Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e203631333137.roa
File:                     3139342e36302e3230302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          bfoaaGbnv8VTDHiP/quKE/hylaWdNxJoeEkPVRXSDx4=
Subject key identifier:   96:93:19:97:A9:CF:16:79:86:91:A0:55:03:B3:09:D8:26:71:76:B5
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       0BB170D3030973D260AC71CBDF3EBB2CF9211B45
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:41:03 +0000
ROA not before:           Tue 28 Jun 2022 04:36:03 +0000
ROA not after:            Tue 27 Jun 2023 04:41:03 +0000
asID:                     61317
IP address blocks:        194.60.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b1:70:d3:03:09:73:d2:60:ac:71:cb:df:3e:bb:2c:f9:21:1b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jun 28 04:36:03 2022 GMT
            Not After : Jun 27 04:41:03 2023 GMT
        Subject: CN=96931997A9CF16798691A05503B309D8267176B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:87:c9:3f:41:b9:c0:53:e6:a0:32:15:33:
                    bd:69:80:45:0b:5c:da:b6:05:44:04:6d:d1:eb:af:
                    a6:2a:1e:da:1b:1d:6b:a6:48:7a:a0:e6:bf:48:1d:
                    8f:55:80:63:7a:b4:a0:e6:a4:c3:fd:9a:4d:ef:2a:
                    3f:6b:1b:44:58:e1:cf:d6:be:0c:72:bc:fa:4a:a1:
                    9a:9e:0f:6e:22:96:1a:b7:aa:0e:78:a3:b8:77:54:
                    85:71:03:1d:3d:97:30:e9:03:1c:6f:13:11:b0:08:
                    44:2d:b8:29:46:35:c5:39:d2:84:03:e7:e3:c2:db:
                    bc:ba:08:a9:7e:5f:ee:ef:1f:cc:3b:3b:15:c8:28:
                    a9:d4:42:aa:4e:37:fa:72:f3:d5:7b:02:c8:47:4b:
                    53:99:bc:ba:c6:ee:d0:37:ee:30:c0:b6:c8:a7:6f:
                    f4:aa:bd:d5:5f:e7:a5:62:6d:2f:3a:42:db:b8:e0:
                    fd:f7:9c:c1:bc:f0:dd:a5:48:ea:10:ab:e3:8b:80:
                    eb:a0:d1:f8:bc:2f:39:cc:3a:2b:c9:54:f1:70:72:
                    54:2e:81:35:35:6a:ce:e5:d9:b1:70:1f:00:13:1e:
                    f3:29:ee:8f:50:c3:87:be:83:dd:8b:31:ea:a3:d4:
                    8f:61:53:fc:2a:47:4c:3b:e3:1e:2f:01:c0:30:76:
                    92:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:93:19:97:A9:CF:16:79:86:91:A0:55:03:B3:09:D8:26:71:76:B5
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a6:4c:0e:d9:92:ac:52:8d:59:1b:b5:1e:ce:9c:b0:ed:ec:
         22:8e:27:81:4a:15:96:0b:7e:7f:6d:3f:c1:e4:a5:45:41:10:
         15:d4:e7:e8:8f:40:f1:bd:14:38:15:5c:02:38:5d:5f:5a:1c:
         f1:36:f6:35:ca:0b:f4:a9:8a:1e:e2:63:63:4d:3d:9c:60:e4:
         b2:51:df:b5:98:75:f0:5d:38:53:fa:da:4a:c4:bb:18:3c:45:
         23:a2:56:94:5b:c1:73:14:79:99:04:95:9e:bb:34:76:88:bc:
         9a:04:94:f9:58:90:6c:02:53:05:26:fa:e9:c1:df:0a:03:47:
         46:cf:bb:e2:f3:87:16:5a:62:9c:03:73:dc:5c:99:86:f5:6d:
         b6:e9:25:7c:12:3d:2f:7f:bf:73:55:23:e5:0d:73:de:2f:3a:
         d5:2f:f2:b6:22:b9:24:75:ed:b5:9c:3f:e1:98:b3:4e:7c:98:
         bc:25:0c:cc:40:e5:f2:a1:b7:8e:93:6d:fd:d9:19:15:ff:b1:
         c3:c7:a2:75:30:bf:eb:81:ad:37:92:42:4c:8b:9b:d1:6e:7f:
         10:a9:e7:1f:91:33:55:7a:f7:28:dd:24:6f:0c:6e:9f:19:e8:
         f0:79:95:1b:44:2d:17:3f:e2:39:58:df:94:00:14:e4:d8:8d:
         84:2f:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org