Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235302e3231342e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3235302e3231342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          EbDK29OAnf3GpKMEfZdoZnbZ4ThYt7iXePW9LcLSe/A=
Subject key identifier:   1B:1B:93:0E:F2:A2:6C:F9:D5:9C:B4:9F:84:FE:61:7A:DB:21:E1:1D
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       0E78D6EDB728C76E0A6FF352653EA10AF75CCC40
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235302e3231342e302f32342d3234203d3e20313336373837.roa
Signing time:             Wed 07 Dec 2022 21:48:06 +0000
ROA not before:           Wed 07 Dec 2022 21:43:06 +0000
ROA not after:            Wed 06 Dec 2023 21:48:06 +0000
asID:                     136787
IP address blocks:        185.250.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:78:d6:ed:b7:28:c7:6e:0a:6f:f3:52:65:3e:a1:0a:f7:5c:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec  7 21:43:06 2022 GMT
            Not After : Dec  6 21:48:06 2023 GMT
        Subject: CN=1B1B930EF2A26CF9D59CB49F84FE617ADB21E11D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:66:db:71:fe:25:56:f7:ff:b6:f8:6f:88:
                    d6:57:dd:e0:e3:84:ae:cd:41:99:97:b2:f8:59:74:
                    08:51:cc:86:2e:1c:39:6e:09:9f:de:b5:da:d1:8f:
                    ee:6e:52:04:20:dd:8e:be:12:1d:3b:07:0b:ac:58:
                    05:17:60:59:cc:47:96:85:64:09:32:3e:67:0b:64:
                    24:96:6c:a7:79:28:02:34:68:3b:09:5d:43:3c:9b:
                    73:bc:42:98:eb:23:ea:83:2c:2c:78:3c:46:7c:05:
                    6e:50:a8:68:91:83:25:42:7c:35:eb:ab:47:78:2d:
                    9b:8d:86:22:27:b3:7d:0b:7d:03:6b:37:99:be:13:
                    1b:8b:70:ad:be:87:4c:ac:08:bc:57:96:e4:2b:b4:
                    ac:54:74:cc:87:2a:23:81:d7:75:78:b4:47:93:e4:
                    be:80:23:b1:ce:a7:8f:31:0a:f9:89:7a:2b:12:d6:
                    c6:fd:8f:1f:ed:44:90:6c:6e:d7:c6:07:84:5a:d0:
                    72:25:fa:a4:66:e9:c3:28:fc:61:42:f1:76:54:60:
                    a4:8a:c5:c8:18:3f:fe:8d:2a:f0:4a:2d:0d:ee:b3:
                    e4:8d:f7:ae:5f:de:ad:ad:e0:a4:f1:8c:ff:df:66:
                    01:27:81:6c:12:1f:25:f7:31:13:b7:ca:ae:4e:3c:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1B:93:0E:F2:A2:6C:F9:D5:9C:B4:9F:84:FE:61:7A:DB:21:E1:1D
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235302e3231342e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:ff:6b:56:12:8a:8e:dd:02:4e:3b:78:25:22:fd:ce:20:9a:
         dd:4d:24:fe:cb:47:01:d7:55:db:77:08:32:b1:cc:96:d0:71:
         92:20:ae:20:de:db:af:42:5e:1a:80:a2:58:e8:95:87:dc:f0:
         5a:d4:66:27:43:81:78:24:fe:79:89:af:56:10:60:fe:3a:72:
         17:98:32:03:66:ff:7a:55:c0:f0:16:e1:d5:69:75:63:0f:e0:
         91:e8:a1:17:b1:3e:22:da:40:4b:cb:a3:30:8b:8b:9d:08:64:
         9f:b0:f9:69:dc:ba:26:a1:ca:13:ab:3f:93:47:08:a7:ac:08:
         d7:b9:bf:cc:af:dc:53:04:12:b2:23:e3:11:11:b6:0b:09:e1:
         4e:48:9d:d7:0a:4f:d9:78:f4:96:09:bc:36:66:78:75:9d:48:
         6d:a7:4b:21:e9:19:cd:0d:17:01:23:8e:9f:37:f5:6f:e0:65:
         a9:7d:3e:b3:e6:35:e7:ea:4f:92:17:0b:64:b6:75:1c:3d:ec:
         ba:d2:e4:e9:45:8c:ec:e0:05:64:3f:a2:96:c9:8a:0b:21:b5:
         2f:ad:6f:cc:fd:03:42:37:28:0a:0f:3b:e6:37:b7:b0:6b:0b:
         18:19:f4:58:d4:fc:eb:56:08:3c:5b:47:70:d7:11:35:34:4e:
         74:03:d5:f8
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUDnjW7bcox24Kb/NSZT6hCvdczEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEyMDcyMTQzMDZaFw0yMzEyMDYyMTQ4MDZaMDMxMTAvBgNV
BAMTKDFCMUI5MzBFRjJBMjZDRjlENTlDQjQ5Rjg0RkU2MTdBREIyMUUxMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2LWbbcf4lVvf/tvhviNZX3eDj
hK7NQZmXsvhZdAhRzIYuHDluCZ/etdrRj+5uUgQg3Y6+Eh07BwusWAUXYFnMR5aF
ZAkyPmcLZCSWbKd5KAI0aDsJXUM8m3O8QpjrI+qDLCx4PEZ8BW5QqGiRgyVCfDXr
q0d4LZuNhiIns30LfQNrN5m+ExuLcK2+h0ysCLxXluQrtKxUdMyHKiOB13V4tEeT
5L6AI7HOp48xCvmJeisS1sb9jx/tRJBsbtfGB4Ra0HIl+qRm6cMo/GFC8XZUYKSK
xcgYP/6NKvBKLQ3us+SN965f3q2t4KTxjP/fZgEngWwSHyX3MRO3yq5OPDGVAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUGxuTDvKibPnVnLSfhP5hetsh4R0wHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzIvMzEzODM1MmUzMjM1MzAyZTMyMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn61jANBgkqhkiG9w0BAQsFAAOCAQEA
Qf9rVhKKjt0CTjt4JSL9ziCa3U0k/stHAddV23cIMrHMltBxkiCuIN7br0JeGoCi
WOiVh9zwWtRmJ0OBeCT+eYmvVhBg/jpyF5gyA2b/elXA8Bbh1Wl1Yw/gkeihF7E+
ItpAS8ujMIuLnQhkn7D5ady6JqHKE6s/k0cIp6wI17m/zK/cUwQSsiPjERG2Cwnh
Tkid1wpP2Xj0lgm8NmZ4dZ1IbadLIekZzQ0XASOOnzf1b+BlqX0+s+Y15+pPkhcL
ZLZ1HD3sutLk6UWM7OAFZD+ilsmKCyG1L61vzP0DQjcoCg875je3sGsLGBn0WNT8
61YIPFtHcNcRNTROdAPV+A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org