Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3234203d3e203434363835.roa
File:                     3139342e36302e38362e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          N7Qq33jUVKTmuEuGKHauqMEFlMlhFhG8wvoMAZswSIU=
Subject key identifier:   21:D1:B3:89:06:9B:7E:D7:9A:C3:82:E6:DA:D5:DF:42:30:75:38:39
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       104B0FFC98261CB78964D9C5CF031EBFE7CA8FA6
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3234203d3e203434363835.roa
Signing time:             Fri 27 Nov 2020 15:10:22 +0000
ROA not before:           Fri 27 Nov 2020 15:05:22 +0000
ROA not after:            Fri 26 Nov 2021 15:10:22 +0000
asID:                     44685
IP address blocks:        194.60.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4b:0f:fc:98:26:1c:b7:89:64:d9:c5:cf:03:1e:bf:e7:ca:8f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:22 2020 GMT
            Not After : Nov 26 15:10:22 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:7e:02:b6:c6:43:c5:5c:ea:5f:16:e9:a9:
                    f0:66:43:2e:f8:cf:0e:2c:a4:07:f6:f0:b9:ae:8f:
                    5c:16:13:4b:74:80:c9:5e:72:ff:f3:78:d2:2a:36:
                    44:a9:20:f0:75:d5:e9:56:22:c7:d6:64:ac:8d:1d:
                    4b:d5:a7:cc:7a:51:2a:1a:13:86:7d:f5:61:b3:61:
                    11:c3:5a:9a:f0:dd:b2:0a:29:09:c1:68:32:50:66:
                    81:8b:11:8f:18:1b:84:24:8d:76:7e:4a:ba:65:36:
                    4b:bf:b4:e2:82:28:5d:0d:f2:ec:52:73:9f:26:18:
                    d7:bd:3e:fe:7c:17:28:f9:5c:f9:bc:4b:9d:bd:53:
                    1f:92:de:b1:6f:70:56:6c:6c:02:5f:23:1b:76:68:
                    66:ac:84:b8:cd:92:a4:9c:cd:37:cc:ee:cd:2a:c2:
                    5e:7d:a2:c6:32:f7:00:7e:de:4e:0e:6a:7a:7a:4d:
                    7f:6d:84:29:7f:38:84:d3:37:0c:35:3f:d3:d5:bb:
                    e1:43:40:d5:de:dc:47:1a:42:b6:2f:8f:8e:a3:fc:
                    6b:5f:a5:7d:e6:8f:26:3c:84:66:b6:02:dc:9f:e2:
                    44:fe:50:11:76:68:9e:3d:4b:2e:5f:5b:43:aa:10:
                    af:b4:bc:19:d7:dd:57:b8:5d:ca:f5:87:36:bd:1b:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D1:B3:89:06:9B:7E:D7:9A:C3:82:E6:DA:D5:DF:42:30:75:38:39
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:89:59:ba:b1:31:eb:35:2c:09:1b:98:f6:4d:0b:31:8f:17:
         0c:07:df:a0:16:a6:87:c5:fb:d0:c6:39:69:23:5a:2b:39:fd:
         b0:ca:66:7a:05:c7:81:3f:74:56:cd:2e:43:bb:09:18:39:85:
         c3:13:16:83:d9:de:ee:84:1e:46:cb:7a:b7:b3:c5:d1:0e:a6:
         7d:26:ff:85:8b:d1:3c:9e:9b:c9:79:b6:f8:de:e4:d7:9b:36:
         7a:a8:51:c0:23:ef:ff:32:c2:b2:25:70:01:28:44:c4:6d:4c:
         bc:bc:3c:67:6f:72:ee:9e:cc:5d:81:ff:0b:08:45:d9:d0:24:
         c3:16:3e:d4:2e:eb:35:9a:f8:15:d8:97:42:96:34:19:8b:0c:
         9e:c3:02:5c:99:c7:3c:b1:95:4d:15:db:21:79:d7:b8:f9:7f:
         0e:59:12:4f:00:48:ac:a7:99:f6:f1:9f:a3:63:88:28:4d:f9:
         64:c1:1e:f3:5f:0c:16:c2:63:72:1e:7b:99:b5:84:80:68:0b:
         8d:aa:06:b7:61:e0:ed:2d:84:b1:b7:ce:0e:0d:29:b6:d3:2c:
         0c:b8:ee:a3:26:87:92:21:7a:63:ef:31:6e:b5:08:fd:6b:0e:
         ae:8b:3f:8c:7a:fa:37:43:7c:dc:a1:77:11:d3:72:2f:6d:1d:
         5f:f3:ad:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org