Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/2/323630363a623063303a3a2f33362d3438203d3e203632343839.roa
File:                     323630363a623063303a3a2f33362d3438203d3e203632343839.roa (raw, json)
Hash identifier:          QqmGCgHbQSkdivJmhgClAFMzGNCP8FKRjOkzepnFL/U=
Subject key identifier:   53:49:2A:1A:87:76:EF:F7:24:82:BD:12:13:32:B5:37:4A:CC:BE:08
Certificate issuer:       /CN=62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff
Certificate serial:       740EA2ADF24F758B573AE3C8DFDCF267DCFC35E2
Authority key identifier: 3A:50:25:3B:A3:B3:EF:71:13:81:A9:0C:B5:6A:6B:4B:4E:E5:DF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/2/323630363a623063303a3a2f33362d3438203d3e203632343839.roa
Signing time:             Wed 19 Feb 2025 05:09:25 +0000
ROA not before:           Wed 19 Feb 2025 05:04:25 +0000
ROA not after:            Wed 18 Feb 2026 05:09:25 +0000
asID:                     62489
IP address blocks:        2606:b0c0::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0e:a2:ad:f2:4f:75:8b:57:3a:e3:c8:df:dc:f2:67:dc:fc:35:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff
        Validity
            Not Before: Feb 19 05:04:25 2025 GMT
            Not After : Feb 18 05:09:25 2026 GMT
        Subject: CN=53492A1A8776EFF72482BD121332B5374ACCBE08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:fb:a1:ea:a7:07:d6:af:42:fd:42:6d:06:
                    84:1f:ec:a6:45:4e:77:83:b1:c5:be:77:e1:08:c0:
                    ab:18:f8:84:11:89:61:4f:10:95:ab:e3:f4:a4:a4:
                    fb:41:90:1f:e7:52:e0:9a:ac:ba:ec:99:9f:b1:f3:
                    6d:0b:1c:0b:f0:7c:74:ca:2c:2a:84:5a:36:6e:fc:
                    c7:c8:9c:cc:7a:33:b8:ea:0c:8e:ba:39:e0:8a:a3:
                    5e:c4:f5:09:74:6e:fb:c7:0d:e6:f9:53:82:ac:15:
                    98:ee:e7:f7:a3:9d:55:72:d8:88:e2:2c:10:4d:4d:
                    b0:29:a7:61:d5:04:f3:6f:bd:e1:5b:76:e7:5b:f5:
                    fc:4b:0c:46:33:5a:9a:c3:e8:25:91:0b:3a:e4:c5:
                    53:2c:3d:93:03:50:1c:3c:b4:27:0a:d1:3f:87:91:
                    8c:b6:e2:89:b7:7c:7a:21:a1:40:19:27:f4:64:0a:
                    6e:dc:d6:69:cc:6a:7f:f7:1b:9d:fd:a5:ef:2e:31:
                    9c:4e:66:ab:16:0d:08:ef:cb:3e:23:70:16:ec:90:
                    2d:dc:32:d9:bd:c7:d7:05:fd:5b:d7:f5:dd:75:40:
                    43:48:42:6a:9e:43:e1:64:ea:05:ae:5c:30:76:0c:
                    04:f0:58:ca:7b:81:39:82:71:c1:e9:2e:62:40:70:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:49:2A:1A:87:76:EF:F7:24:82:BD:12:13:32:B5:37:4A:CC:BE:08
            X509v3 Authority Key Identifier:
                keyid:3A:50:25:3B:A3:B3:EF:71:13:81:A9:0C:B5:6A:6B:4B:4E:E5:DF:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/2/3A50253BA3B3EF711381A90CB56A6B4B4EE5DF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/2/323630363a623063303a3a2f33362d3438203d3e203632343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:2f:90:0e:57:dc:f9:67:57:6d:04:09:06:de:f0:8b:51:da:
         cc:f9:f6:a8:78:af:05:19:2f:0f:d7:c9:1b:a8:88:a7:7b:93:
         af:ee:a2:41:87:f3:da:9d:8e:dc:6a:5f:38:6b:e2:6c:36:d8:
         fc:09:7d:f7:0d:73:ed:33:78:82:42:2c:20:01:a9:7a:3e:7e:
         a4:60:d5:f3:81:82:9b:fc:3f:7f:e3:d4:c9:84:1a:c6:80:8d:
         68:4f:ab:e9:54:58:80:fd:5c:90:53:6f:e7:17:0e:19:01:1e:
         a1:8a:d6:3b:2a:f6:d2:29:47:12:28:d1:80:95:9b:91:70:4e:
         6b:18:63:d3:9e:2c:f7:9b:7c:c2:7a:c5:1a:c2:8c:fe:a1:bf:
         32:ad:14:f3:f2:84:9b:bd:64:c4:81:b5:62:51:49:ce:a7:80:
         b9:92:cb:6d:c8:7d:ae:9e:07:2c:0d:58:81:f7:bc:a5:24:a1:
         3e:1f:4f:f3:4d:fc:31:13:f8:c5:82:03:57:d3:92:40:cf:6a:
         6c:3c:a0:69:7f:72:60:1c:6f:2a:44:99:04:4d:17:e3:6c:21:
         b3:f6:e0:ba:d4:7f:f8:64:68:0c:15:3f:e0:1f:f8:a7:a1:41:
         f8:4d:84:fc:76:fe:24:ed:2b:3b:ac:0d:21:e3:8f:cf:83:57:
         d5:a3:c0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----