Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e20333938343634.roa
File:                     3138352e3231392e3134322e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          w+EbtDby739DerkAOev+U+HSLfqYRfzxCEAvnbd5t8s=
Subject key identifier:   45:63:55:D7:C9:62:91:1E:32:40:19:AA:9F:71:0B:A7:DD:33:9E:B7
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       040D5FB0EE4AA1287434E166CEE7FEE1A2D3AE61
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e20333938343634.roa
Signing time:             Tue 28 Jun 2022 04:40:30 +0000
ROA not before:           Tue 28 Jun 2022 04:35:30 +0000
ROA not after:            Tue 27 Jun 2023 04:40:30 +0000
asID:                     398464
IP address blocks:        185.219.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0d:5f:b0:ee:4a:a1:28:74:34:e1:66:ce:e7:fe:e1:a2:d3:ae:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:30 2022 GMT
            Not After : Jun 27 04:40:30 2023 GMT
        Subject: CN=456355D7C962911E324019AA9F710BA7DD339EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a1:e5:d6:0e:d5:39:ff:76:5a:77:eb:6a:62:
                    ce:77:d9:f1:9a:28:12:95:d9:f8:ed:5f:1c:89:c5:
                    4b:0a:b6:62:26:61:04:ec:99:66:a3:4c:c4:cb:1c:
                    a8:4d:28:b3:96:98:a9:3e:e3:2d:13:fa:1c:3c:b8:
                    fc:a8:28:36:6c:0f:5b:8f:35:76:14:f2:62:1e:32:
                    40:86:85:1c:e2:36:da:85:b0:5c:d1:45:d7:82:90:
                    8f:6b:82:35:f3:de:83:af:6f:19:cd:e5:41:0f:37:
                    23:47:04:c5:90:db:8f:b4:ed:31:ee:6b:ed:76:db:
                    3f:c8:19:d0:e1:8a:06:9d:4a:9d:0d:fb:df:9c:e8:
                    a0:17:d0:9d:de:0b:00:dc:3a:5d:33:3d:1e:c5:41:
                    98:4d:fd:6c:4d:bf:1f:eb:8f:11:08:d0:0e:df:00:
                    f5:b7:ca:30:43:a8:f8:77:a2:02:f4:ea:d8:b2:77:
                    c5:e9:cd:73:6d:91:8b:5d:4d:cd:d0:20:27:e1:e0:
                    53:29:6d:4d:dc:f1:5b:fe:62:ed:3b:d3:0e:03:d6:
                    23:2f:e0:5a:23:f1:25:ef:8a:55:18:df:c2:ca:fa:
                    4d:e4:83:64:74:80:f9:88:46:c4:26:ec:d8:ef:da:
                    a6:01:c4:2d:45:05:ac:55:bd:22:ae:8b:f9:91:1e:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:63:55:D7:C9:62:91:1E:32:40:19:AA:9F:71:0B:A7:DD:33:9E:B7
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:d2:60:36:d9:83:f8:78:9c:f0:58:cb:ec:29:4d:bf:b2:5d:
         b8:85:71:36:57:05:b3:c9:00:20:39:df:75:c1:a6:9b:fa:33:
         20:80:dc:80:ae:62:a1:f5:6f:f3:dc:05:6c:83:bb:1d:ae:36:
         ab:b0:f2:73:37:de:7d:0b:5e:8a:36:03:9f:de:e9:ec:99:30:
         37:10:4a:43:74:d5:03:5b:d5:a8:54:a0:4d:a8:62:82:51:db:
         bb:4f:d8:eb:fb:31:c7:89:60:4a:8c:68:cd:11:99:50:85:0e:
         82:ed:67:ec:a5:33:bc:27:e7:af:37:af:af:a6:19:8f:c0:7c:
         3b:fd:cb:4b:44:64:9a:c4:07:a3:5b:d5:29:ef:a9:08:1c:19:
         ad:4c:cb:45:6a:03:ae:ad:60:c1:46:d0:b0:8e:78:01:9d:94:
         07:ca:66:78:62:03:6f:ab:00:78:4b:d2:c6:55:8d:a9:4a:8c:
         11:dd:a8:c2:d2:4b:3e:48:75:64:a4:6b:d7:d3:d4:36:b1:d8:
         a5:e1:ad:44:9f:19:2b:54:14:c8:ca:ea:d8:0d:79:12:bc:82:
         1b:89:f9:b4:f5:53:b5:2c:fb:21:f3:26:14:3c:e2:39:dd:18:
         cf:2a:d7:9a:98:14:65:d6:e7:81:76:6f:01:3d:cb:a6:68:10:
         4d:5c:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org