Route Origin Authorization

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a3a2f33322d3434203d3e2034383432.roa
File:                     326131333a313830303a3a2f33322d3434203d3e2034383432.roa (raw, json)
Hash identifier:          I5a+abAosOJPG8nAa/FqALdUzzGDHagNqxX+0T6cCjg=
Subject key identifier:   07:73:9B:8E:98:0B:AB:C6:98:74:32:73:08:8F:1C:91:EB:17:8C:E0
Certificate issuer:       /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial:       664CF9FF3211772707CCB8CD9CBF82C5D39F95EB
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a3a2f33322d3434203d3e2034383432.roa
Signing time:             Tue 04 Jun 2024 19:48:02 +0000
ROA not before:           Tue 04 Jun 2024 19:43:02 +0000
ROA not after:            Tue 03 Jun 2025 19:48:02 +0000
asID:                     4842
IP address blocks:        2a13:1800::/32 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4c:f9:ff:32:11:77:27:07:cc:b8:cd:9c:bf:82:c5:d3:9f:95:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
        Validity
            Not Before: Jun  4 19:43:02 2024 GMT
            Not After : Jun  3 19:48:02 2025 GMT
        Subject: CN=07739B8E980BABC698743273088F1C91EB178CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:e9:d8:a3:32:1a:2b:d0:5f:5d:eb:ae:e0:
                    e5:58:eb:50:52:cc:9b:43:30:6a:47:41:f4:0a:d2:
                    3b:ee:a0:8a:5e:ba:30:26:ab:85:14:d1:16:81:8e:
                    8c:df:2d:01:5b:31:cb:c1:ea:f2:ed:40:c1:1b:5e:
                    ba:77:70:78:96:92:4c:ad:d4:a9:c8:cb:a0:60:41:
                    fc:8e:07:58:58:e0:10:76:40:8a:aa:21:94:74:7b:
                    b9:78:cb:9b:92:f8:9b:d6:ae:22:7a:6d:1c:fb:a2:
                    8c:41:90:fb:00:bc:6a:79:04:b9:a3:d7:7a:90:e6:
                    ca:fe:51:bc:98:72:f6:ee:9b:6a:fa:37:cf:f9:ba:
                    38:1d:21:97:d1:74:c0:2f:46:4b:67:52:68:4c:d2:
                    82:90:66:ed:d1:c3:eb:39:8b:9d:a8:98:84:d5:3b:
                    11:6b:e4:be:0b:1a:d9:5a:51:ba:15:d9:a9:6f:cd:
                    3a:44:a5:b4:ae:c8:82:04:c6:85:49:6e:75:78:cf:
                    7b:a1:36:c5:ae:e5:aa:98:0d:34:2a:a1:1c:ee:5e:
                    0a:75:ea:90:61:dd:1b:18:7b:c0:b9:6c:b9:3f:84:
                    dc:97:92:f3:1f:8d:0e:3b:c4:30:30:9b:fa:75:bc:
                    31:0a:70:a3:df:22:21:e5:84:16:24:1e:fd:82:d2:
                    08:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:73:9B:8E:98:0B:AB:C6:98:74:32:73:08:8F:1C:91:EB:17:8C:E0
            X509v3 Authority Key Identifier:
                keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a3a2f33322d3434203d3e2034383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:1800::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:e6:c7:f5:3b:00:2f:78:97:5f:00:fd:97:8d:59:52:28:a1:
         55:45:5f:fb:69:09:db:f4:3e:4b:04:c0:14:1d:31:44:c3:06:
         73:c1:19:2d:9d:2f:0c:2f:ff:41:df:48:84:cb:b0:d6:99:1a:
         00:91:23:f6:55:18:d2:ba:7c:87:b8:ba:d1:16:a8:44:5f:78:
         96:12:63:24:a3:38:74:12:db:c3:d1:1c:f5:e8:fe:73:9c:9f:
         5a:10:0c:6a:43:38:25:8f:1e:54:35:24:f7:74:f6:dd:f3:d4:
         78:85:49:9f:e3:c2:d7:35:aa:c7:15:34:c4:c0:58:83:d4:9a:
         06:5d:c5:fe:fd:21:3a:0f:0a:c4:88:f2:52:ae:f8:61:5f:58:
         b3:42:ba:d9:ce:f7:a2:6b:d4:0e:ae:dc:6f:2c:fe:72:f9:c7:
         1c:50:f9:d7:0b:af:74:3a:93:ad:c9:a1:91:68:5e:9c:47:69:
         7a:d0:0c:cf:e0:1d:6b:ae:72:77:81:96:f5:e3:42:4b:ac:e3:
         38:91:8d:91:d4:56:e4:fa:68:d8:3f:b5:45:61:da:87:ae:d7:
         8b:d0:25:85:25:34:ed:97:d0:09:05:91:d2:8b:fd:d6:50:68:
         5a:b8:68:f3:26:f8:02:08:3c:72:af:be:f6:1d:b4:c3:3b:c0:
         10:a3:ac:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----