Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/3/32332e3133382e3233322e302f32342d3234203d3e2031303132.roa
File:                     32332e3133382e3233322e302f32342d3234203d3e2031303132.roa (raw, json)
Hash identifier:          66/Febr6kbcWuRSdo01GZ0qJSZrH+2B0EBg8RMxxDB0=
Subject key identifier:   75:0E:63:59:34:A4:61:F1:A6:0C:CC:07:BA:BF:16:35:6F:95:9E:C1
Certificate issuer:       /CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
Certificate serial:       1F36A7EDD4C202CB157D5B8F37D3B5D33B262E10
Authority key identifier: 9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/3/32332e3133382e3233322e302f32342d3234203d3e2031303132.roa
Signing time:             Sun 29 Dec 2024 22:26:47 +0000
ROA not before:           Sun 29 Dec 2024 22:21:47 +0000
ROA not after:            Sun 28 Dec 2025 22:26:47 +0000
asID:                     1012
IP address blocks:        23.138.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:36:a7:ed:d4:c2:02:cb:15:7d:5b:8f:37:d3:b5:d3:3b:26:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
        Validity
            Not Before: Dec 29 22:21:47 2024 GMT
            Not After : Dec 28 22:26:47 2025 GMT
        Subject: CN=750E635934A461F1A60CCC07BABF16356F959EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:d3:2a:22:23:02:00:39:39:5d:c4:5a:5f:
                    2c:89:8c:5c:6d:41:a8:78:53:11:39:88:5e:b9:66:
                    4c:11:9d:f8:d1:c6:c9:76:26:e1:2b:a5:c3:53:d2:
                    fd:9d:ee:62:bd:52:f7:fb:2a:8e:7b:f6:9a:65:ad:
                    fd:cc:93:1a:21:d3:fd:ae:89:e9:35:b7:63:a4:43:
                    0b:63:ec:de:79:29:8d:ae:b5:53:d0:d3:7b:9a:6a:
                    2e:24:b2:c3:46:eb:01:ec:0a:49:2e:5e:bf:d4:3f:
                    20:dd:09:c0:c5:3f:d9:17:09:ea:bf:4f:9b:a9:e7:
                    34:aa:f2:be:0d:c8:ba:8f:be:f8:3e:66:7a:26:5f:
                    19:dc:19:3c:da:50:98:7f:c0:cb:1c:c2:b2:e1:64:
                    74:78:1c:7d:fe:b3:dd:3b:ba:3a:72:e5:74:16:4f:
                    d2:3e:85:8b:9b:43:9e:b4:3d:68:a1:25:9f:d6:c4:
                    a2:af:be:28:16:28:7c:86:42:d9:92:ff:21:2b:75:
                    fe:47:7c:58:81:fa:8e:96:de:35:40:0e:86:f9:32:
                    9a:52:af:bb:a7:6a:3a:d7:31:eb:5c:53:a2:6a:50:
                    26:81:3c:42:f7:9f:11:66:eb:e1:50:04:27:c3:9b:
                    71:8d:5f:25:80:f8:7d:28:98:8f:cb:a5:76:7b:c4:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0E:63:59:34:A4:61:F1:A6:0C:CC:07:BA:BF:16:35:6F:95:9E:C1
            X509v3 Authority Key Identifier:
                keyid:9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/32332e3133382e3233322e302f32342d3234203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:05:25:73:d7:e3:1f:3d:47:2b:26:84:81:c8:a2:53:c0:72:
         5f:a9:d0:4e:d8:7b:f0:85:ef:c5:52:1b:80:9f:32:88:bc:c4:
         81:b8:a1:2e:c9:6d:0f:27:e3:f8:52:eb:10:15:39:13:80:82:
         36:f8:b3:de:9e:fc:68:60:13:35:f6:43:27:7c:c6:cc:7b:f7:
         18:f8:b7:5b:ee:57:69:32:7b:4a:6f:fd:5e:fd:0b:92:ac:b1:
         ca:67:fb:6e:a6:0f:8c:a7:3e:d5:69:47:78:2d:36:75:47:6a:
         c4:9b:c2:2a:65:c7:6b:06:bd:ae:ce:1e:8e:67:1d:6d:f8:31:
         44:8a:3d:82:d7:fd:32:49:ed:59:f0:23:d6:36:c8:93:76:90:
         8d:16:b6:36:b4:b5:47:6e:d5:22:ab:f8:49:7e:5c:1f:65:28:
         b9:e6:1e:23:b6:9a:3c:cd:22:c0:53:54:17:09:2b:59:0a:19:
         36:ea:97:06:83:59:54:95:ab:cf:74:79:17:be:b7:52:c1:c1:
         1e:5c:e7:ec:9c:68:4a:f1:85:ea:d9:c4:19:8d:39:cf:48:51:
         ed:01:f5:e1:a7:53:74:b8:a1:f9:af:9e:1f:83:46:08:7e:a9:
         66:b8:c6:58:dd:d5:5a:6d:8f:42:28:1a:c9:06:e9:60:d0:c9:
         48:b9:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:06:06 2025 by rpki-client