Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa
File:                     3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          HXGMvD5c+37X/hLMdsGmkCxIoZxq7KFVrDECu3qdX64=
Subject key identifier:   F1:76:E4:01:31:C7:3C:7F:89:00:7E:7B:62:CD:66:D9:60:5D:37:33
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5A7686FDCCED672554C12FA077F8823DDB42456E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:14 +0000
ROA not before:           Sat 22 Oct 2022 04:28:14 +0000
ROA not after:            Sat 21 Oct 2023 04:33:14 +0000
asID:                     51167
IP address blocks:        185.217.125.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:76:86:fd:cc:ed:67:25:54:c1:2f:a0:77:f8:82:3d:db:42:45:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:14 2022 GMT
            Not After : Oct 21 04:33:14 2023 GMT
        Subject: CN=F176E40131C73C7F89007E7B62CD66D9605D3733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:20:76:7e:f3:06:df:75:bd:de:30:ff:ca:
                    2b:18:1a:15:d7:16:97:7f:2e:4c:dc:9a:c5:30:af:
                    4b:3c:a5:69:ea:21:b5:7e:26:f8:6a:a7:e6:e3:63:
                    08:05:1f:6a:b9:85:4a:b1:42:15:6c:31:2c:b8:7c:
                    56:b9:d8:45:0e:b3:fd:9b:d5:e6:45:6f:aa:8b:de:
                    58:9d:0f:c5:c4:0c:d8:1c:9e:f9:33:89:69:a6:b5:
                    b9:d5:9d:60:5b:a4:c5:ee:06:a8:26:dc:0c:75:f5:
                    9d:58:26:be:45:5e:dd:48:d9:5f:76:68:26:5f:78:
                    6f:5c:44:0d:e6:3b:80:c0:73:dd:e7:53:90:e1:77:
                    c3:78:d8:a6:5a:86:97:46:3f:c2:aa:ac:09:9f:d9:
                    99:d9:a1:a6:fd:40:eb:b7:f9:b7:2c:a7:e8:4e:92:
                    ed:57:ab:5e:d6:05:a6:98:2e:6f:0f:94:e2:37:4a:
                    8c:01:b2:71:41:e8:e5:b1:d3:7d:48:e4:f2:55:84:
                    f3:90:d5:93:5c:7e:95:73:4d:33:8c:8d:38:a2:35:
                    c7:e0:7c:fd:87:ed:19:c5:ec:79:ca:37:c5:cc:84:
                    76:f8:85:91:bb:bb:03:d6:71:d7:cc:34:29:7e:14:
                    7d:c1:67:74:93:60:1a:2d:d2:2c:15:72:e2:59:7f:
                    7f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:76:E4:01:31:C7:3C:7F:89:00:7E:7B:62:CD:66:D9:60:5D:37:33
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:a5:c6:c2:fa:ae:1f:db:f3:45:56:b7:ed:d8:49:ac:65:
         f8:c8:4d:a0:09:69:b6:c1:53:dc:bd:0a:00:44:f7:84:00:12:
         a3:be:85:20:05:a6:98:10:23:aa:6f:72:13:b1:d8:81:55:29:
         59:e3:0f:51:dd:20:dd:67:29:f9:c0:76:c5:43:2d:4d:8d:39:
         99:a0:13:a1:9d:eb:61:d0:69:b8:27:25:c3:8a:98:39:7f:ea:
         78:c4:72:9a:27:40:d5:a8:94:ae:cd:8d:7d:bc:c4:04:4e:19:
         4e:1a:46:95:60:12:b0:7b:15:6d:80:46:10:7b:b7:f8:b0:9a:
         ab:a0:fa:1f:d8:a9:e8:a6:9a:42:56:8e:c6:35:cd:e5:a7:ca:
         a6:89:98:d0:1b:68:b2:93:34:c5:29:78:70:46:d0:22:2a:5d:
         1f:df:66:90:6c:84:35:14:6a:61:06:65:72:1b:e8:78:08:d6:
         79:df:2e:3d:29:28:ea:bc:fe:26:ce:62:93:49:4a:3e:01:d6:
         9e:7b:9b:d0:31:e1:9b:b9:d8:ea:ce:df:cd:dc:7d:50:50:ea:
         99:99:c1:ae:50:32:26:88:1a:75:63:70:99:53:50:73:11:b2:
         b9:40:1d:51:4c:be:fe:1b:20:27:a6:c2:33:04:81:f7:c8:10:
         16:a3:23:51
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUWnaG/cztZyVUwS+gd/iCPdtCRW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTRaFw0yMzEwMjEwNDMzMTRaMDMxMTAvBgNV
BAMTKEYxNzZFNDAxMzFDNzNDN0Y4OTAwN0U3QjYyQ0Q2NkQ5NjA1RDM3MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tCB2fvMG33W93jD/yisYGhXX
Fpd/LkzcmsUwr0s8pWnqIbV+Jvhqp+bjYwgFH2q5hUqxQhVsMSy4fFa52EUOs/2b
1eZFb6qL3lidD8XEDNgcnvkziWmmtbnVnWBbpMXuBqgm3Ax19Z1YJr5FXt1I2V92
aCZfeG9cRA3mO4DAc93nU5Dhd8N42KZahpdGP8KqrAmf2ZnZoab9QOu3+bcsp+hO
ku1Xq17WBaaYLm8PlOI3SowBsnFB6OWx031I5PJVhPOQ1ZNcfpVzTTOMjTiiNcfg
fP2H7RnF7HnKN8XMhHb4hZG7uwPWcdfMNCl+FH3BZ3STYBot0iwVcuJZf39FAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU8XbkATHHPH+JAH57Ys1m2WBdNzMwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzEzNzJlMzEzMjM1MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIw
MzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnZfTANBgkqhkiG9w0BAQsFAAOCAQEAN/yl
xsL6rh/b80VWt+3YSaxl+MhNoAlptsFT3L0KAET3hAASo76FIAWmmBAjqm9yE7HY
gVUpWeMPUd0g3Wcp+cB2xUMtTY05maAToZ3rYdBpuCclw4qYOX/qeMRymidA1aiU
rs2NfbzEBE4ZThpGlWASsHsVbYBGEHu3+LCaq6D6H9ip6KaaQlaOxjXN5afKpomY
0BtospM0xSl4cEbQIipdH99mkGyENRRqYQZlchvoeAjWed8uPSko6rz+Js5ik0lK
PgHWnnub0DHhm7nY6s7fzdx9UFDqmZnBrlAyJogadWNwmVNQcxGyuUAdUUy+/hsg
J6bCMwSB98gQFqMjUQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org