Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa
File:                     3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          +pY+LSFnKtspah583W1cAQ1GJzeZwQBXa194384a344=
Subject key identifier:   98:E1:C8:57:82:58:DD:13:07:FF:43:1C:2D:F9:BE:59:A6:78:B0:54
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       2CB56960468F8BAAD30CCCAFD932F91490E5930E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa
Signing time:             Sat 22 Oct 2022 04:33:15 +0000
ROA not before:           Sat 22 Oct 2022 04:28:15 +0000
ROA not after:            Sat 21 Oct 2023 04:33:15 +0000
asID:                     3356
IP address blocks:        185.187.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b5:69:60:46:8f:8b:aa:d3:0c:cc:af:d9:32:f9:14:90:e5:93:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:15 2022 GMT
            Not After : Oct 21 04:33:15 2023 GMT
        Subject: CN=98E1C8578258DD1307FF431C2DF9BE59A678B054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:99:d2:e0:56:f5:c5:b0:19:35:cb:02:cd:
                    96:e7:ec:23:3e:9d:e6:9f:bd:37:c3:2e:dd:1b:a3:
                    23:d3:74:b6:39:81:6c:bb:e2:28:38:4e:1f:f7:3c:
                    78:cc:fe:17:b6:0a:ba:2f:f2:d3:1d:97:1e:a4:40:
                    c6:5f:7e:f7:1f:da:88:78:0f:79:8e:dc:39:33:c5:
                    d4:ac:e2:05:44:90:43:c2:e5:e8:55:fc:dc:71:c8:
                    7b:6d:fc:5b:61:1a:b1:1d:ab:1d:10:1f:3f:07:54:
                    cd:4f:34:19:9b:e6:d5:c0:e6:b4:b8:74:46:00:e9:
                    d3:a3:2d:39:39:18:b5:77:b8:35:88:bf:f4:e3:25:
                    10:67:fb:1e:57:24:57:08:05:ec:9f:60:9f:03:e1:
                    2c:9e:c6:93:2b:23:a6:7a:f6:fd:28:33:98:f5:5f:
                    7a:19:13:ca:1c:ee:7f:a8:15:70:90:ac:bb:25:13:
                    05:8a:e6:2e:70:8d:77:52:ad:58:59:2b:fa:24:39:
                    56:a2:08:0d:9c:21:89:c8:49:9e:cb:ef:cc:f0:80:
                    8e:69:7d:67:ea:87:80:7c:63:6a:1c:cd:8f:07:ed:
                    a9:7b:6c:c4:b6:4d:cb:6d:8a:95:78:9d:fd:1f:77:
                    3b:98:d7:ee:7b:55:7d:ff:d4:6d:22:ef:a3:f8:6f:
                    6c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E1:C8:57:82:58:DD:13:07:FF:43:1C:2D:F9:BE:59:A6:78:B0:54
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:ff:bf:f2:1b:18:ea:92:d5:04:6e:22:d6:65:83:45:98:
         03:18:ac:31:98:b4:56:09:e6:7d:d4:f8:e5:07:a8:59:d2:b8:
         b6:46:66:ab:e2:a8:0a:02:2a:60:62:42:3a:59:88:11:e8:ee:
         de:f6:9b:1f:9a:b9:43:91:b3:2b:0a:a6:10:14:65:f0:45:ab:
         55:9d:d1:80:82:c4:12:68:90:2a:9f:b2:48:5c:dc:6a:b8:c1:
         0d:12:b9:ed:d8:23:f7:57:ed:c3:2a:95:ac:7f:a0:a3:ae:35:
         28:01:f6:d5:6c:09:c4:08:d0:dc:11:06:d6:9c:3f:29:18:a6:
         85:78:27:ee:0b:d7:f9:ec:91:00:75:74:60:70:64:80:8d:e4:
         0a:c3:4c:09:86:a3:b4:00:68:0a:91:94:4b:35:7a:f8:67:39:
         17:e2:8b:b4:e5:1c:2f:dc:33:d3:37:d6:29:00:35:65:2a:c5:
         8e:da:ea:f0:27:45:57:64:76:98:dc:31:52:25:68:b2:d7:44:
         d4:09:cd:d8:0d:76:1a:a7:8f:8f:70:dc:ae:fb:dd:3e:44:cd:
         cf:eb:f9:ce:47:b3:27:24:94:15:64:71:15:2f:a0:4e:c9:70:
         45:6c:52:27:3c:1f:88:9b:5e:29:9e:09:0a:0a:08:f9:b1:0e:
         cd:e3:85:db
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIULLVpYEaPi6rTDMyv2TL5FJDlkw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTVaFw0yMzEwMjEwNDMzMTVaMDMxMTAvBgNV
BAMTKDk4RTFDODU3ODI1OEREMTMwN0ZGNDMxQzJERjlCRTU5QTY3OEIwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9w5nS4Fb1xbAZNcsCzZbn7CM+
neafvTfDLt0boyPTdLY5gWy74ig4Th/3PHjM/he2Crov8tMdlx6kQMZffvcf2oh4
D3mO3DkzxdSs4gVEkEPC5ehV/NxxyHtt/FthGrEdqx0QHz8HVM1PNBmb5tXA5rS4
dEYA6dOjLTk5GLV3uDWIv/TjJRBn+x5XJFcIBeyfYJ8D4SyexpMrI6Z69v0oM5j1
X3oZE8oc7n+oFXCQrLslEwWK5i5wjXdSrVhZK/okOVaiCA2cIYnISZ7L78zwgI5p
fWfqh4B8Y2oczY8H7al7bMS2TcttipV4nf0fdzuY1+57VX3/1G0i76P4b2wLAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUmOHIV4JY3RMH/0McLfm+WaZ4sFQwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMxMzgzNzJlMzIzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzMzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC5u+owDQYJKoZIhvcNAQELBQADggEBABCm/7/y
GxjqktUEbiLWZYNFmAMYrDGYtFYJ5n3U+OUHqFnSuLZGZqviqAoCKmBiQjpZiBHo
7t72mx+auUORsysKphAUZfBFq1Wd0YCCxBJokCqfskhc3Gq4wQ0Sue3YI/dX7cMq
lax/oKOuNSgB9tVsCcQI0NwRBtacPykYpoV4J+4L1/nskQB1dGBwZICN5ArDTAmG
o7QAaAqRlEs1evhnORfii7TlHC/cM9M31ikANWUqxY7a6vAnRVdkdpjcMVIlaLLX
RNQJzdgNdhqnj49w3K773T5Ezc/r+c5HsycklBVkcRUvoE7JcEVsUic8H4ibXime
CQoKCPmxDs3jhds=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org