Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/sky/1/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          dYElFv0akrMblbAFwehsVElhtBETd3VMqAo0PG3uf40=
Subject key identifier:   B3:1F:23:15:F4:ED:A3:4C:DB:84:25:63:60:F3:FA:74:89:92:1B:09
Certificate issuer:       /CN=dedcb2f7c0c730ab32b7d8f1368980597b93201dc6823703fb
Certificate serial:       1660167CB04D4D59602364EF4701197A255226BA
Authority key identifier: 3B:94:5F:63:33:28:78:06:CE:60:D0:99:BC:69:E8:23:DB:CA:62:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c730ab32b7d8f1368980597b93201dc6823703fb.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/sky/1/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Mon 25 Nov 2024 21:32:11 +0000
ROA not before:           Mon 25 Nov 2024 21:27:11 +0000
ROA not after:            Mon 24 Nov 2025 21:32:11 +0000
asID:                     10103
IP address blocks:        2607:74c0:120::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:60:16:7c:b0:4d:4d:59:60:23:64:ef:47:01:19:7a:25:52:26:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c0c730ab32b7d8f1368980597b93201dc6823703fb
        Validity
            Not Before: Nov 25 21:27:11 2024 GMT
            Not After : Nov 24 21:32:11 2025 GMT
        Subject: CN=B31F2315F4EDA34CDB84256360F3FA7489921B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:5b:93:77:da:75:0a:d8:e8:6f:8a:25:c7:
                    cd:cf:12:38:af:4e:4a:1c:7b:31:86:d3:44:9c:7f:
                    9a:4b:90:7f:d4:bf:e7:10:27:a4:56:63:9b:44:15:
                    55:18:ec:3e:36:5a:6f:47:60:23:6d:08:46:f6:cd:
                    7e:78:77:e2:26:b6:b0:83:ca:7b:71:0f:d6:04:66:
                    66:11:c5:e9:2d:51:ed:2b:cd:ba:7a:85:ad:a9:11:
                    49:a0:35:90:a6:7e:20:4d:16:6a:4a:e5:a4:39:de:
                    72:85:20:57:a8:49:3b:21:fc:83:37:c9:8b:6a:a7:
                    d4:e8:5f:9b:b1:ec:cb:d4:ed:80:f4:a6:bb:8d:89:
                    4d:2c:3e:71:2d:78:d9:31:45:35:ae:67:86:d8:0e:
                    84:65:d6:95:a2:04:59:4b:02:2a:54:ee:85:d4:22:
                    49:8f:6d:67:df:e2:8a:ee:80:d1:b9:f1:03:f3:81:
                    54:a3:ed:0c:19:0f:18:b3:c4:07:f0:57:22:d7:a6:
                    ad:cc:2c:ba:fa:8e:2f:f3:cf:ea:c8:17:7c:66:96:
                    e2:90:6b:16:9e:ed:d7:c1:4b:73:88:1f:51:a5:39:
                    8d:a0:e7:b6:08:5f:86:2f:b5:99:55:07:77:3f:8e:
                    d2:ca:aa:4a:c9:e5:f3:4c:26:b6:b3:1a:98:16:e4:
                    5d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1F:23:15:F4:ED:A3:4C:DB:84:25:63:60:F3:FA:74:89:92:1B:09
            X509v3 Authority Key Identifier:
                keyid:3B:94:5F:63:33:28:78:06:CE:60:D0:99:BC:69:E8:23:DB:CA:62:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/sky/1/3B945F6333287806CE60D099BC69E823DBCA62B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c730ab32b7d8f1368980597b93201dc6823703fb.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/sky/1/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         d2:3f:25:98:e0:27:66:de:3b:cc:1c:4d:31:4f:79:ee:27:00:
         d0:6b:b7:28:3a:b5:f3:4d:f8:84:03:d3:49:a5:01:fb:0f:ed:
         31:7e:94:ed:89:05:8e:e6:c4:77:2f:76:fb:b3:ab:e3:70:b5:
         ae:00:ed:2a:f6:87:55:00:aa:e4:10:8b:9b:db:91:6b:a2:32:
         d5:cd:c4:9b:05:ba:ce:4d:69:21:df:c9:a4:a2:a1:28:f1:4d:
         ee:3c:3b:6e:82:67:35:e6:21:e8:42:70:a2:06:e0:20:da:93:
         7c:31:e2:8b:af:fb:2f:5d:53:f6:2f:02:1f:0c:1a:98:58:be:
         5b:0e:90:2c:78:79:cf:d7:d9:25:fd:fc:74:67:46:25:4b:8a:
         d8:11:3d:b4:ff:93:0e:fb:26:b0:e5:4a:65:02:c8:80:e4:02:
         cd:0b:a9:26:af:90:3d:ce:79:87:26:fc:00:ac:c8:4f:eb:c3:
         2f:a0:56:bc:64:94:6c:e0:ef:2b:84:81:67:75:41:7d:3a:17:
         ff:d1:a1:34:ed:c4:3c:ac:b3:07:31:28:d6:8a:cd:bd:86:4b:
         34:e6:db:37:b9:cf:21:25:00:ed:1c:18:ee:12:9c:68:54:91:
         d7:1f:59:2d:3d:b9:36:f6:d3:27:49:aa:d6:24:6d:48:9c:f5:
         89:df:2d:a6
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUFmAWfLBNTVlgI2TvRwEZeiVSJrowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGVkY2IyZjdjMGM3MzBhYjMyYjdkOGYxMzY4OTgwNTk3
YjkzMjAxZGM2ODIzNzAzZmIwHhcNMjQxMTI1MjEyNzExWhcNMjUxMTI0MjEzMjEx
WjAzMTEwLwYDVQQDEyhCMzFGMjMxNUY0RURBMzRDREI4NDI1NjM2MEYzRkE3NDg5
OTIxQjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDlbk3fadQrY
6G+KJcfNzxI4r05KHHsxhtNEnH+aS5B/1L/nECekVmObRBVVGOw+NlpvR2AjbQhG
9s1+eHfiJrawg8p7cQ/WBGZmEcXpLVHtK826eoWtqRFJoDWQpn4gTRZqSuWkOd5y
hSBXqEk7IfyDN8mLaqfU6F+bsezL1O2A9Ka7jYlNLD5xLXjZMUU1rmeG2A6EZdaV
ogRZSwIqVO6F1CJJj21n3+KK7oDRufED84FUo+0MGQ8Ys8QH8Fci16atzCy6+o4v
88/qyBd8ZpbikGsWnu3XwUtziB9RpTmNoOe2CF+GL7WZVQd3P47SyqpKyeXzTCa2
sxqYFuRdfwIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFLMfIxX07aNM24QlY2Dz+nSJ
khsJMB8GA1UdIwQYMBaAFDuUX2MzKHgGzmDQmbxp6CPbymK4MA4GA1UdDwEB/wQE
AwIHgDBiBgNVHR8EWzBZMFegVaBThlFyc3luYzovL290by53YWt1d2FrdS5uZS5q
cC9wa2kvc2t5LzEvM0I5NDVGNjMzMzI4NzgwNkNFNjBEMDk5QkM2OUU4MjNEQkNB
NjJCOC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5j
Oi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNl
YS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1
LWEwYTktOTc4MTQ4MzIxYTA3LzI3OWMxNGE3LWM2ZGEtNDE1NS1iODc1LTg1ZDc1
MDc4ZWIzNi9kZWRjYjJmN2MwYzczMGFiMzJiN2Q4ZjEzNjg5ODA1OTdiOTMyMDFk
YzY4MjM3MDNmYi5jZXIwgYEGCCsGAQUFBwELBHUwczBxBggrBgEFBQcwC4ZlcnN5
bmM6Ly9vdG8ud2FrdXdha3UubmUuanAvcGtpL3NreS8xLzMyMzYzMDM3M2EzNzM0
NjMzMDNhMzEzMjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzEzMDMxMzAzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCYHdMABIDANBgkqhkiG9w0BAQsFAAOCAQEA0j8lmOAnZt47zBxN
MU957icA0Gu3KDq18034hAPTSaUB+w/tMX6U7YkFjubEdy92+7Or43C1rgDtKvaH
VQCq5BCLm9uRa6Iy1c3EmwW6zk1pId/JpKKhKPFN7jw7boJnNeYh6EJwogbgINqT
fDHii6/7L11T9i8CHwwamFi+Ww6QLHh5z9fZJf38dGdGJUuK2BE9tP+TDvsmsOVK
ZQLIgOQCzQupJq+QPc55hyb8AKzIT+vDL6BWvGSUbODvK4SBZ3VBfToX/9GhNO3E
PKyzBzEo1orNvYZLNObbN7nPISUA7RwY7hKcaFSR1x9ZLT25NvbTJ0mq1iRtSJz1
id8tpg==
-----END CERTIFICATE-----