Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3234203d3e20333938343634.roa
File:                     3138352e3230382e3230372e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          1uPc7S2JR5I3j4UMHHb+cTpJpdpAIaI599uKcMirzoo=
Subject key identifier:   0B:3C:2A:76:34:90:0E:F3:3A:A6:96:EE:36:38:A0:A2:3A:61:D0:36
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7973CC0D4D0C44AA58A5712030DACECDFFFA13DE
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3234203d3e20333938343634.roa
Signing time:             Tue 28 Jun 2022 04:40:51 +0000
ROA not before:           Tue 28 Jun 2022 04:35:51 +0000
ROA not after:            Tue 27 Jun 2023 04:40:51 +0000
asID:                     398464
IP address blocks:        185.208.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:73:cc:0d:4d:0c:44:aa:58:a5:71:20:30:da:ce:cd:ff:fa:13:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:51 2022 GMT
            Not After : Jun 27 04:40:51 2023 GMT
        Subject: CN=0B3C2A7634900EF33AA696EE3638A0A23A61D036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:93:bc:13:57:0e:15:8c:f8:20:9c:f1:58:27:
                    52:49:4e:76:41:59:ef:36:ee:73:c7:8b:0d:1a:06:
                    a5:2a:05:5c:44:f2:8f:c6:b0:de:02:94:e9:4c:27:
                    1c:32:10:93:7b:66:7e:98:8f:ce:4b:93:04:7f:12:
                    10:71:e1:3f:0d:14:ad:ca:3b:a1:77:eb:71:57:f0:
                    76:be:88:82:95:75:8e:7d:12:2d:c8:75:20:ec:5c:
                    c4:d8:73:48:fe:8b:9a:e5:0f:2e:e5:f5:ad:ae:4d:
                    b5:9a:97:44:4e:1a:1a:5e:28:7c:7d:12:6c:04:0c:
                    d0:b9:b5:86:2b:73:4e:e2:4b:6e:ef:f4:9e:da:d4:
                    a2:17:19:92:a5:60:14:11:d9:6e:89:1d:bd:25:c7:
                    b8:51:74:32:a0:7b:5e:0a:3f:97:09:6c:7e:07:c5:
                    18:01:a9:71:30:cf:0f:e0:5f:a6:cb:dc:02:13:1d:
                    5d:1a:a2:e7:13:02:84:bd:9d:05:1e:bc:e4:f7:c2:
                    25:9f:fa:28:98:df:ca:aa:dc:4a:ac:53:4f:ca:49:
                    60:dc:94:ee:30:2e:62:45:1b:55:11:06:e8:e2:74:
                    d8:50:3f:f4:d4:c5:98:53:37:92:a0:ef:3a:c6:a7:
                    ee:bd:c4:0c:dd:c7:b6:d6:71:c5:e9:4a:e2:95:85:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3C:2A:76:34:90:0E:F3:3A:A6:96:EE:36:38:A0:A2:3A:61:D0:36
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:87:80:56:42:9d:f5:90:82:aa:89:22:d1:94:3e:e4:15:ef:
         fc:1f:5a:9a:86:f5:36:18:06:2c:9b:58:25:c9:c0:65:61:92:
         33:3f:0f:81:36:36:e9:b7:1a:32:cd:f3:3b:ce:c6:3d:fe:36:
         51:3a:de:89:98:ae:f0:a9:8f:72:d2:5b:05:1b:9a:7a:99:1b:
         ee:29:ee:14:35:ce:5c:1c:04:a8:41:78:98:56:6f:f2:61:93:
         94:0e:4a:1a:c4:f9:1e:32:3c:2b:b5:0a:50:46:76:eb:66:ae:
         55:fc:e2:5b:9f:f4:7d:9b:bc:95:50:2a:25:ca:7c:3f:42:7a:
         fb:68:a2:a3:39:95:9f:e8:55:7e:cb:58:5c:09:ec:21:3a:e1:
         58:0a:06:46:23:d4:88:a3:f5:59:57:df:84:04:29:47:4d:56:
         33:53:11:2d:d9:06:ae:7a:b8:db:f1:f9:8e:83:92:ac:90:c5:
         d9:ca:f2:7e:03:c8:a4:51:60:5f:a0:a4:c0:7c:ea:a6:76:90:
         68:7e:07:6e:4a:1f:80:47:95:f2:03:c7:fa:ed:7f:3d:84:57:
         02:e3:85:71:80:77:45:c4:ef:46:65:44:96:0e:69:5f:30:5f:
         75:90:0c:41:ce:09:d2:ad:af:d4:03:cc:47:ea:08:12:b9:4d:
         1d:b0:e5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org