Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36372e302f32342d3234203d3e203235303938.roa
File:                     3139342e3131332e36372e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          F6s8EsxOxgqW0UFR++u4AgolsE2zDVf7B5DM4/2+ve0=
Subject key identifier:   41:2F:E4:02:F7:6F:A9:8E:FF:97:35:03:6D:D9:16:1E:1B:CF:6B:8C
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       5354F3BED5968621D46AB8C807FDB0F19638000D
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36372e302f32342d3234203d3e203235303938.roa
Signing time:             Tue 28 Jun 2022 04:41:04 +0000
ROA not before:           Tue 28 Jun 2022 04:36:04 +0000
ROA not after:            Tue 27 Jun 2023 04:41:04 +0000
asID:                     25098
IP address blocks:        194.113.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:54:f3:be:d5:96:86:21:d4:6a:b8:c8:07:fd:b0:f1:96:38:00:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jun 28 04:36:04 2022 GMT
            Not After : Jun 27 04:41:04 2023 GMT
        Subject: CN=412FE402F76FA98EFF9735036DD9161E1BCF6B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:26:ea:22:bc:8a:05:8e:26:0b:35:10:60:8b:
                    58:ec:bf:36:32:b0:b7:23:41:dc:62:b2:6a:7b:7e:
                    ea:df:5c:f6:a2:be:80:eb:d1:ae:6f:fb:83:b7:56:
                    b6:d4:36:df:fa:e9:eb:45:71:54:0b:6a:1a:dc:fb:
                    a6:d1:a9:d0:b8:e0:6f:be:0c:d8:69:72:51:bb:14:
                    fe:63:2b:5e:89:1f:13:a4:78:71:7b:93:31:23:6d:
                    09:35:03:5c:ba:3c:00:ce:de:ed:b7:fd:bf:14:e3:
                    ee:87:c5:c6:ea:c8:8e:6d:29:9d:c4:cd:0b:58:96:
                    0a:c4:c7:b3:bb:bf:bc:eb:10:dd:9d:79:f8:5b:40:
                    7f:77:fd:aa:b3:37:26:1c:23:1a:14:3e:17:1b:f6:
                    28:68:42:7a:68:98:b7:f1:6b:38:7b:fa:2f:a5:22:
                    c2:63:63:98:f2:ff:8c:81:03:dc:fc:90:3b:7e:00:
                    27:16:a6:ce:fe:8a:3b:b4:bb:e8:ac:57:69:72:a1:
                    34:dc:26:05:67:66:23:37:97:67:2b:7e:05:1b:10:
                    32:7a:22:d9:6f:01:af:e9:f8:87:2c:66:d6:cf:a0:
                    10:95:59:50:ea:f9:d5:97:10:40:02:65:8d:4c:10:
                    1f:15:ba:64:40:64:26:c4:06:6d:d8:84:5e:83:2c:
                    9a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:E4:02:F7:6F:A9:8E:FF:97:35:03:6D:D9:16:1E:1B:CF:6B:8C
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36372e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:6e:45:4c:f3:31:ba:0e:b0:2f:8b:af:69:35:90:7b:05:61:
         85:9c:51:3c:b5:24:36:f9:c3:1f:52:78:29:75:6b:d1:f1:e5:
         c9:6d:49:d2:92:59:44:47:00:36:be:a3:a3:8f:20:60:cb:67:
         fb:af:e5:73:ee:c7:6f:06:4b:d6:63:b3:1f:02:d9:ee:19:60:
         12:13:42:90:95:0a:7c:eb:03:b6:96:8d:04:a1:bc:18:6c:ef:
         b1:0b:0c:a5:f3:ac:a1:d7:bf:45:ed:88:2e:b8:42:f3:d1:b0:
         88:d3:2d:c9:d3:e1:9a:23:14:85:79:65:d7:78:2c:5f:28:d7:
         06:c9:7f:20:da:c0:75:af:da:fa:b7:37:36:e5:4c:08:02:aa:
         ce:16:40:48:2f:94:ef:60:4c:56:04:18:a3:df:a0:23:fa:59:
         08:c7:7e:c0:6e:db:1c:5b:92:39:79:1f:1a:da:b2:3c:c4:bc:
         28:06:59:f6:45:6f:b8:7a:4f:81:c7:d6:5e:7b:01:4a:2c:be:
         8b:0d:10:7d:8a:2f:63:bc:10:59:4e:1f:19:3e:0c:56:2a:b3:
         bd:71:aa:9e:02:2e:bd:c2:6c:0f:c4:d8:33:4a:f3:61:e9:ce:
         d9:04:08:8a:3e:78:1e:37:99:8b:df:49:95:58:91:b3:35:22:
         04:c4:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org