Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e20323132303730.roa
File:                     38352e3230382e34392e302f32342d3234203d3e20323132303730.roa (raw, json)
Hash identifier:          CQdSwjynbvZry0TEr4QTcgmCJBg1cvKQpKFDRX6EEmk=
Subject key identifier:   ED:AB:F7:D7:7E:27:BC:06:52:AE:15:C9:2C:1C:42:23:83:5F:E4:33
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3954ECBA98DF17B06B5DB1A66D2D54789798ACE9
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e20323132303730.roa
Signing time:             Mon 04 Jan 2021 13:52:15 +0000
ROA not before:           Mon 04 Jan 2021 13:47:15 +0000
ROA not after:            Mon 03 Jan 2022 13:52:15 +0000
asID:                     212070
IP address blocks:        85.208.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:54:ec:ba:98:df:17:b0:6b:5d:b1:a6:6d:2d:54:78:97:98:ac:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jan  4 13:47:15 2021 GMT
            Not After : Jan  3 13:52:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:a4:79:de:e5:30:1f:73:ff:7e:07:d0:e5:
                    c4:fc:b8:39:58:51:47:2b:2b:fa:6b:83:84:dd:ca:
                    55:f4:89:b4:3c:2e:75:e8:22:1e:4d:0e:f7:b3:19:
                    bd:f4:cb:55:a5:5b:37:b7:8f:8b:0b:69:24:7b:b7:
                    68:1b:58:55:a6:b5:d6:b2:31:9b:57:f9:16:7e:bc:
                    e9:76:e1:ba:c0:e7:63:7b:e1:ec:85:97:29:18:3b:
                    e5:b5:63:43:c6:ea:1d:64:23:e3:cc:65:ba:b9:e6:
                    2a:38:8d:f3:19:16:ba:74:f0:54:c4:50:7d:9e:23:
                    34:33:9d:0e:33:e9:34:54:46:5b:f8:a1:92:d4:f6:
                    75:6f:15:9e:c5:d1:6e:5b:e5:84:e1:18:f2:d6:73:
                    c6:f4:65:a4:9c:0a:73:61:03:9e:a4:bf:67:de:4d:
                    e5:17:d8:50:45:ae:82:d9:11:a7:2f:58:32:74:a5:
                    2d:30:f4:f9:cd:56:16:e5:6e:88:f4:7c:71:12:ae:
                    75:cc:1d:28:16:68:85:92:9d:7f:45:41:d4:d6:fb:
                    9e:67:ff:9a:bc:21:49:21:22:e7:fa:a9:b2:78:ab:
                    5e:85:0c:e5:cb:8e:ea:8e:23:eb:8e:3a:4d:4a:be:
                    9f:6c:c7:b5:58:c2:29:0c:df:97:7c:b2:17:6b:0b:
                    ea:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AB:F7:D7:7E:27:BC:06:52:AE:15:C9:2C:1C:42:23:83:5F:E4:33
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e20323132303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d8:c6:73:6d:f8:2e:cf:87:fa:bc:68:92:a0:08:15:ac:4d:
         57:7e:d1:b2:31:5a:7a:39:12:14:49:ee:2c:b9:74:1a:cc:ae:
         31:c3:29:05:5e:21:a3:31:b7:c7:bf:6a:49:a8:b0:e2:22:3e:
         42:f9:ae:52:32:5d:82:c0:3c:4e:66:6c:91:34:82:d4:de:54:
         b4:24:2c:46:64:7b:b6:5a:8f:bc:19:6e:f2:22:ad:67:c5:8c:
         93:84:a2:48:38:c5:18:06:55:d2:f3:fc:09:7c:06:1f:7f:a9:
         9e:04:b0:89:4c:c6:76:62:35:4a:b0:bf:1f:0d:47:bd:59:1e:
         bd:8f:5b:de:79:cd:8b:eb:94:5b:ee:8b:f9:98:6d:fb:9f:18:
         6d:53:11:25:7d:2a:ed:23:bc:c9:2c:9e:3e:f9:8e:97:cc:e5:
         b6:de:5f:d6:4d:ba:2e:ec:31:a9:ba:cc:ca:8f:1a:ff:34:1c:
         a1:45:7a:30:98:ef:c2:30:d4:7a:11:49:6a:f0:6b:d1:f4:b4:
         1c:53:3b:0c:df:7a:ba:4d:d8:dc:bf:55:94:64:f7:09:cf:93:
         cb:be:cb:d0:94:e4:4e:24:3e:e3:62:1d:34:8f:06:36:7d:f9:
         cc:18:e9:69:95:df:93:25:ce:01:fe:9e:12:80:84:8a:7e:57:
         25:28:d9:81
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUOVTsupjfF7BrXbGmbS1UeJeYrOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMTAxMDQxMzQ3MTVaFw0yMjAxMDMxMzUyMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjBDMUE0NzlERUU1MzAxRjcz
RkY3RTA3RDBFNUM0RkNCODM5NTg1MTQ3MkIyQkZBNkI4Mzg0RERDQTU1RjQ4OUI0
M0MyRTc1RTgyMjFFNEQwRUY3QjMxOUJERjRDQjU1QTU1QjM3Qjc4RjhCMEI2OTI0
N0JCNzY4MUI1ODU1QTZCNUQ2QjIzMTlCNTdGOTE2N0VCQ0U5NzZFMUJBQzBFNzYz
N0JFMUVDODU5NzI5MTgzQkU1QjU2MzQzQzZFQTFENjQyM0UzQ0M2NUJBQjlFNjJB
Mzg4REYzMTkxNkJBNzRGMDU0QzQ1MDdEOUUyMzM0MzM5RDBFMzNFOTM0NTQ0NjVC
RjhBMTkyRDRGNjc1NkYxNTlFQzVEMTZFNUJFNTg0RTExOEYyRDY3M0M2RjQ2NUE0
OUMwQTczNjEwMzlFQTRCRjY3REU0REU1MTdEODUwNDVBRTgyRDkxMUE3MkY1ODMy
NzRBNTJEMzBGNEY5Q0Q1NjE2RTU2RTg4RjQ3QzcxMTJBRTc1Q0MxRDI4MTY2ODg1
OTI5RDdGNDU0MUQ0RDZGQjlFNjdGRjlBQkMyMTQ5MjEyMkU3RkFBOUIyNzhBQjVF
ODUwQ0U1Q0I4RUVBOEUyM0VCOEUzQTRENEFCRTlGNkNDN0I1NThDMjI5MENERjk3
N0NCMjE3NkIwQkVBOEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsMGked7lMB9z/34H0OXE/Lg5WFFHKyv6a4OE3cpV9Im0PC516CIe
TQ73sxm99MtVpVs3t4+LC2kke7doG1hVprXWsjGbV/kWfrzpduG6wOdje+HshZcp
GDvltWNDxuodZCPjzGW6ueYqOI3zGRa6dPBUxFB9niM0M50OM+k0VEZb+KGS1PZ1
bxWexdFuW+WE4Rjy1nPG9GWknApzYQOepL9n3k3lF9hQRa6C2RGnL1gydKUtMPT5
zVYW5W6I9HxxEq51zB0oFmiFkp1/RUHU1vueZ/+avCFJISLn+qmyeKtehQzly47q
jiPrjjpNSr6fbMe1WMIpDN+XfLIXawvqjQIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FO2r99d+J7wGUq4VySwcQiODX+QzMB8GA1UdIwQYMBaAFGGZTuk7q+YME+BEh/pc
00/SP8k/MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzYxOTk0
RUU5M0JBQkU2MEMxM0UwNDQ4N0ZBNUNEMzRGRDIzRkM5M0YuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9ZWmxPNlR1cjVnd1Q0RVNILWx6VFQ5SV95VDguY2VyMIGI
BggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzYvMzgzNTJlMzIzMDM4MmUzNDM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzAzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
VdAxMA0GCSqGSIb3DQEBCwUAA4IBAQB82MZzbfguz4f6vGiSoAgVrE1XftGyMVp6
ORIUSe4suXQazK4xwykFXiGjMbfHv2pJqLDiIj5C+a5SMl2CwDxOZmyRNILU3lS0
JCxGZHu2Wo+8GW7yIq1nxYyThKJIOMUYBlXS8/wJfAYff6meBLCJTMZ2YjVKsL8f
DUe9WR69j1veec2L65Rb7ov5mG37nxhtUxElfSrtI7zJLJ4++Y6XzOW23l/WTbou
7DGpuszKjxr/NByhRXowmO/CMNR6EUlq8GvR9LQcUzsM33q6Tdjcv1WUZPcJz5PL
vsvQlOROJD7jYh00jwY2ffnMGOlpld+TJc4B/p4SgISKflclKNmB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org