Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3234203d3e203631333137.roa
File:                     3139342e36302e38362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          H0tWbyUnsaqWDOR8/A+Ql2pXFHQecZ/iw4tT+bDc7wY=
Subject key identifier:   3C:2E:EC:20:86:AB:6B:1C:46:30:AE:08:52:A4:90:36:CF:BE:59:D5
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       25270042C602AF6B36EEC86559A09B6A7C959240
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:21 +0000
ROA not before:           Fri 27 Nov 2020 15:05:21 +0000
ROA not after:            Fri 26 Nov 2021 15:10:21 +0000
asID:                     61317
IP address blocks:        194.60.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:27:00:42:c6:02:af:6b:36:ee:c8:65:59:a0:9b:6a:7c:95:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:21 2020 GMT
            Not After : Nov 26 15:10:21 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fc:d2:4b:a4:4b:a5:79:63:c3:df:0d:4c:a0:
                    f4:be:55:f1:91:28:7c:8d:38:89:b4:81:9d:cd:04:
                    e6:58:8b:38:cd:d2:60:74:87:41:3f:13:25:a0:28:
                    12:12:7c:dc:af:cf:3e:86:fd:01:89:aa:11:df:86:
                    88:f1:9b:d4:97:1e:be:c0:98:ca:b5:ed:eb:04:16:
                    cf:48:b2:33:5d:5a:e1:30:a3:8d:02:54:a2:0a:42:
                    b3:6e:6c:cf:1a:6f:72:4a:1e:e9:05:b0:21:98:d4:
                    c9:e0:75:0e:2c:10:97:fd:8e:86:d0:2b:81:58:1d:
                    08:c4:12:8d:b9:cc:81:8b:8a:46:ae:ff:6a:8f:4d:
                    ef:6b:9a:2d:8d:1c:0f:82:23:a7:79:d0:6a:dd:c3:
                    18:92:b1:57:4f:e1:47:d3:7d:e3:20:9b:93:af:da:
                    7f:0a:10:c1:0e:2d:0a:ba:8a:51:0e:db:48:bf:ce:
                    2e:b8:e6:6e:9a:ea:b6:72:c5:0c:ed:c5:ab:1c:bf:
                    96:64:1d:25:88:07:ee:88:ea:7d:71:57:a9:f8:20:
                    b3:1f:02:7f:f5:22:83:d0:87:f5:eb:ad:98:29:de:
                    a1:2f:68:0a:e3:ea:09:1e:e4:d7:47:ca:01:2a:29:
                    2f:7a:ab:23:5a:3a:87:6b:bb:e6:dd:66:8f:a9:1a:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2E:EC:20:86:AB:6B:1C:46:30:AE:08:52:A4:90:36:CF:BE:59:D5
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:10:2a:fa:43:d2:43:0e:0b:dd:12:4a:d3:5f:a5:8d:47:4f:
         4f:91:9f:6b:f0:78:ee:a0:0e:43:a6:53:c8:0c:44:2f:9c:48:
         86:ce:be:b3:b3:5e:f3:22:09:9d:e1:b4:df:ed:a4:c1:a2:44:
         5c:ba:cb:33:12:19:c9:5d:3a:6a:af:87:69:13:d1:51:1d:29:
         4a:da:a8:94:67:6d:06:d2:be:15:7d:b5:28:b3:6b:0c:60:bc:
         83:7f:17:82:e0:ca:bb:b1:6d:c0:fb:7d:52:02:e1:41:59:4f:
         33:06:da:e7:33:d5:90:f8:89:08:9a:f9:b7:6e:3f:c3:f3:a5:
         ef:5c:da:9a:c0:dc:7e:5d:24:20:05:09:ff:a6:4d:1e:e0:17:
         5b:ca:12:59:b5:ff:e6:b0:00:23:9b:57:7e:2f:e9:4d:b1:06:
         45:2d:37:44:d2:91:6d:16:37:64:76:96:43:06:bb:68:d5:51:
         50:c3:f5:67:45:13:de:ee:c8:06:8b:96:11:c3:42:07:e5:1f:
         6e:b5:e4:2b:ad:e2:cc:a8:81:82:6c:d2:e2:85:63:9a:f6:94:
         7a:fa:08:68:36:a8:4c:d1:64:2f:c6:90:8e:1e:83:af:c2:d6:
         aa:ae:50:81:78:3d:6c:b4:53:ae:19:a1:3a:c4:de:77:70:a0:
         8f:9b:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org