Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e382e302f32342d3234203d3e203134363531.roa
File:                     32332e3135302e382e302f32342d3234203d3e203134363531.roa (raw, json)
Hash identifier:          RbNW4HN7aDauW5s2SXF/eNm8uWKmSd1b6qkJNvVwRac=
Subject key identifier:   E9:E0:5A:AE:0D:2A:31:8B:6E:79:21:4D:04:E4:E8:CC:2C:B4:9B:59
Certificate issuer:       /CN=a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7
Certificate serial:       18A97867174AE0C22D38601EF965383EDA49F799
Authority key identifier: 5F:6A:78:7C:1D:0A:9C:15:86:23:4E:60:78:A0:CD:6F:00:B1:DA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e382e302f32342d3234203d3e203134363531.roa
Signing time:             Tue 28 Jan 2025 19:12:30 +0000
ROA not before:           Tue 28 Jan 2025 19:07:30 +0000
ROA not after:            Tue 27 Jan 2026 19:12:30 +0000
asID:                     14651
IP address blocks:        23.150.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a9:78:67:17:4a:e0:c2:2d:38:60:1e:f9:65:38:3e:da:49:f7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7
        Validity
            Not Before: Jan 28 19:07:30 2025 GMT
            Not After : Jan 27 19:12:30 2026 GMT
        Subject: CN=E9E05AAE0D2A318B6E79214D04E4E8CC2CB49B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:f3:48:9c:86:92:d8:ac:62:07:fe:a2:57:
                    af:c7:ae:4d:14:be:85:46:b1:39:e4:3a:14:7b:ff:
                    41:4a:70:0c:3f:cc:dc:24:ac:af:95:c2:c2:98:86:
                    d6:f1:94:1e:03:3f:46:4f:71:96:0a:30:04:8b:4e:
                    5d:54:27:18:9e:21:f4:31:0e:d9:07:a2:23:df:ab:
                    0c:f3:68:9d:12:82:5a:f9:89:f1:69:ff:8f:f4:d5:
                    80:32:a8:45:c5:e2:71:fa:6d:09:33:73:f4:c1:b8:
                    2a:88:88:be:ae:d5:a0:1b:85:31:ae:6f:5c:b8:83:
                    a5:9f:aa:8c:bb:72:0b:6f:70:88:c7:c6:1a:bd:b7:
                    99:08:4b:1c:de:6a:4f:a6:e8:4a:a9:62:21:b2:1a:
                    b0:17:25:9b:98:fe:1f:3f:02:25:6c:3c:97:86:4c:
                    42:6b:f6:4a:39:6c:89:4c:fb:f2:ff:66:f6:1a:1e:
                    20:e1:c4:f6:d9:7c:e1:03:2f:39:60:29:6f:84:78:
                    57:e7:f5:05:98:fe:fa:33:de:b6:5c:fa:53:9e:70:
                    20:b3:96:c9:98:0d:7c:5d:30:6c:ac:dc:dd:9e:a2:
                    b7:d8:a2:22:6d:3d:91:db:3b:cb:4a:14:21:4e:19:
                    36:c7:a7:e1:1f:e1:5e:0f:fd:d8:52:74:07:1f:81:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E0:5A:AE:0D:2A:31:8B:6E:79:21:4D:04:E4:E8:CC:2C:B4:9B:59
            X509v3 Authority Key Identifier:
                keyid:5F:6A:78:7C:1D:0A:9C:15:86:23:4E:60:78:A0:CD:6F:00:B1:DA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/1/5F6A787C1D0A9C1586234E6078A0CD6F00B1DA62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e382e302f32342d3234203d3e203134363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:fe:47:e5:8f:1a:00:b0:af:a7:07:22:dc:a5:3d:cb:66:3e:
         6e:75:c0:75:5f:f4:7b:1d:67:bc:c8:dc:64:1f:0f:cf:0d:b8:
         89:4a:40:6e:c4:bf:ae:92:08:a2:ef:9d:56:0f:27:a3:da:3d:
         2a:bf:26:11:c5:a6:c4:56:4b:6c:4b:a8:8e:5d:62:5f:5b:bf:
         ac:11:6e:33:02:de:cc:23:e1:f6:5e:f2:ec:57:98:33:cc:44:
         60:11:49:05:7d:11:49:3e:f6:df:6d:9a:20:76:36:be:93:43:
         b8:0b:13:e8:58:1f:ff:82:c0:1a:49:9b:c2:ba:9f:27:bb:85:
         03:8d:6c:a8:76:cb:29:c3:ed:cb:e6:b3:2b:29:21:71:1c:72:
         ab:a9:69:da:e2:75:71:6b:ba:76:5e:1f:71:04:40:ff:43:84:
         42:42:24:ab:8c:07:af:e6:c3:8f:0a:3e:0e:9f:8f:b0:0e:f9:
         69:23:a0:31:74:45:5a:f0:88:9b:55:f6:1a:d2:ab:b2:9b:f4:
         4e:d2:d7:5f:95:b6:8d:ff:b6:1a:97:70:d8:2a:79:71:bf:eb:
         58:8d:52:7d:fe:c5:8a:67:76:3a:e7:42:f6:1d:72:4d:32:71:
         12:db:f7:b9:25:f0:55:41:5e:b2:d3:a9:b8:e9:e5:c8:ac:f0:
         1e:fd:9f:36
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGKl4ZxdK4MItOGAe+WU4PtpJ95kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTYyMDFlZmQ0YzQ1OTVlOWVkNDQ2NWY5MjcyOGMzNjMy
MzcxOTk3NzllMjUzNWZmYTcwHhcNMjUwMTI4MTkwNzMwWhcNMjYwMTI3MTkxMjMw
WjAzMTEwLwYDVQQDEyhFOUUwNUFBRTBEMkEzMThCNkU3OTIxNEQwNEU0RThDQzJD
QjQ5QjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWvzSJyGktis
Ygf+olevx65NFL6FRrE55DoUe/9BSnAMP8zcJKyvlcLCmIbW8ZQeAz9GT3GWCjAE
i05dVCcYniH0MQ7ZB6Ij36sM82idEoJa+Ynxaf+P9NWAMqhFxeJx+m0JM3P0wbgq
iIi+rtWgG4Uxrm9cuIOln6qMu3ILb3CIx8YavbeZCEsc3mpPpuhKqWIhshqwFyWb
mP4fPwIlbDyXhkxCa/ZKOWyJTPvy/2b2Gh4g4cT22XzhAy85YClvhHhX5/UFmP76
M962XPpTnnAgs5bJmA18XTBsrNzdnqK32KIibT2R2zvLShQhThk2x6fhH+FeD/3Y
UnQHH4GbjQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOngWq4NKjGLbnkhTQTk6Mws
tJtZMB8GA1UdIwQYMBaAFF9qeHwdCpwVhiNOYHigzW8AsdpiMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL290by53YWt1d2FrdS5uZS5q
cC9wa2kvaGEvMS81RjZBNzg3QzFEMEE5QzE1ODYyMzRFNjA3OEEwQ0Q2RjAwQjFE
QTYyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMt
YmRhNy0xYmUyMDQ5MzNhZTUvNDZjMDdlNzYtNjZkOC00OGQ3LTgyNmEtODVkZTI5
YzY2YTIyL2E2MjAxZWZkNGM0NTk1ZTllZDQ0NjVmOTI3MjhjMzYzMjM3MTk5Nzc5
ZTI1MzVmZmE3LmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5j
Oi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9oYS8xLzMyMzMyZTMxMzUzMDJlMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YI
MA0GCSqGSIb3DQEBCwUAA4IBAQBP/kfljxoAsK+nByLcpT3LZj5udcB1X/R7HWe8
yNxkHw/PDbiJSkBuxL+ukgii751WDyej2j0qvyYRxabEVktsS6iOXWJfW7+sEW4z
At7MI+H2XvLsV5gzzERgEUkFfRFJPvbfbZogdja+k0O4CxPoWB//gsAaSZvCup8n
u4UDjWyodsspw+3L5rMrKSFxHHKrqWna4nVxa7p2Xh9xBED/Q4RCQiSrjAev5sOP
Cj4On4+wDvlpI6AxdEVa8IibVfYa0quym/RO0tdflbaN/7Yal3DYKnlxv+tYjVJ9
/sWKZ3Y650L2HXJNMnES2/e5JfBVQV6y06m46eXIrPAe/Z82
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:34 2025 by rpki-client