Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139332e302f32342d3234203d3e20333938343634.roa
File:                     3138352e3139372e3139332e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          4xGwzj0cjccwSJ/ULS46RuVfPh4V2dYTRzThfjadYgc=
Subject key identifier:   59:5C:C6:F0:AE:48:B1:2C:03:09:AB:CF:E6:34:A3:26:FC:71:8A:93
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       34CA5AFF783BAC011DFB53CD7FB5F544CB5AE464
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139332e302f32342d3234203d3e20333938343634.roa
Signing time:             Tue 28 Jun 2022 04:40:27 +0000
ROA not before:           Tue 28 Jun 2022 04:35:27 +0000
ROA not after:            Tue 27 Jun 2023 04:40:27 +0000
asID:                     398464
IP address blocks:        185.197.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ca:5a:ff:78:3b:ac:01:1d:fb:53:cd:7f:b5:f5:44:cb:5a:e4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:27 2022 GMT
            Not After : Jun 27 04:40:27 2023 GMT
        Subject: CN=595CC6F0AE48B12C0309ABCFE634A326FC718A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:59:02:f4:ad:f1:cf:ab:c6:67:bf:be:4a:
                    6c:b3:64:b1:75:c0:cc:c1:3f:c2:0c:a6:16:a0:03:
                    86:3d:88:6b:3f:fd:24:d9:09:7d:db:82:ae:76:af:
                    7d:0b:e0:a6:4d:74:6a:41:ef:1c:a1:09:ec:18:d7:
                    70:22:8e:09:e6:ed:ff:b4:74:c5:2c:de:37:97:9b:
                    3b:34:5b:43:93:1b:31:c9:d8:70:35:4b:05:ab:cc:
                    25:a2:3b:91:4e:36:0a:99:79:b1:19:3b:ef:2c:1c:
                    1d:e5:42:87:69:96:1e:77:9a:65:34:4e:ee:9f:a6:
                    24:4e:2c:b2:68:96:cc:f4:5b:55:13:c7:23:e9:6d:
                    db:64:c3:7b:d5:1b:d9:af:6a:a9:85:2b:98:b0:06:
                    08:ff:06:f2:2a:f2:60:32:13:5c:89:76:bf:78:ba:
                    33:37:5e:0d:98:c5:c5:a4:f8:97:79:ec:67:a7:c6:
                    27:e7:9d:43:05:67:f0:ef:6f:e5:34:1c:a9:e0:8d:
                    24:ea:97:2a:39:62:df:40:13:94:be:96:e4:d5:0d:
                    0d:c9:73:2e:25:10:44:8a:c1:16:5c:0f:25:25:96:
                    a0:dc:02:f1:57:67:0f:3b:32:3d:5a:33:95:07:45:
                    43:4d:2c:65:61:b2:f6:ae:7e:f2:06:44:55:e6:1a:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5C:C6:F0:AE:48:B1:2C:03:09:AB:CF:E6:34:A3:26:FC:71:8A:93
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139332e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:9a:c4:d3:cb:a9:8e:b3:80:c8:3b:b5:35:12:c8:96:d9:e4:
         5a:46:e7:61:67:64:be:b0:f8:fe:05:11:db:d3:86:45:1a:69:
         0f:80:2a:8c:7f:8d:56:b3:d0:ca:5a:6e:6b:54:ea:39:b8:60:
         ee:bd:a4:a3:c2:56:86:1f:b2:8d:c0:67:10:f2:43:85:92:ec:
         e7:1b:ae:ee:a0:d0:8c:c2:3e:59:8a:93:eb:51:16:41:87:5a:
         13:f2:41:ad:9b:f9:10:a9:51:3d:e4:69:e0:f1:27:a2:e5:6d:
         04:1f:37:df:b7:9d:38:35:c0:ce:67:af:37:e1:7d:61:39:1d:
         94:8d:9e:5a:1d:f0:61:09:de:a3:bd:a8:b7:92:a4:f7:dd:3b:
         1d:a8:b4:a6:ad:fa:6f:78:2a:0e:0b:9a:cc:7e:c3:24:f5:d1:
         08:8c:b3:c7:4d:49:75:db:45:14:b9:47:f0:7a:63:14:c7:eb:
         ba:5b:e0:eb:e2:65:3a:f5:53:80:a1:68:de:48:e3:20:a1:a2:
         c4:c2:0a:9c:47:bc:f8:e6:55:81:12:2d:98:0e:fd:42:3f:e7:
         7c:06:ed:f3:14:5a:46:24:75:6e:ec:1c:25:bc:8b:a0:a1:de:
         c5:65:9f:c3:07:eb:2f:03:8d:3f:e6:e0:9c:e2:ed:f9:bf:99:
         6d:ea:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org