Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20333939313339.roa
File:                     3139332e32322e3134342e302f32342d3234203d3e20333939313339.roa (raw, json)
Hash identifier:          JWGQ26AdthsUeNluSBsfX+PafZfXGL2fOhQNp/LEPYw=
Subject key identifier:   44:CF:44:23:FC:92:61:BB:4E:A7:5F:1F:14:61:D0:FE:BD:88:DC:39
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       5EAA8E94B46BE4951BCF60581163DCC7B77A9B9D
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20333939313339.roa
Signing time:             Tue 28 Jun 2022 04:40:57 +0000
ROA not before:           Tue 28 Jun 2022 04:35:57 +0000
ROA not after:            Tue 27 Jun 2023 04:40:57 +0000
asID:                     399139
IP address blocks:        193.22.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:aa:8e:94:b4:6b:e4:95:1b:cf:60:58:11:63:dc:c7:b7:7a:9b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Jun 28 04:35:57 2022 GMT
            Not After : Jun 27 04:40:57 2023 GMT
        Subject: CN=44CF4423FC9261BB4EA75F1F1461D0FEBD88DC39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:3f:39:45:48:e5:6b:73:a1:3a:0e:70:fb:
                    6a:07:57:d4:85:7f:17:92:16:a2:2d:bd:30:b0:44:
                    49:17:3d:1b:11:c6:5e:fb:39:10:6b:f3:ad:f5:2b:
                    04:72:ce:9f:fe:77:cc:37:d4:ff:dc:66:29:d0:c4:
                    04:bb:22:4c:ee:8e:8c:27:2a:83:ee:c9:17:f4:23:
                    0c:9b:bf:81:55:c4:e2:2b:a0:7c:3c:d5:c2:44:42:
                    4a:ac:9a:32:17:bd:8f:42:d7:05:c7:00:a5:17:3a:
                    01:18:7d:67:c3:ac:37:ca:96:a4:95:5a:c8:15:a7:
                    be:e9:5a:8a:8f:56:b1:65:82:e3:ec:4f:54:87:c6:
                    50:47:75:1d:f6:ee:6e:4f:63:ed:59:a2:29:2f:6d:
                    8f:42:1b:5d:57:b1:c1:aa:76:28:c7:0f:eb:6f:6b:
                    6b:3e:d9:ec:a0:44:26:11:0b:23:c0:0e:a6:8d:f1:
                    c9:04:a3:e2:a5:f7:a9:6c:48:d1:fd:eb:4f:52:68:
                    bc:d3:0b:4c:d4:b3:76:3f:ea:d7:38:54:f9:45:2e:
                    82:11:88:e6:39:82:e1:99:1f:cc:2c:57:23:32:10:
                    c7:35:f1:cb:ab:43:18:00:25:f2:3b:ae:54:06:7e:
                    85:1b:1a:c0:b0:5d:c8:07:f9:d9:03:24:0e:60:68:
                    1a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CF:44:23:FC:92:61:BB:4E:A7:5F:1F:14:61:D0:FE:BD:88:DC:39
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20333939313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:11:53:26:85:68:60:36:07:2b:3f:91:92:72:d1:0b:7e:2f:
         30:0c:dd:7e:dc:36:84:11:94:06:81:73:be:90:95:06:fd:ab:
         35:c3:bd:20:98:8a:d6:e4:f1:1b:c3:65:0e:6c:9e:00:60:ad:
         57:33:99:fe:3c:6b:43:e1:32:de:2d:4d:95:60:1f:01:69:e1:
         65:93:64:6f:28:1e:06:30:55:13:e4:99:14:f3:01:6d:0b:2e:
         a0:b2:2e:3d:4c:a5:e4:97:34:cb:ad:8e:07:ec:fe:ff:f9:d1:
         31:9f:a2:9e:40:24:d3:4a:48:23:6d:fa:19:2e:88:a1:59:d8:
         c3:e0:e6:ae:08:3e:46:27:7e:02:58:ba:93:67:14:58:73:fc:
         a2:41:13:56:e9:af:5b:ae:6e:b2:7e:e3:4d:48:76:b0:36:3c:
         3d:e6:6e:57:5f:7d:a4:2f:6d:2c:fa:5b:3c:f5:c2:10:dd:53:
         cd:95:9d:e9:fd:55:16:02:97:6d:5b:50:50:ac:35:e9:52:fe:
         9e:92:bb:a8:39:4a:62:2b:5a:88:5c:6c:06:27:0d:b7:ec:f0:
         9d:0d:2d:a2:c7:e0:d7:05:c8:21:bf:fd:9b:7a:81:f1:5f:75:
         56:e4:eb:c7:c2:fc:39:80:92:37:cb:2e:fe:50:46:14:ea:69:
         e2:40:c8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:40 2023 by rpki-client on console-ams.rpki-client.org