Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e20333938343634.roa
File:                     3138352e3231352e3136362e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          brkLkuSFzvqAlefb5VOkY32ksSQ63q0DYI9su2ClIc4=
Subject key identifier:   D2:84:58:EB:43:1C:76:EB:10:2B:57:F8:CD:5B:65:BE:0E:60:58:25
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1BA585CA02792A2A425A1F5DF1925F7EF54C2806
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e20333938343634.roa
Signing time:             Tue 28 Jun 2022 04:40:48 +0000
ROA not before:           Tue 28 Jun 2022 04:35:48 +0000
ROA not after:            Tue 27 Jun 2023 04:40:48 +0000
asID:                     398464
IP address blocks:        185.215.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a5:85:ca:02:79:2a:2a:42:5a:1f:5d:f1:92:5f:7e:f5:4c:28:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:48 2022 GMT
            Not After : Jun 27 04:40:48 2023 GMT
        Subject: CN=D28458EB431C76EB102B57F8CD5B65BE0E605825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:91:56:78:98:e4:3f:86:43:7b:d0:77:06:
                    6b:3e:39:4f:f6:4f:c4:b7:17:c7:3a:1e:eb:bf:2c:
                    22:90:af:ec:d2:81:9d:3c:cb:88:b6:28:91:88:c2:
                    0a:13:15:b9:6a:f2:e2:fc:5c:8a:18:b0:f9:7a:96:
                    e4:0e:60:28:bd:ef:b5:1a:61:ee:bc:1f:93:8c:30:
                    56:c4:6f:d6:5b:db:69:bd:c4:2b:c8:3e:fd:c5:e5:
                    74:df:6d:ed:01:aa:4e:d5:59:d9:19:bb:7f:ff:c9:
                    07:67:7f:aa:56:ba:09:6f:f6:39:62:7b:a5:14:c9:
                    77:20:18:7a:b9:a5:f2:fe:cd:1e:91:ed:be:96:2b:
                    b6:51:cb:ff:53:90:ce:d2:aa:9d:92:36:83:e2:44:
                    02:dd:f1:c3:0f:c2:1a:f5:09:f1:19:32:09:23:d1:
                    04:2f:cd:ef:dd:4c:ed:f7:43:2a:73:2f:48:ca:e5:
                    4b:23:b9:10:6a:1c:56:8c:4c:91:33:b8:97:1a:aa:
                    b8:83:be:3e:0d:98:54:3b:0d:47:11:5e:bb:bf:02:
                    14:51:9b:e0:2a:43:04:b5:f0:56:09:f3:e3:25:97:
                    bd:36:23:b3:80:93:20:5f:d3:30:19:19:3d:c6:d7:
                    f4:c9:34:e9:ca:88:a1:ba:0e:4b:f0:2e:16:83:f2:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:84:58:EB:43:1C:76:EB:10:2B:57:F8:CD:5B:65:BE:0E:60:58:25
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d6:00:55:29:8d:94:7b:c1:3e:3b:76:3a:48:5f:04:64:0c:
         6b:b0:1a:32:0c:c7:8d:f9:9a:06:2d:87:9f:f9:5c:dd:15:73:
         69:cc:e2:cd:f1:b3:cf:ae:c0:c7:ad:c1:da:6d:75:ae:08:99:
         34:fd:ad:7b:fc:4b:13:5b:fb:ea:96:f4:d0:22:56:ee:fe:6f:
         73:af:45:3f:87:c6:d0:95:de:4f:34:66:52:8b:e8:72:c6:3b:
         ae:7d:fc:94:97:5e:8e:d2:71:8d:7c:e6:7f:be:0d:d4:a9:9f:
         24:bc:ae:72:6b:7d:e4:56:31:c5:92:ad:38:91:e7:57:b1:a1:
         5f:08:7b:35:fb:45:c5:56:9b:fc:35:58:61:3c:c7:bc:d7:3f:
         e0:b9:fc:4e:dc:86:88:1d:6c:c6:90:42:d4:8a:2f:5f:98:9e:
         ed:39:54:a9:e3:65:42:33:45:4e:7d:55:3f:00:fa:b6:7c:77:
         03:0d:e8:02:9d:88:ba:b7:84:d3:87:ae:43:82:2b:63:b2:21:
         a5:65:eb:73:c1:cd:cd:43:72:de:fe:2b:1f:2f:c6:34:47:31:
         ef:a5:82:17:38:35:3e:40:57:e7:0d:57:03:e0:af:52:87:e6:
         d7:7f:66:d8:ea:fa:96:a8:8c:d9:84:c5:0b:f8:3e:d6:4f:33:
         55:fe:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org