Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a3a2f34382d3438203d3e2031303132.roa
File:                     323630313a316430383a3a2f34382d3438203d3e2031303132.roa (raw, json)
Hash identifier:          0BFoKhWCFFXAyd28zm015aVCASnSJUO89sKeqtc7vWg=
Subject key identifier:   4A:BC:5F:BB:5E:EF:9A:E7:E6:24:59:20:B8:AA:6C:A6:22:23:82:E8
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       39E27BC42E4F4000664794B4567507CA3135CD4F
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a3a2f34382d3438203d3e2031303132.roa
Signing time:             Thu 19 Sep 2024 10:04:59 +0000
ROA not before:           Thu 19 Sep 2024 09:59:59 +0000
ROA not after:            Thu 18 Sep 2025 10:04:59 +0000
asID:                     1012
IP address blocks:        2601:1d08::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 06 Oct 2024 01:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e2:7b:c4:2e:4f:40:00:66:47:94:b4:56:75:07:ca:31:35:cd:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Sep 19 09:59:59 2024 GMT
            Not After : Sep 18 10:04:59 2025 GMT
        Subject: CN=4ABC5FBB5EEF9AE7E6245920B8AA6CA6222382E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:41:17:38:9a:8c:ed:a9:93:21:1e:13:d1:
                    43:47:85:b2:41:d9:7b:60:78:98:14:8e:b4:ed:4a:
                    fc:23:d2:66:a8:85:21:00:27:5a:1f:03:d1:18:47:
                    e5:11:93:87:58:50:50:7b:ab:ae:45:87:7e:9a:80:
                    79:ec:1f:b3:2f:54:94:30:e7:57:0d:7a:74:7a:22:
                    46:8e:fd:c7:7d:be:f5:a1:7d:27:13:dc:52:5a:b9:
                    dc:3f:dd:0c:ba:f5:b9:f3:e3:32:31:a6:7d:92:85:
                    40:ee:b9:86:81:0e:f9:2a:df:4e:9b:bc:84:28:7b:
                    c4:cf:01:40:ae:c5:e3:dc:16:22:d4:38:cf:b1:3a:
                    58:a8:65:5f:c5:63:86:88:f3:ef:86:7f:36:37:2a:
                    93:5e:35:d3:5b:9a:f5:cd:4b:42:d7:8a:4a:d7:c0:
                    d6:b9:ff:07:a7:bb:25:5b:1d:29:5a:16:76:10:0e:
                    f9:c8:f5:c2:fc:0a:dc:0a:9c:25:3b:b4:31:6a:7a:
                    1e:02:34:26:e5:82:22:48:6b:4c:ac:1b:ce:fe:bd:
                    2c:f1:49:1d:69:23:2e:9c:c4:27:09:6e:2d:dd:13:
                    ba:3d:5f:1d:04:5b:37:c4:95:da:ac:6e:3b:5d:4d:
                    7a:09:8c:88:6a:b3:b0:e4:04:54:98:2c:77:60:d9:
                    49:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BC:5F:BB:5E:EF:9A:E7:E6:24:59:20:B8:AA:6C:A6:22:23:82:E8
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a3a2f34382d3438203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:ff:30:55:7a:49:19:90:a0:c7:68:6e:2f:38:b1:17:6e:87:
         17:8f:b9:22:af:93:f2:83:49:11:4e:d5:ef:27:d8:4b:d7:fc:
         78:8d:a0:9b:5f:4d:b1:c5:3f:be:4f:29:7f:74:02:65:bc:7e:
         b2:4f:16:e2:12:6b:fc:2e:67:48:68:c1:c4:ed:82:c2:15:5b:
         fc:ac:fc:2b:d5:3d:4e:e9:f3:f8:4f:62:70:18:31:ee:15:cb:
         b8:27:98:4b:07:e4:4c:3b:5c:94:ea:5e:0e:44:d6:20:55:14:
         3f:7c:9e:95:6e:f3:92:51:cd:a5:5b:3f:fa:1e:4b:32:bc:e4:
         d1:3c:9f:7d:29:5b:e8:69:b9:27:2f:79:74:34:c8:70:b2:67:
         41:ba:d0:10:c9:a3:78:d7:82:aa:7f:4d:c7:2c:01:28:47:fc:
         cd:0f:1a:81:60:43:4a:ed:ad:c0:cc:0e:e9:a8:10:8e:ee:11:
         76:62:e2:cc:ba:4c:b6:c6:8c:b4:50:3d:16:02:fe:e4:54:cd:
         40:2b:1d:49:2c:41:6b:5f:4c:e9:35:82:07:83:e5:b6:17:58:
         09:e9:84:22:55:4f:47:3d:ca:e1:75:8b:14:54:3a:35:3b:0f:
         db:d7:b6:09:9f:80:96:62:73:46:55:7b:22:bb:39:5f:8c:9c:
         fb:3b:d1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----