Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3135332e3137362e302f32342d3234203d3e20323132323338.roa
File:                     3138352e3135332e3137362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          o5d0KJn4DB7h15mCjFLo4dTY0C8QIcWaSvwYCs5Yhww=
Subject key identifier:   89:26:42:9A:7C:C4:7A:90:96:24:01:8F:95:1F:3B:0D:F5:95:36:17
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       71BDD1933DAA6EC123E6A616D93C39C7F446E89E
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3135332e3137362e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 13 Jan 2023 13:21:57 +0000
ROA not before:           Fri 13 Jan 2023 13:16:57 +0000
ROA not after:            Fri 12 Jan 2024 13:21:57 +0000
asID:                     212238
IP address blocks:        185.153.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bd:d1:93:3d:aa:6e:c1:23:e6:a6:16:d9:3c:39:c7:f4:46:e8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Jan 13 13:16:57 2023 GMT
            Not After : Jan 12 13:21:57 2024 GMT
        Subject: CN=8926429A7CC47A909624018F951F3B0DF5953617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:eb:81:03:c9:f0:39:d0:36:76:6c:f5:77:
                    17:5d:4f:5d:30:a2:44:12:89:35:74:ce:bd:24:0f:
                    6c:35:c0:70:1d:c1:10:af:d6:96:04:c4:f6:0e:69:
                    91:6d:44:62:38:1a:ae:4c:ee:a3:57:77:7b:13:1c:
                    91:71:21:97:d0:42:29:d6:36:27:51:81:35:1a:5c:
                    92:99:85:31:a4:60:42:78:84:20:e8:e9:7f:3f:9f:
                    b9:28:a0:10:57:27:6d:80:47:56:3b:04:a0:3c:31:
                    f5:b5:70:cd:70:35:16:20:b5:41:a7:2d:b3:1c:99:
                    39:6b:76:48:44:8f:82:ae:cd:0d:cb:5d:4f:92:e6:
                    32:9a:06:6d:83:5d:e2:89:f9:a9:d2:64:c1:b8:3e:
                    8e:ab:0c:da:fe:9b:05:99:2a:25:76:34:7e:e0:ef:
                    f9:d3:c2:92:8a:a5:6e:33:4a:f2:6f:93:39:6f:79:
                    45:ab:00:09:8d:0b:48:f8:e5:db:c7:37:9c:bf:4a:
                    da:63:77:c7:9b:9c:b9:90:40:f7:d1:76:58:cf:c6:
                    e7:8a:6b:60:88:6f:99:90:2f:c7:4d:e9:24:77:5d:
                    08:5a:12:03:f4:93:89:65:22:ad:c0:02:d4:73:fe:
                    43:b8:67:99:d0:e2:41:8b:31:97:2d:77:22:47:e6:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:26:42:9A:7C:C4:7A:90:96:24:01:8F:95:1F:3B:0D:F5:95:36:17
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3135332e3137362e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.153.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:df:55:85:e3:4f:bf:2b:97:f2:4d:aa:a7:56:f5:74:ee:2d:
         bb:21:38:d0:65:70:87:5f:ff:19:5c:f4:fd:56:fe:f4:09:45:
         18:8b:8c:63:11:4e:1c:db:c1:38:5e:a2:2f:82:5c:d9:18:82:
         fc:c2:c3:bc:99:3a:7a:29:7a:28:c5:43:32:e9:47:2a:94:3c:
         16:5e:71:e0:94:93:2e:44:c3:dc:31:8c:55:c8:00:ac:ba:ce:
         06:e0:c1:4f:de:18:d1:99:2b:d7:16:f5:dc:07:b2:98:ea:7c:
         f7:c6:cb:fd:00:8f:2b:ec:a7:cb:29:c8:65:ee:52:fd:d0:27:
         a6:db:78:45:84:ae:df:f8:74:2f:f8:d8:22:5e:19:a2:b8:30:
         1b:62:e4:23:7e:db:e9:d4:57:b5:9e:da:c1:d7:9b:20:59:3e:
         56:4c:9e:bf:ae:5d:96:49:75:d0:a7:d5:e1:7b:44:ee:4b:4b:
         d4:cf:a4:d2:06:af:36:23:f3:4a:6a:9f:1f:38:f1:00:85:04:
         6a:e4:1e:7f:17:2e:a0:0f:44:22:d9:00:64:8e:8f:0a:8e:f8:
         e4:e3:ee:a6:e2:86:82:1b:60:a3:5c:db:35:cb:0d:52:3e:83:
         3b:95:3d:d7:cf:6b:9b:46:44:19:92:67:c1:dd:4d:51:85:24:
         2c:43:ab:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:46 2023 by rpki-client on console-fra.rpki-client.org