Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203631333137.roa
File:                     38302e36352e3230392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          kzlnaLvyq0MckYUFelZfoX7PXO7uppM4GzoEZ5WvO4U=
Subject key identifier:   73:1D:A2:93:DA:12:D6:56:3D:31:D8:AE:6F:FB:3A:8D:D2:82:76:7E
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       2B9E259E9655F434A0F76DC7B85FC9FC4F08101A
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:00 +0000
ROA not before:           Sat 22 Oct 2022 04:29:00 +0000
ROA not after:            Sat 21 Oct 2023 04:34:00 +0000
asID:                     61317
IP address blocks:        80.65.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9e:25:9e:96:55:f4:34:a0:f7:6d:c7:b8:5f:c9:fc:4f:08:10:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:00 2022 GMT
            Not After : Oct 21 04:34:00 2023 GMT
        Subject: CN=731DA293DA12D6563D31D8AE6FFB3A8DD282767E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:f7:9a:e0:83:e9:9c:32:30:41:1b:09:17:
                    38:06:6a:b2:1a:c1:63:0c:60:8b:2e:15:97:0d:45:
                    cc:97:ea:58:1c:a5:8f:46:d5:e4:47:94:2a:a6:c4:
                    5a:b4:44:16:d0:b2:07:4e:e3:f6:59:18:22:5e:d2:
                    1e:a4:60:f3:86:2d:be:f4:fb:78:e4:52:aa:67:ec:
                    bc:c4:4b:a4:f5:8a:05:bb:aa:b6:1c:00:ad:1f:8e:
                    65:d8:8b:3a:5d:21:c0:da:a4:01:87:52:7a:bd:af:
                    52:ab:b7:6f:f4:7d:97:ac:6e:14:dd:f1:af:83:65:
                    f4:00:ae:dc:03:85:c8:d5:74:a8:5e:42:fc:e2:63:
                    7f:70:36:f7:fc:b2:f0:30:b8:5b:d7:37:af:62:b8:
                    23:76:55:f4:f6:41:cb:3a:ac:4b:a1:4e:f9:49:cd:
                    a0:a0:2a:e2:d2:cc:5c:6d:3a:b0:22:6c:ef:c0:0b:
                    44:e2:9f:07:92:ec:3a:fc:dc:89:c4:f8:5a:16:0a:
                    ca:64:d7:73:21:b1:7e:85:6b:9a:d8:9a:18:17:76:
                    67:a3:92:3a:09:a1:84:18:54:8b:26:30:0b:26:07:
                    ab:1c:97:69:40:f9:e7:47:e3:9c:02:e4:6e:ab:79:
                    a9:a7:5d:af:e6:89:b6:d7:9a:85:28:d7:ff:7e:56:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1D:A2:93:DA:12:D6:56:3D:31:D8:AE:6F:FB:3A:8D:D2:82:76:7E
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.65.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:c1:ec:bd:1a:97:59:fb:07:d8:fc:64:1c:eb:8d:48:8c:aa:
         3e:25:55:43:5e:57:b7:f9:1c:e7:f1:76:37:a9:f8:d5:f2:d9:
         78:c0:ef:b7:fd:7c:77:1d:b3:3e:ff:73:cf:84:72:4f:02:73:
         9a:34:cc:c6:58:00:46:30:6e:56:31:8f:f8:11:ec:23:76:6b:
         f5:6c:48:43:de:d7:73:cc:95:58:12:d7:d0:48:1d:04:b1:67:
         e8:d9:8e:5b:04:bc:b4:aa:ae:b1:eb:9d:ae:95:1e:fd:27:4d:
         07:f3:cc:54:d3:dd:9b:a7:d2:e9:28:12:84:50:61:a7:e7:f1:
         ff:66:0c:c5:7e:e9:ea:88:c9:f1:e3:d2:69:2e:1d:77:81:5c:
         e7:f6:37:e1:f9:7c:46:6e:b5:0a:3b:e2:5d:60:d0:19:86:d3:
         72:9a:e3:f9:f7:f9:3b:79:a5:11:29:97:10:29:ae:b7:a1:0f:
         cd:26:92:8e:42:e4:bd:78:81:c7:85:9d:b7:ee:0f:85:a0:06:
         5a:7a:a7:4b:3e:f7:b3:46:cf:8c:3f:5d:c8:f6:e5:e1:c8:66:
         86:65:f9:84:65:e3:67:dd:db:55:61:34:c1:4a:b6:69:1c:56:
         0c:4f:90:19:9b:c7:01:f9:4e:1b:87:c8:de:20:cd:ec:cb:1f:
         27:12:db:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org