Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa
File:                     3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa (raw, json)
Hash identifier:          yHIOSrziuAu3H0Zg0qzdlzy+7hLhe5I8v5uIdRGgDGQ=
Subject key identifier:   0A:17:C5:4E:2B:06:BF:B8:0F:87:BF:50:82:93:B1:C1:35:07:9A:B8
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       32F7D8088EE5EA60C1A864B59E9564CC5B97A7A6
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa
Signing time:             Sat 22 Oct 2022 04:33:19 +0000
ROA not before:           Sat 22 Oct 2022 04:28:19 +0000
ROA not after:            Sat 21 Oct 2023 04:33:19 +0000
asID:                     399641
IP address blocks:        185.187.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f7:d8:08:8e:e5:ea:60:c1:a8:64:b5:9e:95:64:cc:5b:97:a7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:19 2022 GMT
            Not After : Oct 21 04:33:19 2023 GMT
        Subject: CN=0A17C54E2B06BFB80F87BF508293B1C135079AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3a:e8:ef:19:23:a9:d6:9d:13:0d:9f:04:ca:
                    7c:c9:f9:f3:47:09:f3:b6:07:5e:61:62:96:7e:a8:
                    00:a5:bf:ed:fe:39:f2:0a:58:f7:01:95:fc:89:d3:
                    42:72:f1:fb:7a:53:55:6a:46:ca:61:20:3d:b6:a9:
                    1b:4d:2b:ab:37:11:6e:c2:56:9b:96:49:c3:73:2d:
                    3a:6e:b1:b3:3e:fe:73:eb:4f:f7:56:50:ad:2b:9e:
                    1d:c3:0f:87:be:8a:e7:9a:2c:a2:b1:92:2a:4c:06:
                    96:3a:c2:76:14:e4:56:2e:a4:b3:10:c4:f0:40:5f:
                    c2:17:89:36:b4:e1:91:93:63:6b:e3:fd:a6:b1:fc:
                    46:7d:ec:32:c6:04:05:3c:98:93:a7:62:06:d2:8c:
                    5b:3d:d8:58:a9:66:3b:9c:fb:80:c4:f5:d9:aa:46:
                    29:af:ae:14:1a:16:68:2e:0a:0c:d9:c0:37:be:77:
                    97:a3:1a:60:dd:0d:95:30:1b:0e:34:3d:e8:44:d8:
                    41:f8:1b:8f:63:14:1e:e8:0a:16:ca:6d:ee:55:9c:
                    30:4d:61:97:e0:fe:61:6a:6d:f4:ee:ac:d9:8e:d2:
                    ee:f6:94:21:03:25:0e:18:e4:24:2a:01:25:62:f9:
                    20:9b:59:78:b0:bd:30:f3:71:f2:28:c0:6b:b1:6c:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:17:C5:4E:2B:06:BF:B8:0F:87:BF:50:82:93:B1:C1:35:07:9A:B8
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:13:1a:13:b6:b6:10:2f:71:09:02:4f:32:92:0e:8d:8b:
         31:a1:c7:ce:af:1f:06:1e:77:f7:35:8c:9b:ca:82:04:02:41:
         45:2d:e7:ba:99:2d:36:f0:5b:b2:54:14:e0:6a:2d:fb:d7:8a:
         7e:1e:c0:ed:0f:43:6c:dc:83:b9:a8:f2:4f:77:c4:db:65:19:
         0e:ff:2f:1c:a9:b8:30:01:bd:ca:87:5e:92:a8:6f:80:50:04:
         23:a1:59:fa:be:b4:32:ae:89:98:35:9e:b5:04:d0:6e:3b:c5:
         e0:0b:72:f6:31:e3:4b:7e:1b:33:6f:2c:07:e7:7f:25:35:06:
         a8:c5:73:4c:50:67:68:36:18:61:f7:00:85:bf:36:4d:c1:32:
         d0:66:93:4b:e9:94:17:c9:ee:bc:91:1d:3e:35:58:6a:60:fc:
         e8:07:66:1e:df:41:a9:08:4b:f6:53:2d:f6:30:ce:db:16:7c:
         3b:07:25:00:8a:6c:a1:32:a1:5e:77:ab:e4:ba:5e:aa:e8:38:
         ca:df:e9:3b:2e:1e:93:9b:82:d4:9b:e0:13:78:bf:85:58:f5:
         fd:62:ac:96:bb:02:37:bc:7e:a7:d4:30:b2:f3:28:87:09:50:
         29:ee:ee:69:46:bc:17:ba:8a:c8:bc:89:7c:e1:ee:15:21:0e:
         19:24:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org