Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3133302e3138352e3131392e302f32342d3332203d3e203531313637.roa
File:                     3133302e3138352e3131392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          4CFu1PCEcUEeRaaN/Ag55E7B7g/r6yRO22zy9KVsCG0=
Subject key identifier:   45:53:4A:91:36:29:B4:A0:A4:B6:D4:45:B8:D3:5A:41:75:32:39:53
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       3F31628FC858D7E176C3BCC5644445BB9CD38F79
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3133302e3138352e3131392e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:45 +0000
ROA not before:           Sat 22 Oct 2022 04:28:45 +0000
ROA not after:            Sat 21 Oct 2023 04:33:45 +0000
asID:                     51167
IP address blocks:        130.185.119.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:31:62:8f:c8:58:d7:e1:76:c3:bc:c5:64:44:45:bb:9c:d3:8f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:45 2022 GMT
            Not After : Oct 21 04:33:45 2023 GMT
        Subject: CN=45534A913629B4A0A4B6D445B8D35A4175323953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:d9:bf:6f:d4:59:7c:7f:da:aa:ef:c6:7f:
                    cb:5f:4d:8a:29:2b:b0:c5:05:da:90:e9:ed:e5:33:
                    0e:9e:60:e1:8e:5b:f9:0b:37:70:f5:d6:ae:5d:49:
                    c7:4c:24:52:03:20:17:16:89:f4:63:b7:f2:13:02:
                    e1:47:63:20:86:f4:40:56:99:ff:9c:84:c2:21:ff:
                    e1:ee:24:f4:25:ad:6f:92:37:d8:fa:2d:9d:15:db:
                    f2:f5:a1:bb:a6:fa:47:0e:91:68:f5:5d:0e:0c:2d:
                    1a:05:21:25:4c:b4:3f:89:d5:93:0c:3a:d8:b9:ee:
                    16:fc:48:32:94:4d:93:b9:1e:6b:e0:4f:96:4b:04:
                    ce:54:65:6d:c7:62:33:db:54:71:60:7d:f1:0c:58:
                    7d:dd:5e:af:f1:20:b1:98:82:37:66:75:d3:ce:6a:
                    60:a5:7c:6f:2d:a9:71:7c:41:a4:e4:51:b8:8c:24:
                    f3:42:b3:7e:1d:3b:c7:c4:7d:01:32:a2:b8:dd:a8:
                    45:86:cf:76:6b:a0:0b:8b:f9:1c:bd:28:75:f0:51:
                    66:53:f6:8b:38:9f:a4:64:a1:e8:26:52:83:1a:63:
                    d4:36:f7:45:8b:bd:f2:2d:c6:fa:28:1e:32:7c:f0:
                    b3:4d:44:c0:bf:49:5d:12:5b:0c:64:fb:26:9a:ba:
                    bb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:53:4A:91:36:29:B4:A0:A4:B6:D4:45:B8:D3:5A:41:75:32:39:53
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3133302e3138352e3131392e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.185.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:92:d3:91:b9:d1:97:ae:cf:42:54:69:a8:2f:b5:a7:25:e3:
         15:00:31:b0:2a:a8:aa:20:8d:e9:3f:40:9b:db:a3:be:65:ab:
         e6:ec:af:6c:7b:cb:87:f8:aa:49:af:bc:bb:5d:96:ca:b9:34:
         da:c1:fe:23:e9:6f:c5:05:0d:d3:2d:ee:26:cd:92:63:49:cc:
         df:ab:f8:51:05:af:8f:16:1e:01:8a:f8:f7:1c:eb:2c:6f:ba:
         9d:dc:95:a3:1a:47:27:fc:14:b4:1f:2c:b8:ef:85:a0:30:7d:
         27:c4:c5:43:f1:b5:cc:49:23:66:dc:9b:00:4e:20:73:10:7e:
         f7:eb:58:0f:05:07:8e:9a:a5:05:c4:6f:6a:e6:c7:16:81:11:
         34:14:11:17:e7:23:3b:1d:33:2d:0a:f2:76:06:57:bd:83:e2:
         28:ca:bd:54:e9:89:6a:36:00:46:1a:1d:71:9c:19:53:b0:2f:
         90:0d:4a:0c:c1:aa:ff:67:1c:2c:9b:ed:0c:9a:31:92:b8:92:
         b4:be:d7:52:41:25:9f:6b:41:cc:6a:cd:6a:09:af:55:23:d9:
         3c:7f:58:59:c3:ec:f0:cd:60:02:10:c4:68:dc:d6:40:7d:a2:
         71:ff:5b:f6:70:3a:2a:1b:36:3c:71:0d:70:26:bf:99:21:f2:
         e3:5f:11:79
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUPzFij8hY1+F2w7zFZERFu5zTj3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDVaFw0yMzEwMjEwNDMzNDVaMDMxMTAvBgNV
BAMTKDQ1NTM0QTkxMzYyOUI0QTBBNEI2RDQ0NUI4RDM1QTQxNzUzMjM5NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLI9m/b9RZfH/aqu/Gf8tfTYop
K7DFBdqQ6e3lMw6eYOGOW/kLN3D11q5dScdMJFIDIBcWifRjt/ITAuFHYyCG9EBW
mf+chMIh/+HuJPQlrW+SN9j6LZ0V2/L1obum+kcOkWj1XQ4MLRoFISVMtD+J1ZMM
Oti57hb8SDKUTZO5HmvgT5ZLBM5UZW3HYjPbVHFgffEMWH3dXq/xILGYgjdmddPO
amClfG8tqXF8QaTkUbiMJPNCs34dO8fEfQEyorjdqEWGz3ZroAuL+Ry9KHXwUWZT
9os4n6RkoegmUoMaY9Q290WLvfItxvooHjJ88LNNRMC/SV0SWwxk+yaaurvFAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQURVNKkTYptKCkttRFuNNaQXUyOVMwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zMTMzMzAyZTMxMzgzNTJlMzEzMTM5MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIw
MzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIK5dzANBgkqhkiG9w0BAQsFAAOCAQEAJJLT
kbnRl67PQlRpqC+1pyXjFQAxsCqoqiCN6T9Am9ujvmWr5uyvbHvLh/iqSa+8u12W
yrk02sH+I+lvxQUN0y3uJs2SY0nM36v4UQWvjxYeAYr49xzrLG+6ndyVoxpHJ/wU
tB8suO+FoDB9J8TFQ/G1zEkjZtybAE4gcxB+9+tYDwUHjpqlBcRvaubHFoERNBQR
F+cjOx0zLQrydgZXvYPiKMq9VOmJajYARhodcZwZU7AvkA1KDMGq/2ccLJvtDJox
kriStL7XUkEln2tBzGrNagmvVSPZPH9YWcPs8M1gAhDEaNzWQH2icf9b9nA6Khs2
PHENcCa/mSHy418ReQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org