Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3431613a3a2f34382d3438203d3e20323135353330.roa
File:                     323630323a666161383a3431613a3a2f34382d3438203d3e20323135353330.roa (raw, json)
Hash identifier:          QM4OROwi4gNCnh9oQYQ8bduXk/HyTShvF3imfYgY9W0=
Subject key identifier:   73:A6:35:BC:D7:62:FC:5C:A2:67:C0:8F:33:D1:02:C6:5B:BF:79:6C
Certificate issuer:       /CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
Certificate serial:       6F14C52FDFA85681FD58BE566969A8134871C5C3
Authority key identifier: 1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3431613a3a2f34382d3438203d3e20323135353330.roa
Signing time:             Mon 25 Nov 2024 21:26:45 +0000
ROA not before:           Mon 25 Nov 2024 21:21:45 +0000
ROA not after:            Mon 24 Nov 2025 21:26:45 +0000
asID:                     215530
IP address blocks:        2602:faa8:41a::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:14:c5:2f:df:a8:56:81:fd:58:be:56:69:69:a8:13:48:71:c5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
        Validity
            Not Before: Nov 25 21:21:45 2024 GMT
            Not After : Nov 24 21:26:45 2025 GMT
        Subject: CN=73A635BCD762FC5CA267C08F33D102C65BBF796C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:26:51:c7:08:ed:fb:8c:a8:b5:47:69:0d:
                    32:d9:78:dd:8d:a7:6e:ff:30:0c:5c:8b:98:2e:c3:
                    f0:a5:b4:63:fb:34:81:1d:56:67:0f:b4:77:74:a3:
                    56:b4:94:04:89:78:8c:45:e2:39:0e:90:56:42:79:
                    0e:aa:84:56:16:5d:4f:9e:bb:c1:2c:b2:63:28:bf:
                    14:fd:74:b1:f0:4a:97:93:83:61:51:58:0e:35:8a:
                    b2:12:fb:1f:de:2c:49:89:a3:9f:a1:8c:4f:4b:56:
                    67:03:75:85:a9:85:ad:81:c7:a2:12:d0:0e:a4:fa:
                    e1:3d:f2:66:e5:3f:ea:70:c4:0d:59:25:66:94:1a:
                    8d:cf:f1:c1:0a:3c:83:85:88:c6:86:79:0a:9f:52:
                    14:58:09:e8:54:9b:fd:f6:c7:cd:f9:e8:40:1b:7b:
                    86:56:ab:86:07:38:a6:16:e3:f3:b0:b0:0d:58:7b:
                    a6:2c:a2:bf:1b:f5:e8:57:ac:b8:2f:0e:f5:d1:fc:
                    5a:06:29:1e:00:ed:6c:24:fe:f1:ed:01:84:57:41:
                    a3:6e:a5:f2:dd:61:5e:b4:96:9f:9a:1e:ad:42:35:
                    3b:38:21:6f:bc:72:e8:1f:eb:c8:10:21:2d:9e:73:
                    a5:20:95:03:f0:40:e2:29:35:22:b9:3f:69:c5:9c:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A6:35:BC:D7:62:FC:5C:A2:67:C0:8F:33:D1:02:C6:5B:BF:79:6C
            X509v3 Authority Key Identifier:
                keyid:1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3431613a3a2f34382d3438203d3e20323135353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:41a::/48

    Signature Algorithm: sha256WithRSAEncryption
         dd:06:3a:f1:a3:57:67:eb:c1:21:24:4f:e7:30:a1:fd:73:74:
         50:b1:e6:5f:70:0b:26:10:ea:c5:4e:dd:03:be:0e:16:7c:8d:
         a2:f9:c2:2d:79:92:32:ef:cb:0d:07:7f:19:cd:b7:89:15:43:
         88:8b:bd:2d:f6:50:cf:bd:78:32:94:5f:73:dd:11:b8:2c:a9:
         14:51:d4:05:4d:9a:8e:52:3d:b2:e8:d0:f3:a0:c1:52:a4:0f:
         57:29:7d:92:b8:53:5a:1c:56:be:67:4a:5c:67:c3:a8:60:a5:
         f8:c4:74:20:b5:24:72:72:02:c6:3d:70:2c:6e:50:88:33:ca:
         59:e5:d3:32:1c:ac:82:db:57:95:cd:03:4b:05:e8:4a:87:10:
         cc:4e:d8:7d:af:d2:f1:f3:e3:6c:4d:e9:55:35:34:8a:c4:37:
         bd:20:87:e5:fa:20:6b:b7:12:27:bf:33:89:dd:dd:91:5c:8e:
         a7:64:92:8c:74:c6:a9:fe:ba:58:09:b2:98:35:00:8b:47:59:
         d5:47:29:e1:c2:b0:cb:11:f9:b9:bd:b2:17:fc:d5:e7:93:a0:
         08:ad:96:34:03:4a:08:ae:cf:09:20:f0:8a:bc:d4:61:b6:70:
         4b:3c:91:4e:a7:ff:55:18:cb:b7:f3:ce:f5:ca:92:83:6d:29:
         4a:aa:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----