Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/164/3139332e3136302e3131382e302f32342d3234203d3e203232373733.roa
File:                     3139332e3136302e3131382e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          7x1Yi+7F/VFLLOqrv1NEwNBwdjNjr6pdBE2vyx7Tnyc=
Subject key identifier:   49:3B:46:47:22:21:48:12:F5:A5:B3:EF:93:F0:55:DE:6F:09:64:80
Certificate issuer:       /CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
Certificate serial:       47B792C2CAA83D940C0E794D9D38F38C16FD0A70
Authority key identifier: 7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/164/3139332e3136302e3131382e302f32342d3234203d3e203232373733.roa
Signing time:             Tue 28 Jun 2022 04:40:19 +0000
ROA not before:           Tue 28 Jun 2022 04:35:19 +0000
ROA not after:            Tue 27 Jun 2023 04:40:19 +0000
asID:                     22773
IP address blocks:        193.160.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b7:92:c2:ca:a8:3d:94:0c:0e:79:4d:9d:38:f3:8c:16:fd:0a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
        Validity
            Not Before: Jun 28 04:35:19 2022 GMT
            Not After : Jun 27 04:40:19 2023 GMT
        Subject: CN=493B464722214812F5A5B3EF93F055DE6F096480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:46:93:8e:91:a3:60:1b:92:68:6a:86:17:
                    df:b7:c1:20:ed:1d:1b:d9:9b:69:48:66:f4:f4:dc:
                    28:c6:16:14:ec:ae:49:a8:17:16:c5:40:46:32:3e:
                    55:9f:71:d7:97:17:85:67:92:df:92:67:3e:18:00:
                    19:9e:3a:90:94:ba:be:07:67:ec:cd:69:52:bd:45:
                    3e:80:0d:a2:82:1c:e1:8f:f3:87:dd:cc:4d:ff:cc:
                    5a:ce:e1:b0:cc:ba:5c:38:57:8d:87:9f:3a:6d:3d:
                    e0:18:26:6c:82:16:7d:9c:c2:39:fa:7f:d3:91:35:
                    93:04:fe:1f:e1:e8:e0:f1:45:67:4b:2f:05:9c:92:
                    10:37:03:ae:50:b8:7c:f3:cc:4f:09:7b:b4:42:85:
                    06:8a:ac:ec:19:e3:95:6f:af:9f:8b:d9:8e:24:ab:
                    1a:fd:6c:ef:75:41:fa:61:70:ef:82:3f:04:30:77:
                    e4:39:de:60:dd:ba:fd:92:05:26:29:a8:01:34:ec:
                    ce:a3:a3:9c:aa:44:05:85:f7:46:84:14:82:b1:9d:
                    f7:9c:48:ef:9b:9c:57:38:16:89:96:ed:21:a1:e9:
                    16:4b:9d:4f:e0:f7:d6:87:39:16:f8:c3:8e:94:d3:
                    6a:0e:a6:b5:13:28:e1:28:8c:12:e3:14:98:a0:0c:
                    bc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:46:47:22:21:48:12:F5:A5:B3:EF:93:F0:55:DE:6F:09:64:80
            X509v3 Authority Key Identifier:
                keyid:7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/7EBD1421D6EE46B714647FB7D198AE4601B63729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/3139332e3136302e3131382e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:03:dd:c8:67:29:4c:97:47:35:51:7f:a7:67:32:b2:7c:ff:
         df:c5:f3:8d:81:34:51:59:66:c3:f7:41:14:70:a1:6e:f0:3b:
         90:f8:25:0e:63:02:95:b4:7a:91:b2:f0:01:6b:44:64:b6:14:
         02:2f:59:58:85:f1:b8:7c:fc:36:f2:7b:61:c7:28:65:80:c8:
         74:cf:4a:d4:6e:7a:87:1f:a1:9c:e1:43:b5:66:db:8a:c4:b7:
         d6:7f:ba:6b:16:ee:6c:ff:55:15:c2:0c:6a:9a:25:12:a7:5f:
         ce:61:27:b0:c6:11:8b:44:1f:b6:01:63:f0:02:0e:43:83:eb:
         57:e4:e7:f6:94:6a:f9:e1:45:da:63:1d:6d:50:f5:b8:39:85:
         a5:98:13:00:09:dd:ea:f7:38:92:f1:9b:59:17:76:bd:45:70:
         f0:36:8d:b7:36:e2:31:b9:ec:a7:21:f8:52:cd:91:27:46:7b:
         b5:2b:5c:31:64:03:b4:74:fa:83:dd:14:98:d6:72:23:5d:df:
         29:19:46:bf:ac:f9:d3:99:d7:45:59:cb:35:fe:1b:40:d2:37:
         94:16:a7:2f:8b:3a:27:8f:5d:ae:44:0f:64:14:0a:81:65:ad:
         9e:07:e2:f1:9b:99:e6:85:da:32:19:5a:38:88:12:0b:99:b0:
         07:2a:35:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:46 2023 by rpki-client on console-fra.rpki-client.org