:07:88:10:e8:82:
                    a7:5e:ad:14:6b:f0:2d:10:70:81:89:fa:70:27:25:
                    35:67:83:ac:45:7c:95:99:22:83:06:76:cc:77:02:
                    4f:63:d4:ac:eb:29:8c:1c:b0:8b:e6:09:07:9b:16:
                    15:39:fb:9a:2f:fb:c6:4b:4b:57:50:7c:4f:6e:ef:
                    5e:b3:21:cf:1c:c9:c7:d6:89:96:9d:04:cb:14:ed:
                    09:c2:bb:49:eb:b3:21:2f:71:2f:2f:ea:a1:c2:3d:
                    e7:21:1f:26:61:3c:b6:c1:e8:0f:3c:ce:dd:a1:ee:
                    e9:69:63:8b:45:b5:9f:24:0a:cf:3d:a2:f3:d2:4e:
                    68:b0:2f:fe:db:5f:52:35:6f:20:23:ce:47:48:85:
                    ef:84:a9:01:ac:77:03:0c:1c:77:15:da:ce:32:6c:
                    99:59:c7:16:d7:db:4a:96:82:f7:9f:08:37:5b:1d:
                    ed:90:f3:ee:30:3d:ef:f1:1e:33:d0:32:1f:dd:55:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:37:43:44:04:C6:6B:5E:1C:ED:84:D6:F0:6E:A9:F6:79:77:34:72
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/39352e3231342e3131322e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:8b:ff:03:6a:61:09:c7:55:8d:4b:40:6b:a4:b6:18:6b:
         ba:38:d6:cb:97:ad:66:1d:cb:8a:e1:a1:1b:07:88:39:f3:3d:
         28:fb:1c:c3:a1:27:bc:c3:95:7d:70:a6:d2:3b:e0:82:f2:d9:
         0e:87:c3:48:47:f3:06:2f:62:22:0a:73:67:00:dc:4a:eb:53:
         69:3f:cb:42:3f:56:34:31:69:e4:22:c7:eb:15:88:cc:da:54:
         a5:57:d9:37:67:c5:f2:b0:64:96:9b:0a:90:af:b5:69:cc:d3:
         01:17:1a:1c:89:3a:d5:e2:09:90:94:06:0e:35:8d:60:a6:a5:
         ee:aa:99:43:52:ad:7a:1c:a7:ff:50:fa:1c:a7:86:ec:45:05:
         43:8a:4d:3a:5d:ed:7b:47:cb:82:f6:76:34:0b:a7:cb:e1:30:
         68:b3:d3:18:3f:e1:8d:10:63:52:32:c9:c1:72:bf:23:5b:e4:
         e5:d5:14:9d:06:70:aa:29:c3:1f:09:38:0d:7f:a5:6c:c1:49:
         df:8d:ac:7d:fb:87:3a:31:9f:49:32:bf:43:e9:a1:70:63:be:
         b8:91:fd:1d:76:fd:aa:23:a6:6f:51:e0:49:ce:62:b6:45:45:
         1c:4c:ae:70:1e:8c:32:c6:cb:e9:9b:8f:83:1e:f5:65:9b:09:
         37:ea:d1:c0
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUN3H4M9RlBF6NMzR6huz/VCUb6VwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMzAzMDMxNjE2MTVaFw0yNDAzMDExNjIxMTVaMDMxMTAvBgNV
BAMTKDJEMzc0MzQ0MDRDNjZCNUUxQ0VEODRENkYwNkVBOUY2Nzk3NzM0NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbB5EeYiu5M5V62WR1SzQH0Sj
2w3zU+SWYIe1A8kAPTK4S9nOu65sELnYgXkeAl30mJOx0xf6erPAEAbs1x6Gn/Z3
PD4HiBDogqderRRr8C0QcIGJ+nAnJTVng6xFfJWZIoMGdsx3Ak9j1KzrKYwcsIvm
CQebFhU5+5ov+8ZLS1dQfE9u716zIc8cycfWiZadBMsU7QnCu0nrsyEvcS8v6qHC
PechHyZhPLbB6A88zt2h7ulpY4tFtZ8kCs89ovPSTmiwL/7bX1I1byAjzkdIhe+E
qQGsdwMMHHcV2s4ybJlZxxbX20qWgvefCDdbHe2Q8+4wPe/xHjPQMh/dVfadAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQULTdDRATGa14c7YTW8G6p9nl3NHIwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4Zk
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zOTM1MmUzMjMxMzQyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCX9ZwMA0GCSqGSIb3DQEBCwUAA4IBAQAMfYv/A2phCcdVjUtA
a6S2GGu6ONbLl61mHcuK4aEbB4g58z0o+xzDoSe8w5V9cKbSO+CC8tkOh8NIR/MG
L2IiCnNnANxK61NpP8tCP1Y0MWnkIsfrFYjM2lSlV9k3Z8XysGSWmwqQr7VpzNMB
FxociTrV4gmQlAYONY1gpqXuqplDUq16HKf/UPocp4bsRQVDik06Xe17R8uC9nY0
C6fL4TBos9MYP+GNEGNSMsnBcr8jW+Tl1RSdBnCqKcMfCTgNf6VswUnfjax9+4c6
MZ9JMr9D6aFwY764kf0ddv2qI6ZvUeBJzmK2RUUcTK5wHowyxsvpm4+DHvVlmwk3
6tHA
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org