Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33372e302f32342d3234203d3e20313336373837.roa
File:                     3136302e3233382e33372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          N0uco/thKPYUadcn7qLXbkLz4pEOGyx6QXHwGgxd+jo=
Subject key identifier:   18:3D:B7:41:46:44:A9:69:B9:AF:F0:9C:86:00:65:8B:14:74:D8:7C
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       21343A34A204060D8E7E610994749D2075F5893A
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33372e302f32342d3234203d3e20313336373837.roa
Signing time:             Tue 08 Nov 2022 07:08:25 +0000
ROA not before:           Tue 08 Nov 2022 07:03:25 +0000
ROA not after:            Tue 07 Nov 2023 07:08:25 +0000
asID:                     136787
IP address blocks:        160.238.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:34:3a:34:a2:04:06:0d:8e:7e:61:09:94:74:9d:20:75:f5:89:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov  8 07:03:25 2022 GMT
            Not After : Nov  7 07:08:25 2023 GMT
        Subject: CN=183DB7414644A969B9AFF09C8600658B1474D87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:1a:a8:cd:0c:ca:52:b9:41:e3:d3:d4:79:
                    90:e2:f6:2a:f7:30:a3:87:4c:46:2f:a8:cb:3b:89:
                    1c:57:29:63:76:2b:ef:3f:34:11:34:2d:0c:34:3c:
                    05:90:5d:51:00:60:ed:d8:f6:f6:f8:31:7b:b4:66:
                    d0:e2:ef:57:24:ea:e3:ef:bd:51:42:22:bf:0e:73:
                    f8:1b:9f:c6:ff:fa:60:66:e0:91:cf:54:fa:ef:0b:
                    f0:85:e7:f6:3c:1a:97:cd:47:6f:b2:bf:d9:da:f4:
                    58:dd:22:e7:2f:24:50:ea:4e:8c:17:9d:c3:69:6e:
                    3f:5e:bb:30:05:0d:cb:d9:c3:82:0e:47:34:63:64:
                    42:d3:13:c4:95:7f:8b:da:01:67:b1:dd:81:ec:ac:
                    aa:14:c6:5e:56:de:a6:39:17:6f:35:77:2b:b7:99:
                    e1:38:5d:fe:8c:a3:87:19:e1:4d:15:5c:dc:fc:a3:
                    0e:67:10:15:fd:e2:5e:09:94:8e:c3:fe:90:12:16:
                    cb:05:f1:a2:69:6e:a1:80:9d:f7:10:a5:85:77:5d:
                    3d:e9:36:9e:5b:cc:a3:68:0b:3f:7f:19:00:73:8c:
                    4a:47:cb:86:59:3e:a7:ac:36:0c:56:21:76:a5:05:
                    61:a2:44:38:48:74:f2:4b:70:f8:0c:f4:79:46:33:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3D:B7:41:46:44:A9:69:B9:AF:F0:9C:86:00:65:8B:14:74:D8:7C
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33372e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:96:8a:e5:22:ef:a2:60:6e:51:9d:8e:b1:85:49:c7:b9:97:
         1b:54:89:76:66:fb:2e:d4:85:76:9a:22:86:f4:9b:ba:5b:1f:
         1b:d0:0a:33:cc:e3:69:92:62:ed:08:19:d7:38:9d:69:48:08:
         6e:29:bc:9d:d4:e1:9f:65:54:07:90:38:fb:0b:d0:d7:e4:a5:
         9d:7b:d7:8e:e9:66:35:ce:7a:db:e9:ff:57:9e:bb:98:13:c9:
         e8:1f:ad:8e:bb:7b:24:53:4f:e4:2b:72:9a:3d:bf:1f:4a:e5:
         e5:af:12:8a:39:07:82:43:0d:e9:0e:5a:2e:66:23:e0:6b:83:
         ba:29:19:fb:a7:37:f6:5f:0d:64:03:10:96:91:08:3e:20:68:
         e1:78:d1:95:55:75:05:b3:4f:9d:38:e7:6a:77:97:85:fd:b5:
         41:50:b9:22:64:37:d2:61:cd:f2:9b:fe:88:57:df:e3:25:b3:
         b6:d4:42:e9:eb:c4:6b:5e:8d:15:ea:bf:29:b9:a8:4d:fd:a3:
         c0:3e:b3:b6:5a:12:85:4b:66:b6:bf:b7:97:13:37:05:b0:f5:
         be:66:e9:e5:68:46:b7:19:e5:a2:d8:7f:94:40:93:d0:22:2f:
         60:a1:32:00:c2:63:60:d2:8e:28:71:3d:60:fa:64:bc:33:23:
         54:4e:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org