Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232372e302f32342d3234203d3e20313336373837.roa
File:                     3139342e3135362e3232372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          4g56NmFKGmhcP78w2CtoSV5H3xtMMgNHFH92azMCZKE=
Subject key identifier:   B8:32:84:1E:31:65:BA:6B:FD:4F:BD:4C:A9:AE:A8:68:4C:5D:1A:81
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       46A7FDBA36393764D6B93BEE6C08F0C959A1B8D4
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232372e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:44 +0000
ROA not before:           Sat 22 Oct 2022 04:28:44 +0000
ROA not after:            Sat 21 Oct 2023 04:33:44 +0000
asID:                     136787
IP address blocks:        194.156.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a7:fd:ba:36:39:37:64:d6:b9:3b:ee:6c:08:f0:c9:59:a1:b8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:44 2022 GMT
            Not After : Oct 21 04:33:44 2023 GMT
        Subject: CN=B832841E3165BA6BFD4FBD4CA9AEA8684C5D1A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:cf:80:5d:d8:12:67:90:42:a8:33:dc:2b:32:
                    d6:97:95:a3:5d:cb:1d:d9:1a:4b:0f:30:42:ef:d6:
                    65:8a:f5:b4:3f:47:20:bf:6b:3f:ff:75:4c:50:de:
                    a5:35:0b:fc:d7:1d:a2:8d:26:d9:f9:a0:6d:00:89:
                    99:99:23:fe:f6:f7:16:08:f2:d7:73:aa:b2:d6:eb:
                    77:2f:f3:91:d9:00:db:7d:f7:ec:54:38:ae:70:21:
                    a1:f6:e4:33:a7:f6:45:56:cb:28:94:33:57:cc:0a:
                    fb:01:1e:6d:13:33:b8:c1:90:a0:85:be:d0:9d:78:
                    a9:8c:9e:83:81:66:42:d2:5c:f2:d0:1a:49:78:00:
                    7e:09:ec:35:c3:07:c8:85:ab:27:d5:3a:53:40:d3:
                    cb:bb:6c:ca:ad:69:25:1b:2f:e8:fc:ea:45:3d:47:
                    70:da:be:b0:fc:9b:fd:a1:29:70:b8:58:16:d9:26:
                    cd:09:38:08:c6:d0:0b:4d:15:9f:fe:cb:24:0e:18:
                    6b:37:f8:ba:ba:33:8e:f3:9f:7c:71:45:dc:f9:16:
                    0e:02:53:3a:50:77:dd:9b:fd:97:a3:9f:ac:66:28:
                    7a:60:c4:67:07:bd:6a:11:9d:c9:e0:d5:0a:e8:4d:
                    26:33:5c:12:fa:52:8c:f1:51:fe:ad:f2:5c:3b:a3:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:32:84:1E:31:65:BA:6B:FD:4F:BD:4C:A9:AE:A8:68:4C:5D:1A:81
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232372e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:f5:4b:d6:ec:e4:62:d2:aa:66:5a:2d:02:64:df:13:7a:
         0a:dd:75:50:ae:6c:97:ee:7a:b2:c2:fe:aa:9a:09:3b:6d:0a:
         36:fe:4f:ba:44:96:62:0c:33:c4:3e:58:78:b3:e5:9a:78:b3:
         6c:72:6e:f0:42:fb:3b:fc:d4:ad:a0:8c:17:52:2d:17:0b:08:
         11:63:93:54:fe:d9:be:63:f5:58:dc:5f:33:8d:23:8d:af:71:
         c4:ca:65:47:57:1a:07:aa:f2:1e:f7:ff:7c:7d:7e:36:1f:82:
         71:dc:42:79:9d:44:6f:34:f4:71:a1:65:4a:26:45:b9:b7:55:
         1c:b4:0e:1c:97:0f:22:ed:6b:b8:a7:a5:d0:10:3d:6d:16:9d:
         10:37:b5:0f:38:fa:3e:bc:9d:8b:2b:64:c3:b9:95:b4:e1:15:
         7b:e2:93:6d:f5:83:64:3c:58:20:24:7b:f5:fc:96:d9:2d:3e:
         5b:e0:d4:15:1a:20:64:47:f2:6b:e2:c5:df:ba:13:81:82:c4:
         64:86:53:f0:a1:6d:2a:94:04:77:8a:07:c2:ae:c0:e4:5a:5a:
         a4:58:16:dd:15:64:1e:e2:52:53:08:76:af:cf:81:49:90:b9:
         17:b7:f7:20:f7:dd:ff:24:a5:d5:4d:32:16:ae:74:06:1e:89:
         08:ad:90:07
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIURqf9ujY5N2TWuTvubAjwyVmhuNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDRaFw0yMzEwMjEwNDMzNDRaMDMxMTAvBgNV
BAMTKEI4MzI4NDFFMzE2NUJBNkJGRDRGQkQ0Q0E5QUVBODY4NEM1RDFBODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6z4Bd2BJnkEKoM9wrMtaXlaNd
yx3ZGksPMELv1mWK9bQ/RyC/az//dUxQ3qU1C/zXHaKNJtn5oG0AiZmZI/729xYI
8tdzqrLW63cv85HZANt99+xUOK5wIaH25DOn9kVWyyiUM1fMCvsBHm0TM7jBkKCF
vtCdeKmMnoOBZkLSXPLQGkl4AH4J7DXDB8iFqyfVOlNA08u7bMqtaSUbL+j86kU9
R3DavrD8m/2hKXC4WBbZJs0JOAjG0AtNFZ/+yyQOGGs3+Lq6M47zn3xxRdz5Fg4C
UzpQd92b/Zejn6xmKHpgxGcHvWoRncng1QroTSYzXBL6UozxUf6t8lw7o4wVAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUuDKEHjFlumv9T71Mqa6oaExdGoEwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzcvMzEzOTM0MmUzMTM1MzYyZTMyMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKc4zANBgkqhkiG9w0BAQsFAAOCAQEA
Fcr1S9bs5GLSqmZaLQJk3xN6Ct11UK5sl+56ssL+qpoJO20KNv5PukSWYgwzxD5Y
eLPlmnizbHJu8EL7O/zUraCMF1ItFwsIEWOTVP7ZvmP1WNxfM40jja9xxMplR1ca
B6ryHvf/fH1+Nh+CcdxCeZ1EbzT0caFlSiZFubdVHLQOHJcPIu1ruKel0BA9bRad
EDe1Dzj6Prydiytkw7mVtOEVe+KTbfWDZDxYICR79fyW2S0+W+DUFRogZEfya+LF
37oTgYLEZIZT8KFtKpQEd4oHwq7A5FpapFgW3RVkHuJSUwh2r8+BSZC5F7f3IPfd
/ySl1U0yFq50Bh6JCK2QBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org