Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e2031323339.roa
File:                     39312e3139362e36392e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          KBDjuTQA7KqCib0tZ15iau+1KuCh/hvQCMnLN7Dmvac=
Subject key identifier:   A0:B3:DA:2E:1B:25:FB:FB:C9:5F:00:DE:AC:0C:8D:F8:4F:03:E0:38
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       6F969C794717ED2F4E29D987ABBE94B3A92EB204
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e2031323339.roa
Signing time:             Sat 22 Oct 2022 04:34:01 +0000
ROA not before:           Sat 22 Oct 2022 04:29:01 +0000
ROA not after:            Sat 21 Oct 2023 04:34:01 +0000
asID:                     1239
IP address blocks:        91.196.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:96:9c:79:47:17:ed:2f:4e:29:d9:87:ab:be:94:b3:a9:2e:b2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:01 2022 GMT
            Not After : Oct 21 04:34:01 2023 GMT
        Subject: CN=A0B3DA2E1B25FBFBC95F00DEAC0C8DF84F03E038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:b8:29:8f:42:dd:f2:29:50:99:6f:e9:80:
                    2f:36:bc:eb:ce:e4:e7:39:3f:c7:87:7c:e1:ac:46:
                    b6:9d:5f:1b:e8:8e:e7:f3:17:f3:cd:76:02:96:29:
                    bd:24:3a:3b:1d:37:f3:3f:8a:27:90:ad:68:7f:dc:
                    e7:ac:24:9b:ce:58:09:74:d2:ab:ab:3b:5e:f2:15:
                    9f:bc:6c:ce:94:cb:51:22:2b:59:79:b2:4c:16:81:
                    3a:ad:93:17:72:1f:95:d9:ee:10:b3:91:35:e2:75:
                    0c:fb:6d:20:a7:a5:83:6d:d1:8a:6c:c6:dd:b1:62:
                    44:3f:ef:00:7e:13:d0:d3:9d:ab:c3:82:58:3f:fe:
                    ac:75:1e:a3:e9:1e:e6:bc:5e:f5:e3:eb:35:b8:57:
                    4f:37:c1:49:c0:08:3d:83:ee:a8:0b:59:88:4c:ac:
                    cb:0e:92:a0:d7:2f:c7:23:7c:3a:ad:0e:dc:75:6e:
                    68:40:94:eb:bc:4b:66:51:88:0d:4f:cc:38:f8:5f:
                    fc:53:2c:4b:fe:4c:6f:73:e7:f3:b2:f7:71:0d:1e:
                    0b:e4:67:ba:24:ae:47:da:e9:bf:34:1e:da:6c:31:
                    83:4f:0f:fd:d9:0c:d4:01:f8:20:20:ad:fc:f4:f9:
                    d5:cb:bb:d0:22:ff:47:3f:dc:ff:45:13:65:52:01:
                    c8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B3:DA:2E:1B:25:FB:FB:C9:5F:00:DE:AC:0C:8D:F8:4F:03:E0:38
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:d2:6a:f5:78:6c:ab:19:1b:91:9d:e5:9d:81:e4:60:69:
         5b:1b:4a:c1:88:6b:2d:7f:31:92:5e:53:9b:2d:b2:b3:c3:19:
         25:9c:d0:ac:76:c0:b0:7d:f4:ca:4a:f4:15:25:83:32:0b:6e:
         e1:ff:a3:b2:92:8f:18:75:e1:a2:f2:2f:72:37:cb:2b:81:f1:
         f0:00:18:d9:df:70:2a:6f:49:b1:da:81:c1:ea:9d:5f:a3:f6:
         54:0a:d5:ce:84:9f:31:c3:ab:a7:b2:33:09:83:ac:13:1f:41:
         60:54:cd:e0:b5:91:4a:4c:38:3d:f8:23:87:32:ee:27:dd:04:
         fb:18:83:2e:73:6c:85:e8:0d:d5:e0:7e:c1:30:a3:83:51:ac:
         78:d4:3b:55:76:9c:81:71:57:b9:64:28:db:ff:0a:69:35:05:
         9c:2b:cb:20:73:0a:20:0b:36:7b:fa:e3:60:53:d0:df:81:c8:
         49:bb:aa:e6:e5:08:32:0c:87:bf:a5:f5:b0:f4:24:90:e0:b6:
         e3:b8:c2:5f:ed:e3:df:47:a1:30:53:2b:9c:14:fa:57:a5:b3:
         23:04:f3:48:ab:f0:42:53:9d:3d:bf:45:7e:b0:9d:f1:c1:55:
         17:da:6d:65:c8:9e:c8:2b:5c:06:e8:93:69:5d:3c:47:c5:5c:
         f1:35:21:0c
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUb5aceUcX7S9OKdmHq76Us6kusgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjEwMjIwNDI5MDFaFw0yMzEwMjEwNDM0MDFaMDMxMTAvBgNV
BAMTKEEwQjNEQTJFMUIyNUZCRkJDOTVGMDBERUFDMEM4REY4NEYwM0UwMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xbgpj0Ld8ilQmW/pgC82vOvO
5Oc5P8eHfOGsRradXxvojufzF/PNdgKWKb0kOjsdN/M/iieQrWh/3OesJJvOWAl0
0qurO17yFZ+8bM6Uy1EiK1l5skwWgTqtkxdyH5XZ7hCzkTXidQz7bSCnpYNt0Yps
xt2xYkQ/7wB+E9DTnavDglg//qx1HqPpHua8XvXj6zW4V083wUnACD2D7qgLWYhM
rMsOkqDXL8cjfDqtDtx1bmhAlOu8S2ZRiA1PzDj4X/xTLEv+TG9z5/Oy93ENHgvk
Z7okrkfa6b80HtpsMYNPD/3ZDNQB+CAgrfz0+dXLu9Ai/0c/3P9FE2VSAcgVAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUoLPaLhsl+/vJXwDerAyN+E8D4DgwHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zOTMxMmUzMTM5MzYyZTM2MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMy
MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAFvERTANBgkqhkiG9w0BAQsFAAOCAQEAN/zSavV4bKsZ
G5Gd5Z2B5GBpWxtKwYhrLX8xkl5Tmy2ys8MZJZzQrHbAsH30ykr0FSWDMgtu4f+j
spKPGHXhovIvcjfLK4Hx8AAY2d9wKm9JsdqBweqdX6P2VArVzoSfMcOrp7IzCYOs
Ex9BYFTN4LWRSkw4PfgjhzLuJ90E+xiDLnNshegN1eB+wTCjg1GseNQ7VXacgXFX
uWQo2/8KaTUFnCvLIHMKIAs2e/rjYFPQ34HISbuq5uUIMgyHv6X1sPQkkOC247jC
X+3j30ehMFMrnBT6V6WzIwTzSKvwQlOdPb9FfrCd8cFVF9ptZcieyCtcBuiTaV08
R8Vc8TUhDA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org