Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e32382e302f32342d3332203d3e203531313637.roa
File:                     3139342e36312e32382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          o6WXMWrbGP/kNvHEHNRVW2ez7GcqBwHHuskrQyhmBgk=
Subject key identifier:   C2:05:57:B6:61:6B:5E:04:6C:9A:BD:0B:3B:0D:CC:29:41:52:83:71
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       78FE629E83A4B6735E1EC2E7495BF65C750F75E5
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e32382e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:00 +0000
ROA not before:           Sat 22 Oct 2022 04:29:00 +0000
ROA not after:            Sat 21 Oct 2023 04:34:00 +0000
asID:                     51167
IP address blocks:        194.61.28.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fe:62:9e:83:a4:b6:73:5e:1e:c2:e7:49:5b:f6:5c:75:0f:75:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:00 2022 GMT
            Not After : Oct 21 04:34:00 2023 GMT
        Subject: CN=C20557B6616B5E046C9ABD0B3B0DCC2941528371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:06:91:d4:67:88:fe:b2:7b:3b:1d:09:08:
                    1a:a9:fb:20:3f:44:6c:66:d8:ef:2e:b8:61:2d:44:
                    dc:d1:63:05:d4:20:42:bd:64:b4:ef:01:6f:f0:72:
                    3a:0b:69:9b:98:b8:49:a7:97:5f:21:27:dc:3a:e3:
                    c2:72:e5:76:81:9d:3e:8f:f0:8b:76:56:88:36:1c:
                    8b:f8:fc:83:6b:f1:98:86:5f:ff:e5:91:8b:e3:42:
                    90:a5:4e:db:78:d3:0c:0d:b0:29:5d:7b:6d:3a:14:
                    81:d4:9e:66:ca:d7:11:fb:8b:ae:d1:a6:c3:84:5f:
                    09:57:e9:44:b8:08:69:0f:88:db:b5:40:6f:94:7a:
                    3a:af:12:5f:b0:f1:42:aa:0c:ce:94:51:d0:2f:bf:
                    9d:0d:ce:77:5a:1f:d2:e6:b1:13:62:5d:02:90:e4:
                    c9:c5:fc:cf:f5:ea:cf:87:b1:1b:2f:eb:82:22:b3:
                    17:ab:56:c0:2e:47:40:b2:85:5c:79:cc:0f:7f:f6:
                    90:2d:65:14:7c:ac:3a:3a:b3:76:26:ab:1c:43:b7:
                    c8:31:b6:3a:6b:b9:c2:63:f6:2e:de:18:95:d1:9c:
                    28:b0:31:b7:80:22:37:f8:da:00:52:da:e5:ff:40:
                    42:32:c8:c1:de:68:e3:02:19:98:99:80:fa:84:73:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:05:57:B6:61:6B:5E:04:6C:9A:BD:0B:3B:0D:CC:29:41:52:83:71
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e32382e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.61.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:73:ab:4a:cd:3c:3d:42:2e:ac:10:19:ff:f9:3c:d3:e8:4b:
         5e:1b:83:76:39:8f:47:b0:76:53:c9:c0:fa:33:7e:97:6b:fb:
         c9:15:6c:90:67:d2:b5:5b:1a:b5:29:29:78:77:86:66:bb:5f:
         6d:20:38:bd:4a:91:27:77:6e:db:01:8e:d9:31:1c:ad:dd:9f:
         67:8c:be:cd:81:65:6b:b8:11:dd:a7:8b:0e:13:dc:9b:03:97:
         e7:b1:e3:2c:9d:75:0d:6d:88:e5:03:f5:5f:ff:a8:bd:ac:30:
         f7:d4:bf:92:e2:17:64:1e:c8:be:5c:22:f7:46:9a:07:57:37:
         3a:9a:a6:01:1a:61:c2:81:dd:31:89:78:a7:79:9e:87:20:e2:
         be:a7:81:ae:64:6d:5a:d9:c5:80:7a:61:c5:25:2c:b5:8c:6c:
         1f:ba:56:9d:c7:01:93:96:11:dd:8e:f5:d6:e1:65:6c:a6:dd:
         63:08:8e:5f:61:d2:97:14:ca:12:8a:2b:83:55:ff:cf:6f:cf:
         a2:85:7e:b2:10:37:a7:6d:b0:20:a6:cb:f7:65:65:f5:4a:93:
         78:e0:91:05:36:e9:6d:05:4a:30:38:fe:40:74:75:45:30:33:
         f8:20:c3:fb:7b:fd:85:3f:97:c1:66:82:19:c6:08:81:d5:1a:
         66:51:83:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org