Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31342e302f32342d3234203d3e20323132323331.roa
File:                     3138382e3131362e31342e302f32342d3234203d3e20323132323331.roa (raw, json)
Hash identifier:          s6D0YStmpqQDzTFK4GZVqhpHYXpf9zI+MoUWGY5XcHc=
Subject key identifier:   97:37:A0:FE:FC:13:5A:34:3D:76:D7:65:6E:80:36:EB:1E:94:D5:CB
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       32E1079E2EDED54129A3F59583293D89496DF054
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31342e302f32342d3234203d3e20323132323331.roa
Signing time:             Tue 28 Jun 2022 04:40:34 +0000
ROA not before:           Tue 28 Jun 2022 04:35:34 +0000
ROA not after:            Tue 27 Jun 2023 04:40:34 +0000
asID:                     212231
IP address blocks:        188.116.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e1:07:9e:2e:de:d5:41:29:a3:f5:95:83:29:3d:89:49:6d:f0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:34 2022 GMT
            Not After : Jun 27 04:40:34 2023 GMT
        Subject: CN=9737A0FEFC135A343D76D7656E8036EB1E94D5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:f0:28:ee:25:4e:0e:51:8a:8e:36:c7:c4:
                    79:ed:48:65:71:fa:c1:08:3f:ea:c5:8a:40:d1:71:
                    cb:29:53:99:36:31:72:9a:51:f1:d3:a9:a8:ba:49:
                    8b:66:0c:b8:ff:74:18:c8:e3:d7:9e:2b:bb:59:31:
                    6d:ca:a1:79:7d:53:f5:4c:b6:d0:b7:3f:3e:64:26:
                    bb:ef:bd:d6:00:ce:1b:d5:df:aa:b5:93:74:71:05:
                    4b:81:6a:d3:71:39:01:b0:f1:86:55:32:45:f9:9c:
                    f4:47:23:cd:c1:fe:26:5a:33:5b:95:6c:1a:49:6f:
                    38:3a:0a:de:45:00:23:35:94:09:2d:70:8f:78:b4:
                    fe:24:86:a2:ea:af:3c:5b:14:21:58:81:f5:6e:62:
                    a5:9d:fa:b6:74:87:52:ad:a3:c6:1b:a8:fb:ee:5b:
                    69:88:a4:b0:88:c3:e7:97:ae:b9:1e:ef:44:26:b3:
                    ce:d7:b1:79:35:c7:87:a4:f9:b9:1a:95:65:92:dc:
                    81:55:dc:23:b5:6b:06:40:2b:c5:c9:27:71:f8:79:
                    e5:0f:b5:a6:ef:87:80:f3:a2:20:55:18:09:df:9a:
                    f4:aa:48:9f:d8:3b:c7:0a:ba:16:c4:98:9e:35:15:
                    39:78:f9:f2:1f:cf:2a:1d:a4:15:df:94:7d:ff:32:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:37:A0:FE:FC:13:5A:34:3D:76:D7:65:6E:80:36:EB:1E:94:D5:CB
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31342e302f32342d3234203d3e20323132323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.116.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:41:7a:c3:b0:5d:da:68:a8:6c:5a:eb:99:58:f8:b6:01:29:
         34:2e:6b:62:ee:62:2e:6d:e1:ba:79:16:39:6e:3e:d4:2f:37:
         e5:b0:6a:31:e6:be:3f:66:f6:0e:15:7e:b1:12:bb:ef:94:a6:
         c5:b7:4b:72:15:11:7c:fd:ea:45:86:4f:cb:ae:f2:01:36:f5:
         f8:c8:e4:9c:de:1f:02:db:89:dc:a7:ce:0f:49:24:8a:38:04:
         4b:30:26:4d:76:b3:f2:8f:15:5c:cb:26:67:73:cc:54:09:87:
         3b:fc:1e:2e:9f:0e:ab:77:15:3b:87:aa:47:b8:9e:e5:2b:52:
         ae:e1:05:d0:6f:ee:a0:6a:59:84:a3:90:30:d7:5f:21:da:d8:
         f7:ab:99:f5:1d:3b:25:a0:53:2f:24:40:b0:b1:a3:8e:ae:ba:
         ad:b3:f5:3a:61:61:69:c5:59:f3:b3:6b:da:0c:05:a1:59:79:
         b5:79:90:45:44:d0:7b:4f:a7:fa:ae:9d:77:aa:ed:01:9a:d8:
         f7:31:0f:1a:ce:18:d6:82:72:3c:b9:19:50:0a:6d:e0:6f:77:
         c4:64:5c:c4:b1:f4:77:5d:30:82:f9:3e:51:fb:73:1d:cf:3b:
         db:d4:8d:a8:1e:44:25:71:f8:f8:84:4d:c2:bc:26:ff:d0:1b:
         04:66:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org