Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3a2f33362d3438203d3e20323032343030.roa
File:                     323630323a666161383a3a2f33362d3438203d3e20323032343030.roa (raw, json)
Hash identifier:          5B8U5lnjRsipFWTStq7HNxr3DIaqYv4PNvByO9uqxa0=
Subject key identifier:   A0:4F:2B:BB:85:10:02:4D:E6:80:DB:99:C2:8D:99:76:89:AF:E7:9B
Certificate issuer:       /CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
Certificate serial:       2D6E101F1A68BEDD79DB6B0A1C5EFD09455A0214
Authority key identifier: 1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3a2f33362d3438203d3e20323032343030.roa
Signing time:             Mon 25 Nov 2024 21:26:46 +0000
ROA not before:           Mon 25 Nov 2024 21:21:46 +0000
ROA not after:            Mon 24 Nov 2025 21:26:46 +0000
asID:                     202400
IP address blocks:        2602:faa8::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6e:10:1f:1a:68:be:dd:79:db:6b:0a:1c:5e:fd:09:45:5a:02:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
        Validity
            Not Before: Nov 25 21:21:46 2024 GMT
            Not After : Nov 24 21:26:46 2025 GMT
        Subject: CN=A04F2BBB8510024DE680DB99C28D997689AFE79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:c8:ec:82:be:42:8e:36:61:c4:c4:d0:99:
                    e4:06:5b:b7:34:93:d2:c5:9c:36:ae:c5:9b:67:53:
                    65:67:ee:8e:51:1b:fd:6c:02:70:e7:2e:b5:c3:aa:
                    b3:e6:29:8e:14:ca:50:dd:76:55:88:f0:a3:5f:f0:
                    b9:99:a4:75:3a:4a:74:d1:65:70:f3:00:07:97:d1:
                    70:77:b2:03:13:02:c6:1b:20:e9:9f:87:f1:c6:ba:
                    12:e5:84:fb:6e:5b:8f:bd:29:58:6a:9c:37:31:c7:
                    ca:54:96:0b:80:ea:e0:6a:7e:61:6d:eb:c4:c8:8d:
                    72:55:f6:6e:c2:7a:60:1d:40:1a:67:7c:8f:c3:2e:
                    b0:01:3d:13:b7:37:30:8e:4c:a7:12:43:0f:ac:26:
                    08:b2:e8:8f:e0:67:7c:77:d9:b3:0a:2f:fd:57:35:
                    31:65:70:35:44:40:7d:93:09:2f:92:28:18:87:d0:
                    1e:ac:a0:b5:55:28:c2:6a:6f:6e:8d:f5:1d:14:e6:
                    cd:87:02:f0:ea:cf:c8:e6:27:27:0f:38:76:d9:85:
                    4f:bd:86:34:60:89:21:7c:cd:c1:6f:1d:3e:b8:ba:
                    cb:dd:da:6b:35:7d:52:29:93:48:4d:57:54:fe:ab:
                    49:db:4d:2e:a4:68:4f:98:f3:4d:30:e6:03:eb:f3:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4F:2B:BB:85:10:02:4D:E6:80:DB:99:C2:8D:99:76:89:AF:E7:9B
            X509v3 Authority Key Identifier:
                keyid:1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3a2f33362d3438203d3e20323032343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8::/36

    Signature Algorithm: sha256WithRSAEncryption
         bb:2f:8e:54:dd:ea:f4:67:6b:cc:8f:eb:1d:e4:a9:c9:1e:c0:
         8d:14:8e:88:90:ba:13:a6:22:4b:ce:fc:b7:87:1b:81:0a:38:
         a1:0a:4f:f2:3a:37:f4:f9:35:6f:3f:90:9e:95:41:fc:33:0a:
         30:0d:b3:6c:72:23:63:d2:1d:ad:eb:aa:52:b7:bf:9f:07:26:
         66:12:bf:c1:26:52:6c:cf:a1:75:90:28:e9:94:d2:fa:49:97:
         49:02:a8:8f:f3:7d:67:47:a3:f9:fc:94:f1:34:be:00:21:0e:
         e0:5e:34:46:e4:f1:8d:9f:71:e0:2a:5b:81:a8:00:a0:5b:83:
         17:1a:b1:cf:44:fd:3d:71:2a:1d:27:de:89:7d:d9:95:60:ff:
         82:19:c5:8b:b3:58:db:70:1f:0b:32:f6:35:12:ce:f4:02:35:
         c2:25:87:54:86:fe:e6:07:2b:8c:76:6c:c3:6c:9a:cf:0a:97:
         e4:11:99:72:04:fb:92:58:97:88:3f:6c:a4:36:64:3d:9e:8b:
         4b:db:2c:71:1c:a4:a2:0a:6c:c0:e9:b9:e7:58:d0:e7:46:c4:
         b8:e6:06:a6:dd:9f:ba:63:ac:ed:b4:5e:56:29:44:4b:bb:56:
         b7:39:f1:d5:75:a0:97:06:5b:d8:67:7f:65:bf:ef:ee:b1:5b:
         a7:8b:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----