Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/2/3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa
File:                     3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa (raw, json)
Hash identifier:          R/ERms8mvz7Mqhyy0QCi39POsCNGyQuaggNmROn/qpM=
Subject key identifier:   76:A5:C8:C0:4E:55:D6:23:6F:C4:AE:13:C6:9A:A8:E6:98:05:04:48
Certificate issuer:       /CN=62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff
Certificate serial:       4B5332094DE026787F7CC40EF00DD4BB9C64EB11
Authority key identifier: 3A:50:25:3B:A3:B3:EF:71:13:81:A9:0C:B5:6A:6B:4B:4E:E5:DF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/2/3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa
Signing time:             Mon 07 Oct 2024 06:42:36 +0000
ROA not before:           Mon 07 Oct 2024 06:37:36 +0000
ROA not after:            Mon 06 Oct 2025 06:42:36 +0000
asID:                     401111
IP address blocks:        140.235.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 06 Dec 2024 09:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:53:32:09:4d:e0:26:78:7f:7c:c4:0e:f0:0d:d4:bb:9c:64:eb:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff
        Validity
            Not Before: Oct  7 06:37:36 2024 GMT
            Not After : Oct  6 06:42:36 2025 GMT
        Subject: CN=76A5C8C04E55D6236FC4AE13C69AA8E698050448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:62:b9:3a:84:0f:1c:87:c8:52:ef:7f:47:
                    e1:97:6b:e4:07:cf:61:81:af:19:e7:86:95:63:01:
                    18:7e:50:a6:27:43:ba:02:af:47:45:a7:a6:b6:77:
                    9d:26:c1:92:61:c7:db:08:bd:c2:a8:2c:48:63:57:
                    4d:20:d3:fe:eb:01:94:db:23:fa:66:96:26:23:82:
                    56:5c:52:65:85:a1:96:a4:b1:aa:1d:a0:0c:06:2e:
                    30:50:8e:21:e0:b7:d5:aa:0f:e7:a6:aa:52:6b:f9:
                    69:b0:74:eb:4f:ca:cb:e6:dd:9e:7f:c1:3d:a5:ef:
                    ff:bc:b0:7b:f3:32:82:49:be:96:02:af:7d:70:24:
                    cd:ab:2e:05:35:9a:2e:0d:46:8d:1b:1a:bb:81:c1:
                    5f:04:3b:70:ae:94:b9:c3:20:37:f8:fc:2a:65:91:
                    55:e3:ac:dc:8d:ff:8d:9a:5d:e2:c5:58:76:35:d5:
                    df:60:6e:49:8a:19:4b:ec:de:ff:fa:db:dc:2d:6d:
                    a9:6f:c3:ac:e6:11:3d:0d:7a:8d:76:81:41:69:c7:
                    0a:20:31:8f:7e:24:92:a6:c2:21:67:50:c8:9d:fc:
                    4a:7b:51:17:59:a5:ee:ec:02:77:28:0c:7a:a7:ff:
                    45:29:d4:fa:00:98:55:af:cc:75:7b:40:da:cc:65:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A5:C8:C0:4E:55:D6:23:6F:C4:AE:13:C6:9A:A8:E6:98:05:04:48
            X509v3 Authority Key Identifier:
                keyid:3A:50:25:3B:A3:B3:EF:71:13:81:A9:0C:B5:6A:6B:4B:4E:E5:DF:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/2/3A50253BA3B3EF711381A90CB56A6B4B4EE5DF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/2/3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:71:01:b9:2e:c8:4d:fb:9b:5a:49:03:fa:6f:cc:9d:05:ac:
         6d:6b:97:98:05:b8:f4:a7:bb:c8:09:a3:9d:d8:5e:51:84:1f:
         c1:26:b5:b5:fc:4a:14:b0:88:59:fb:f2:b3:77:3a:4c:15:9b:
         18:3c:d7:e6:51:ed:c8:ab:ee:5b:cd:b7:08:7f:db:5c:52:f9:
         b1:1f:94:85:5d:2f:f4:18:c2:7e:95:d9:03:86:d8:2c:98:84:
         e2:f7:9c:c8:07:ef:a5:79:81:2a:0e:bf:bb:a6:b4:68:a4:d9:
         a7:70:b7:df:65:80:88:d0:64:f6:a0:8e:e8:51:83:36:31:b1:
         58:14:6b:56:ef:03:44:59:10:21:9e:11:b5:b1:e8:c7:b8:2e:
         e4:70:11:f6:22:1b:6b:08:88:53:ca:08:46:bc:85:73:60:ca:
         6b:ab:65:e8:9c:70:63:b7:1c:b4:00:a4:03:a3:c3:1d:52:c5:
         64:2a:ba:0b:27:82:f1:2a:61:1d:65:7c:26:a3:1a:5f:61:7f:
         f9:5d:29:7b:06:8c:1a:63:c6:f0:32:a3:43:7f:f3:f7:5a:c5:
         d6:ec:9c:b9:e6:ce:d3:35:ce:a6:ad:69:15:9b:fa:1c:56:ef:
         99:0e:0a:29:07:f7:06:a3:64:1d:ec:8a:30:b6:32:cf:c5:c3:
         42:d3:cb:f8
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgIUS1MyCU3gJnh/fMQO8A3Uu5xk6xEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjJmM2QwYWYxNmY5MjA5MmQyOTlhMzI2OGExZjE0ZmVi
MTIwMWQ3MTFjNDliMWVkZmYwHhcNMjQxMDA3MDYzNzM2WhcNMjUxMDA2MDY0MjM2
WjAzMTEwLwYDVQQDEyg3NkE1QzhDMDRFNTVENjIzNkZDNEFFMTNDNjlBQThFNjk4
MDUwNDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnohiuTqEDxyH
yFLvf0fhl2vkB89hga8Z54aVYwEYflCmJ0O6Aq9HRaemtnedJsGSYcfbCL3CqCxI
Y1dNINP+6wGU2yP6ZpYmI4JWXFJlhaGWpLGqHaAMBi4wUI4h4LfVqg/npqpSa/lp
sHTrT8rL5t2ef8E9pe//vLB78zKCSb6WAq99cCTNqy4FNZouDUaNGxq7gcFfBDtw
rpS5wyA3+PwqZZFV46zcjf+Nml3ixVh2NdXfYG5JihlL7N7/+tvcLW2pb8Os5hE9
DXqNdoFBaccKIDGPfiSSpsIhZ1DInfxKe1EXWaXu7AJ3KAx6p/9FKdT6AJhVr8x1
e0DazGX+1QIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFHalyMBOVdYjb8SuE8aaqOaY
BQRIMB8GA1UdIwQYMBaAFDpQJTujs+9xE4GpDLVqa0tO5d9EMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL290by53YWt1d2FrdS5uZS5q
cC9wa2kvaGEvMi8zQTUwMjUzQkEzQjNFRjcxMTM4MUE5MENCNTZBNkI0QjRFRTVE
RjQ0LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDkt
YWNjZS0xMzcyMjdlOTcxYWMvN2EwNTRkMWUtODMyNi00MmE3LWIxYWQtMDJiMzAy
ODdiNDgzLzYyZjNkMGFmMTZmOTIwOTJkMjk5YTMyNjhhMWYxNGZlYjEyMDFkNzEx
YzQ5YjFlZGZmLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5j
Oi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9oYS8yLzMxMzQzMDJlMzIzMzM1MmUz
MTMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzEzMTMxMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACM63kwDQYJKoZIhvcNAQELBQADggEBACtxAbkuyE37m1pJA/pvzJ0FrG1r
l5gFuPSnu8gJo53YXlGEH8EmtbX8ShSwiFn78rN3OkwVmxg81+ZR7cir7lvNtwh/
21xS+bEflIVdL/QYwn6V2QOG2CyYhOL3nMgH76V5gSoOv7umtGik2adwt99lgIjQ
ZPagjuhRgzYxsVgUa1bvA0RZECGeEbWx6Me4LuRwEfYiG2sIiFPKCEa8hXNgymur
ZeiccGO3HLQApAOjwx1SxWQqugsngvEqYR1lfCajGl9hf/ldKXsGjBpjxvAyo0N/
8/daxdbsnLnmztM1zqataRWb+hxW75kOCikH9wajZB3sijC2Ms/Fw0LTy/g=
-----END CERTIFICATE-----