Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/3/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
File:                     3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa (raw, json)
Hash identifier:          66ZatxUMTk/ntlDdc7QqpDqgKktARQQdUaOo8PcMook=
Subject key identifier:   23:B3:CA:A9:CE:85:E1:4D:8B:30:85:97:BA:E3:91:0A:41:99:51:F5
Certificate issuer:       /CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
Certificate serial:       5395E634D381DA05EB7A44C71AFC84CEEADE8FE9
Authority key identifier: 9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/3/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
Signing time:             Wed 09 Oct 2024 00:37:20 +0000
ROA not before:           Wed 09 Oct 2024 00:32:20 +0000
ROA not after:            Wed 08 Oct 2025 00:37:20 +0000
asID:                     7719
IP address blocks:        199.189.156.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 09:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:95:e6:34:d3:81:da:05:eb:7a:44:c7:1a:fc:84:ce:ea:de:8f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
        Validity
            Not Before: Oct  9 00:32:20 2024 GMT
            Not After : Oct  8 00:37:20 2025 GMT
        Subject: CN=23B3CAA9CE85E14D8B308597BAE3910A419951F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:bc:ab:28:03:8c:bb:f3:12:d7:dc:0b:41:
                    b7:02:a0:3b:7d:e6:b5:c8:3b:55:da:38:e3:95:7e:
                    e0:91:ef:6b:00:a3:5d:4f:48:e8:e3:93:42:ae:db:
                    e5:03:16:d1:a0:4d:5b:44:b9:49:2d:e7:61:51:5a:
                    b0:20:9f:7a:1e:d4:89:65:35:6d:4f:6f:e0:64:47:
                    0b:6f:5c:8b:73:06:62:9b:04:50:b7:69:fb:77:f8:
                    3e:b8:13:65:89:46:11:6b:47:69:aa:e6:e8:c1:af:
                    55:42:48:0d:ce:be:3a:b8:31:ac:be:08:5f:bf:18:
                    a2:22:bc:50:c7:39:e7:2c:ab:a0:e0:be:7f:5b:96:
                    bb:c5:2d:46:62:5d:06:74:11:0b:9a:2a:77:cc:b6:
                    d0:3d:d0:5b:27:24:2e:49:a2:02:d0:47:2b:b0:5a:
                    b4:8e:b0:61:2d:45:a2:36:82:e0:6c:21:6d:a6:5e:
                    55:db:14:7e:78:bd:49:f0:0a:99:eb:94:a7:64:ca:
                    b2:cd:b8:8e:e7:a1:58:53:70:8a:90:a9:d5:44:e2:
                    9b:b7:e2:6d:ff:2e:65:c3:83:02:4a:ab:46:f8:70:
                    af:87:9c:20:87:64:a3:41:f4:96:18:88:ad:55:14:
                    cd:09:1e:24:1f:19:34:37:67:7a:84:99:1e:aa:96:
                    46:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B3:CA:A9:CE:85:E1:4D:8B:30:85:97:BA:E3:91:0A:41:99:51:F5
            X509v3 Authority Key Identifier:
                keyid:9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:17:1f:4e:0f:d0:f1:f6:31:43:fd:23:e8:8b:5b:47:8d:10:
         ca:22:de:12:56:6a:b1:a7:db:a5:ce:97:bb:6f:4f:40:19:61:
         9c:a4:ac:ab:5a:b9:2f:e6:6f:cb:05:2b:75:6d:77:0f:cc:33:
         49:69:94:81:b9:43:9b:3e:dc:f3:8b:36:73:c8:06:d7:22:ab:
         dd:05:42:a8:b4:07:74:d1:c6:fc:32:23:82:35:d1:f6:50:0a:
         67:7a:5d:69:b2:75:7a:b4:91:9b:ab:32:e3:60:d9:32:52:4f:
         8b:00:5f:41:68:fd:e8:96:72:62:a6:b2:1b:18:f0:6d:41:19:
         11:99:9f:25:be:e8:1b:9a:99:95:2f:59:2b:3d:ca:b1:05:0d:
         10:d0:8d:2e:3b:bf:a6:c2:a1:04:80:bb:6a:65:9c:37:ab:01:
         be:49:f0:72:92:9a:31:aa:10:48:e5:66:cc:4d:ae:54:bd:11:
         0f:f3:2a:c5:61:b9:40:c2:4f:3c:43:7e:c6:2a:2f:13:4f:da:
         7c:a1:66:83:ca:c9:42:cb:24:35:c4:be:99:04:91:6b:52:ad:
         35:75:ef:d1:9c:c2:50:5d:4c:47:b5:74:bc:54:75:fb:f8:7d:
         df:15:63:7e:f3:5c:d5:81:a1:ea:c2:ed:50:db:2a:1c:91:96:
         d7:e3:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----