Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e2031323339.roa
File:                     3138352e3233302e3133372e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          /Bl2HQMlOU8JgRZMwk7531cQJb5n/0CZCXvLtkg/0hI=
Subject key identifier:   8B:A8:E1:73:DF:78:A2:83:A3:20:90:89:79:26:70:90:D3:96:F1:9E
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       58635FF73508547C9C02623DD9003246495795B7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e2031323339.roa
Signing time:             Sat 22 Oct 2022 04:34:10 +0000
ROA not before:           Sat 22 Oct 2022 04:29:10 +0000
ROA not after:            Sat 21 Oct 2023 04:34:10 +0000
asID:                     1239
IP address blocks:        185.230.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:63:5f:f7:35:08:54:7c:9c:02:62:3d:d9:00:32:46:49:57:95:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:10 2022 GMT
            Not After : Oct 21 04:34:10 2023 GMT
        Subject: CN=8BA8E173DF78A283A320908979267090D396F19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:a1:c6:c3:17:ef:11:d0:be:75:84:c5:9d:
                    93:82:11:21:b4:1d:d2:dd:d3:8a:fc:17:29:0f:1a:
                    0d:cd:34:66:44:6a:50:25:48:93:96:42:e2:90:22:
                    2a:3b:10:35:30:e8:98:73:9f:c4:94:3b:b1:6b:c8:
                    5c:7c:80:da:7b:a8:c5:5c:4d:87:ea:3f:25:72:19:
                    66:be:32:c8:35:64:99:4e:cc:45:f5:c9:59:2a:45:
                    7d:38:8d:91:59:88:ef:6e:99:0d:b9:18:d9:fe:84:
                    6d:20:a5:c2:50:5d:c3:d5:42:1a:61:39:e6:22:78:
                    7a:ad:d4:28:5f:c1:65:58:88:b3:58:be:c9:75:5b:
                    ff:e0:55:42:48:60:bf:42:bb:e2:88:de:2e:fd:ab:
                    b9:37:fd:a2:a2:42:b3:a7:ea:ef:f2:1e:86:85:a3:
                    2b:11:82:23:cb:21:f5:65:e2:06:f5:7e:b1:f4:30:
                    66:57:d7:65:f9:a1:7f:c6:86:44:f7:0e:83:58:98:
                    45:a9:30:22:55:ce:22:c8:7a:e8:10:c1:a3:51:f0:
                    68:a5:7a:9c:27:70:24:8d:0a:a7:8b:b9:c0:05:81:
                    b0:26:d9:76:c0:6b:6e:ab:44:cd:48:93:f3:69:1a:
                    0a:c7:e3:b9:3d:40:f1:87:40:3b:c1:79:0a:bb:92:
                    1b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A8:E1:73:DF:78:A2:83:A3:20:90:89:79:26:70:90:D3:96:F1:9E
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:86:e5:12:6a:63:bb:34:f7:78:35:6d:64:5c:d8:03:64:b4:
         b5:d0:9f:ac:1b:2c:38:88:70:8f:a4:d0:2a:58:fc:51:ab:fa:
         67:81:62:8f:19:42:b4:f6:21:da:de:6e:27:5e:0c:95:ae:db:
         14:00:10:c9:08:e7:66:5d:bb:a2:37:77:5f:e8:21:25:86:c7:
         ca:84:64:7e:78:76:7b:f2:1d:25:32:89:ad:45:a1:4f:cf:40:
         9d:3d:66:0a:68:17:89:d1:c8:dd:3a:a3:01:a8:94:3a:51:37:
         f1:6e:d1:0f:32:c2:57:e8:df:17:3d:8e:bc:dc:57:6b:a6:e0:
         ce:24:9e:c0:ac:a3:1f:2b:95:eb:d0:0e:11:51:60:6a:34:1b:
         d6:f2:ff:15:85:36:9f:7e:d8:71:4e:0c:0f:1f:51:21:02:de:
         82:f3:ba:c9:d3:62:cb:8b:47:60:b1:a4:b7:8a:d5:c5:23:a0:
         7a:77:3c:e1:d2:cd:cd:13:91:fc:91:7a:e1:b7:d6:94:4f:7a:
         77:bc:cf:53:47:0a:9b:38:53:42:46:15:ca:0f:6b:78:1b:0f:
         b3:de:b7:c0:20:23:24:90:3b:3e:2e:28:54:56:40:5e:dd:d3:
         1d:09:72:72:a5:d8:53:82:23:bd:9d:09:5d:be:1f:c0:fc:c8:
         3c:b3:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org