Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e2033333536.roa
File:                     3138352e3233302e3133372e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          GvPS9o/r2OJkPO2ygVRz4nPXlca5USOT7w5VZctNum4=
Subject key identifier:   0E:47:37:FA:C0:99:0F:98:3C:22:1C:BD:1D:61:11:BC:60:0F:B3:D1
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       65CBC2DC397078296AD1BF5D219927024206EAF2
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e2033333536.roa
Signing time:             Sat 22 Oct 2022 04:34:32 +0000
ROA not before:           Sat 22 Oct 2022 04:29:32 +0000
ROA not after:            Sat 21 Oct 2023 04:34:32 +0000
asID:                     3356
IP address blocks:        185.230.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cb:c2:dc:39:70:78:29:6a:d1:bf:5d:21:99:27:02:42:06:ea:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:32 2022 GMT
            Not After : Oct 21 04:34:32 2023 GMT
        Subject: CN=0E4737FAC0990F983C221CBD1D6111BC600FB3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ed:f5:cd:b5:26:5a:a4:4e:4c:88:04:d7:59:
                    73:f4:5f:5b:93:13:4b:5f:df:d8:b9:5c:a5:6c:7c:
                    4a:ec:9d:93:b9:f5:6d:e5:38:44:3a:59:96:a2:fb:
                    6c:76:b3:ac:60:4c:61:f8:13:65:f4:46:c7:33:36:
                    8d:9e:01:7f:77:7c:b3:cc:92:a2:7c:7a:1f:f1:e4:
                    f0:c1:0f:7c:73:b6:13:fd:18:ac:25:63:c2:e1:0c:
                    3a:4b:9d:82:3c:c4:8f:a9:7e:41:cf:da:59:0b:7f:
                    be:3f:3b:76:c8:4c:8d:e6:64:a9:52:83:3a:f8:9b:
                    d7:13:8e:57:eb:65:c7:67:b9:7f:bf:a5:61:b7:d9:
                    d3:9b:85:dd:2f:b8:1a:f4:19:41:1e:24:ec:52:1b:
                    9f:84:52:5b:a5:87:bd:d3:62:bb:9a:bc:b1:d7:05:
                    a3:97:70:6e:0a:7a:a3:02:ad:88:8c:0b:55:0b:45:
                    89:81:ca:08:5a:7a:0b:ac:3d:39:4e:68:11:9b:40:
                    87:98:0b:a8:ff:93:fa:f1:d4:15:c2:0f:db:f1:82:
                    3e:dc:fb:4f:19:e6:dd:66:d6:f3:9a:31:cf:04:cc:
                    7c:42:b1:07:9f:6c:ab:8d:77:1e:53:85:bb:9b:e1:
                    0e:59:47:9c:b8:ca:b4:a9:09:3e:96:1b:f5:33:9c:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:47:37:FA:C0:99:0F:98:3C:22:1C:BD:1D:61:11:BC:60:0F:B3:D1
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:f0:04:63:30:d6:b7:c0:78:c6:ed:48:62:7e:f2:34:75:
         8e:5e:9f:ec:11:5b:0f:ad:b0:8e:94:c1:e0:84:c8:ad:dd:02:
         86:6d:63:25:0a:82:bb:5c:fe:d0:90:29:60:e5:cb:7a:89:6c:
         08:96:25:6b:d8:7f:69:c0:51:63:cb:c5:ea:10:7f:88:e5:5a:
         89:e0:7a:37:dc:80:e2:2a:6c:97:0a:03:a9:c1:49:58:1b:7e:
         db:ca:d0:86:1a:4d:25:54:1c:07:5d:9d:f5:4e:6f:57:68:8f:
         77:65:b8:aa:2e:b5:cb:95:72:b6:92:8f:00:51:0c:d5:2f:49:
         d1:7d:6f:9a:46:32:70:4e:e9:be:03:39:e4:37:67:57:7a:71:
         9f:63:a7:58:49:27:12:d5:98:9f:af:0a:ab:97:ee:39:e5:ee:
         90:d0:64:21:be:16:a9:87:c4:1d:fc:d9:bd:bc:36:81:9b:cf:
         90:aa:ed:b9:86:a0:d5:8a:be:6b:7e:5d:02:44:72:5f:4b:57:
         6b:e4:4a:b2:37:f5:0d:63:e1:bf:b6:87:39:ac:cd:77:3b:1d:
         b3:77:3d:25:18:47:e5:04:ac:33:86:eb:ab:17:ad:62:4f:2e:
         83:2b:c5:76:c9:76:d3:48:50:0b:53:2c:6b:f8:14:c6:96:d8:
         7a:9c:a7:7f
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUZcvC3DlweClq0b9dIZknAkIG6vIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MzJaFw0yMzEwMjEwNDM0MzJaMDMxMTAvBgNV
BAMTKDBFNDczN0ZBQzA5OTBGOTgzQzIyMUNCRDFENjExMUJDNjAwRkIzRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT7fXNtSZapE5MiATXWXP0X1uT
E0tf39i5XKVsfErsnZO59W3lOEQ6WZai+2x2s6xgTGH4E2X0RsczNo2eAX93fLPM
kqJ8eh/x5PDBD3xzthP9GKwlY8LhDDpLnYI8xI+pfkHP2lkLf74/O3bITI3mZKlS
gzr4m9cTjlfrZcdnuX+/pWG32dObhd0vuBr0GUEeJOxSG5+EUlulh73TYruavLHX
BaOXcG4KeqMCrYiMC1ULRYmByghaegusPTlOaBGbQIeYC6j/k/rx1BXCD9vxgj7c
+08Z5t1m1vOaMc8EzHxCsQefbKuNdx5Thbub4Q5ZR5y4yrSpCT6WG/UznPmjAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUDkc3+sCZD5g8Ihy9HWERvGAPs9EwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMyMzMzMDJlMzEzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzMzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC55okwDQYJKoZIhvcNAQELBQADggEBAJpS8ARj
MNa3wHjG7UhifvI0dY5en+wRWw+tsI6UweCEyK3dAoZtYyUKgrtc/tCQKWDly3qJ
bAiWJWvYf2nAUWPLxeoQf4jlWongejfcgOIqbJcKA6nBSVgbftvK0IYaTSVUHAdd
nfVOb1doj3dluKoutcuVcraSjwBRDNUvSdF9b5pGMnBO6b4DOeQ3Z1d6cZ9jp1hJ
JxLVmJ+vCquX7jnl7pDQZCG+FqmHxB382b28NoGbz5Cq7bmGoNWKvmt+XQJEcl9L
V2vkSrI39Q1j4b+2hzmszXc7HbN3PSUYR+UErDOG66sXrWJPLoMrxXbJdtNIUAtT
LGv4FMaW2Hqcp38=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org