Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36362e302f32342d3234203d3e203632353739.roa
File:                     3139342e3131332e36362e302f32342d3234203d3e203632353739.roa (raw, json)
Hash identifier:          JsyJbdO5/HunKfIdBrOoEvFQhD4g+1jQmZbj9ZtBOuY=
Subject key identifier:   41:6E:F2:75:16:01:CA:13:FB:E1:29:1C:D1:44:F2:3C:35:92:FD:1B
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       4AEA99B237D3A9FA4587F7896BA6C2B5F531127E
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36362e302f32342d3234203d3e203632353739.roa
Signing time:             Sat 22 Oct 2022 04:33:43 +0000
ROA not before:           Sat 22 Oct 2022 04:28:43 +0000
ROA not after:            Sat 21 Oct 2023 04:33:43 +0000
asID:                     62579
IP address blocks:        194.113.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ea:99:b2:37:d3:a9:fa:45:87:f7:89:6b:a6:c2:b5:f5:31:12:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:43 2022 GMT
            Not After : Oct 21 04:33:43 2023 GMT
        Subject: CN=416EF2751601CA13FBE1291CD144F23C3592FD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:56:54:a6:fb:0a:f7:17:1d:b8:92:90:af:24:
                    98:af:a3:90:bb:21:10:88:11:52:19:85:fd:2c:00:
                    c8:77:8f:40:df:c4:fc:66:9e:79:65:1c:46:de:cd:
                    05:77:11:84:b3:85:f8:ef:64:db:f1:3e:a4:5b:f6:
                    2e:a1:91:84:40:e6:2c:f6:a4:bb:ed:6e:58:4c:f2:
                    ec:81:c1:1e:e1:aa:45:e9:b8:e1:ef:26:fc:a1:46:
                    7e:bd:92:e7:56:c3:78:bc:e8:c1:49:1c:9a:ba:60:
                    82:fc:2d:4b:35:70:af:58:c1:19:ed:9d:b0:7b:d3:
                    53:44:79:e7:10:12:22:95:4e:0d:02:9c:ca:0d:f8:
                    0c:55:ba:85:6f:38:82:8d:68:2d:b9:1e:0d:e0:88:
                    a2:90:67:34:dd:a2:1d:2a:30:9c:1b:c6:90:92:24:
                    05:73:2c:d0:9a:6c:7e:b6:28:e7:e9:f2:be:09:81:
                    13:d2:de:42:e0:d6:3d:27:f2:e5:08:10:bc:ea:35:
                    93:2f:b4:7e:a7:85:6b:c5:b2:35:36:2c:31:d8:08:
                    72:0f:2f:e5:55:8b:ca:ed:2c:cd:bb:55:c5:3e:cd:
                    b4:f0:03:ab:c8:02:94:36:4f:e9:f0:62:22:48:e5:
                    69:9b:e3:13:df:f2:d1:2c:97:91:59:86:8d:33:20:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:F2:75:16:01:CA:13:FB:E1:29:1C:D1:44:F2:3C:35:92:FD:1B
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36362e302f32342d3234203d3e203632353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ca:57:9b:44:08:ed:ed:31:b6:00:79:f4:b9:c6:b8:cc:2e:
         64:de:ce:cf:d1:bc:7c:50:7e:87:0a:82:31:da:02:db:87:5b:
         1b:e2:04:78:dd:a5:b1:e2:3f:02:e3:0b:ec:f0:07:2a:a1:9e:
         1e:22:48:b2:0d:b7:7b:71:e0:97:49:b9:e3:b4:4d:5e:cf:36:
         75:1b:fa:9d:2f:d3:64:b1:ec:d5:98:9d:29:b3:3d:62:6e:38:
         9b:f3:fe:35:87:a8:b1:8a:e3:a3:64:8d:4a:3a:42:bc:7d:e3:
         15:ac:4f:04:91:5b:7f:b5:63:fd:64:12:5f:97:81:15:8f:fe:
         46:91:b7:08:12:3b:92:9c:83:05:6c:d1:59:22:1e:68:1f:8b:
         60:79:f9:10:3a:ba:98:ad:ca:a1:36:09:a2:f2:a0:31:f5:02:
         c1:94:27:56:38:cf:22:4f:3f:f0:bc:90:cd:8c:43:54:cd:85:
         a0:65:65:9b:11:7a:1e:87:54:8a:6d:a5:ed:6f:a8:dd:20:1b:
         cc:57:4b:53:e7:04:8b:e0:62:56:88:c2:32:b9:ca:dc:16:10:
         f8:28:8b:23:4b:82:80:72:90:ee:a3:2b:6d:f6:a5:71:ad:36:
         e4:94:e3:74:59:a9:49:67:f8:64:dc:1b:62:2e:65:50:c2:95:
         03:a5:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org