Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3234203d3e20333938343634.roa
File:                     3139342e3139352e38372e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          soLbAOc1bTa7Uw/TVqPGXmwhjK3hYmALZDCkdDVxrEY=
Subject key identifier:   01:10:78:33:65:4F:6A:6D:A7:E4:AF:88:DB:2C:60:FC:53:84:27:7B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1D9EC0AFEBFE143C03FDB8153243C3D2F2365D4E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3234203d3e20333938343634.roa
Signing time:             Tue 28 Jun 2022 04:40:46 +0000
ROA not before:           Tue 28 Jun 2022 04:35:46 +0000
ROA not after:            Tue 27 Jun 2023 04:40:46 +0000
asID:                     398464
IP address blocks:        194.195.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9e:c0:af:eb:fe:14:3c:03:fd:b8:15:32:43:c3:d2:f2:36:5d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:46 2022 GMT
            Not After : Jun 27 04:40:46 2023 GMT
        Subject: CN=01107833654F6A6DA7E4AF88DB2C60FC5384277B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:f5:48:95:dd:1e:55:f5:13:a4:37:eb:2a:
                    61:da:ea:c3:3f:b3:f5:ee:5f:6d:69:cd:e1:61:64:
                    0f:2f:8e:c0:ea:f1:2a:73:07:48:20:32:a8:ba:67:
                    94:bc:4f:65:25:f5:a3:38:a6:8c:e1:ce:24:02:cf:
                    52:9d:23:ff:06:af:27:92:1f:d8:55:c8:86:22:33:
                    13:c2:52:64:cc:a6:db:ea:bd:d5:fd:05:f0:08:1a:
                    74:6d:36:4c:4d:5e:e1:38:e5:14:1f:83:40:1a:05:
                    d0:05:47:82:15:45:8d:c0:63:01:ed:12:f9:c1:ec:
                    89:c2:f0:b1:dd:b9:14:a3:11:db:ff:3d:44:1c:10:
                    30:ec:97:78:0c:be:d4:8d:f1:dc:79:a6:29:04:0c:
                    da:f2:8b:a3:ef:39:63:0c:ec:c4:d7:47:73:e6:e0:
                    79:2a:e7:32:44:f4:8d:ee:b4:93:61:94:90:87:01:
                    2e:ad:f6:13:34:b4:d7:69:20:21:ae:c3:93:95:0e:
                    37:ed:70:93:1a:75:63:ec:6a:b5:81:c1:e4:4f:72:
                    c5:39:aa:40:b0:45:f8:d7:e0:94:8a:5a:32:d8:00:
                    b6:a7:d6:3e:e9:d6:77:cc:b4:dd:47:f6:13:ef:5a:
                    b0:6e:cd:bc:a3:9c:3f:f7:d6:93:70:1e:43:7f:51:
                    be:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:10:78:33:65:4F:6A:6D:A7:E4:AF:88:DB:2C:60:FC:53:84:27:7B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ec:c6:a8:49:f1:63:9d:8a:63:d9:a1:2e:ec:1d:17:75:3f:
         43:d8:6a:fa:25:12:73:1b:69:bb:fe:10:b2:7a:a5:cb:1b:69:
         a3:b4:84:2f:e1:b3:0b:04:f6:4b:93:e7:5a:ed:95:8f:a8:b2:
         36:39:ad:57:29:51:ba:39:59:c2:36:aa:9f:a7:ce:e8:71:ea:
         50:f0:e8:e5:ae:ed:82:ef:48:13:33:f1:0e:bf:02:41:57:bf:
         65:8b:9f:d0:16:e2:15:d4:50:a4:74:be:de:e9:6a:08:a9:74:
         8f:95:e8:93:e7:9f:4d:19:c5:19:f4:89:b8:91:38:db:f0:4b:
         66:04:45:c6:93:31:21:c8:6f:a4:cc:2f:19:ba:d8:f2:68:58:
         3c:41:f7:64:c9:a6:95:bb:bb:78:df:1d:dc:11:9b:b4:34:7e:
         57:fd:dd:f2:ba:0e:db:72:2a:c7:34:c1:22:d3:f1:06:9c:f4:
         ef:06:bd:55:68:35:0d:97:98:1b:14:cf:30:e4:db:c3:66:0b:
         96:2c:cf:d6:7a:01:d4:2d:22:7c:0a:7a:36:3c:20:65:2f:a6:
         a0:91:77:22:86:81:09:61:62:2b:e6:2d:9c:64:f7:38:77:c5:
         a1:e3:2b:5a:63:97:56:72:ea:5c:12:61:0d:13:09:da:d6:b1:
         08:7f:09:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org