Route Origin Authorization

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a3a2f34342d3438203d3e2034383432.roa
File:                     326131333a313830303a3a2f34342d3438203d3e2034383432.roa (raw, json)
Hash identifier:          +JnjSu27syQbPuR2W2pkxAuR4CDV8qCKQ87VKxU9nP0=
Subject key identifier:   18:10:E7:39:00:83:44:E1:BC:5F:E8:4C:77:B8:BD:70:6C:B8:7A:17
Certificate issuer:       /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial:       619947C98F8B19A9BA1BAC72D3CE0DFB1CCB103C
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a3a2f34342d3438203d3e2034383432.roa
Signing time:             Tue 04 Jun 2024 19:48:01 +0000
ROA not before:           Tue 04 Jun 2024 19:43:01 +0000
ROA not after:            Tue 03 Jun 2025 19:48:01 +0000
asID:                     4842
IP address blocks:        2a13:1800::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:99:47:c9:8f:8b:19:a9:ba:1b:ac:72:d3:ce:0d:fb:1c:cb:10:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
        Validity
            Not Before: Jun  4 19:43:01 2024 GMT
            Not After : Jun  3 19:48:01 2025 GMT
        Subject: CN=1810E739008344E1BC5FE84C77B8BD706CB87A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:d3:a0:10:e7:4c:58:8d:1c:f1:38:be:72:
                    5c:90:7b:14:35:7b:7e:ec:e1:b4:7d:ca:91:7c:be:
                    e9:95:bc:42:7e:7d:62:4b:db:14:1c:13:6c:7e:ac:
                    09:20:22:3e:48:0f:fd:e0:4e:53:3a:3a:40:47:86:
                    09:36:2d:35:b0:92:cb:dc:d0:f7:9b:62:f5:d1:ec:
                    4c:1a:bd:29:ea:94:c5:6e:1d:6f:f0:5d:cd:ce:c0:
                    b3:9b:b3:6d:8b:14:22:07:9a:a6:96:d6:64:3c:7e:
                    96:86:16:07:01:e1:31:7f:8c:f0:15:f6:21:44:2e:
                    fb:0e:65:29:de:7d:5d:18:67:f1:bd:c8:27:d4:fe:
                    a4:46:a8:c5:18:66:ff:b9:6f:34:8b:1e:46:da:4a:
                    bf:e1:e7:07:2c:99:d3:66:c9:03:f6:f8:10:56:63:
                    e6:d3:02:54:2e:b0:07:af:57:99:1f:dd:54:de:ab:
                    6b:28:3c:31:4e:df:5d:67:95:8b:22:c8:62:c2:52:
                    d5:2f:dc:91:86:e4:4f:09:4a:db:55:23:82:ef:47:
                    2b:56:b5:26:90:c1:62:51:d0:32:4f:4e:c3:57:62:
                    be:a9:26:d1:fd:cd:6b:40:cc:a9:e2:db:05:38:1f:
                    21:92:eb:22:ef:a1:3a:09:ec:79:ef:79:34:c8:7e:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:E7:39:00:83:44:E1:BC:5F:E8:4C:77:B8:BD:70:6C:B8:7A:17
            X509v3 Authority Key Identifier:
                keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a3a2f34342d3438203d3e2034383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:1800::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:38:ba:c5:8e:6f:94:45:04:87:48:64:b0:87:0c:05:82:f7:
         2b:b6:3e:26:0e:09:b2:9d:7f:a4:99:60:96:7f:bd:af:5e:19:
         c9:e6:39:59:8b:7d:57:c2:5f:19:10:19:1c:3d:e6:3c:6e:e3:
         25:c9:a2:5a:b4:40:99:79:59:78:c1:bc:ca:4b:4e:fe:8d:5b:
         41:c8:a2:91:0d:61:28:4e:e5:e3:43:64:37:6d:96:96:c8:f5:
         bb:3a:0a:26:6b:22:a9:09:56:04:c7:45:9b:0a:d8:fe:d1:9a:
         f6:02:18:04:93:b7:f5:9a:00:30:fc:b6:c0:e9:ec:3c:ec:47:
         6b:60:62:73:a7:9f:fc:97:a1:2f:a4:9e:82:fe:48:38:31:b6:
         c6:c5:25:dc:a2:86:98:f1:e2:e0:58:c6:f9:4b:11:bc:4c:9b:
         a8:82:c9:8e:3b:e7:76:94:2a:1b:0a:ee:c6:28:c2:8f:e3:a8:
         11:7f:8d:3b:b9:02:53:1b:94:4e:c9:fd:fb:fc:a8:cb:ef:c6:
         4f:12:04:94:0f:32:91:d1:ce:a2:92:34:56:81:63:2d:8c:5b:
         b0:07:33:42:65:b7:1d:cc:ce:2f:59:18:ec:fd:ce:c8:16:86:
         52:08:51:ce:02:13:b6:53:72:e8:a1:a7:cd:73:06:28:51:0f:
         a1:10:89:89
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUYZlHyY+LGam6G6xy084N+xzLEDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex
OGJlYjY1OTAeFw0yNDA2MDQxOTQzMDFaFw0yNTA2MDMxOTQ4MDFaMDMxMTAvBgNV
BAMTKDE4MTBFNzM5MDA4MzQ0RTFCQzVGRTg0Qzc3QjhCRDcwNkNCODdBMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSNOgEOdMWI0c8Ti+clyQexQ1
e37s4bR9ypF8vumVvEJ+fWJL2xQcE2x+rAkgIj5ID/3gTlM6OkBHhgk2LTWwksvc
0PebYvXR7EwavSnqlMVuHW/wXc3OwLObs22LFCIHmqaW1mQ8fpaGFgcB4TF/jPAV
9iFELvsOZSnefV0YZ/G9yCfU/qRGqMUYZv+5bzSLHkbaSr/h5wcsmdNmyQP2+BBW
Y+bTAlQusAevV5kf3VTeq2soPDFO311nlYsiyGLCUtUv3JGG5E8JSttVI4LvRytW
tSaQwWJR0DJPTsNXYr6pJtH9zWtAzKni2wU4HyGS6yLvoToJ7HnveTTIfrnVAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUGBDnOQCDROG8X+hMd7i9cGy4ehcwHwYDVR0j
BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw
by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB
MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6
Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn
Sl9XOFcwcnloaS10bGsuY2VyMIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuG
aXJzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVwby9UaWFuaGFpUnBr
aS8wLzMyNjEzMTMzM2EzMTM4MzAzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDM0
MzgzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKhMYAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQByOLrF
jm+URQSHSGSwhwwFgvcrtj4mDgmynX+kmWCWf72vXhnJ5jlZi31Xwl8ZEBkcPeY8
buMlyaJatECZeVl4wbzKS07+jVtByKKRDWEoTuXjQ2Q3bZaWyPW7OgomayKpCVYE
x0WbCtj+0Zr2AhgEk7f1mgAw/LbA6ew87EdrYGJzp5/8l6EvpJ6C/kg4MbbGxSXc
ooaY8eLgWMb5SxG8TJuogsmOO+d2lCobCu7GKMKP46gRf407uQJTG5ROyf37/KjL
78ZPEgSUDzKR0c6ikjRWgWMtjFuwBzNCZbcdzM4vWRjs/c7IFoZSCFHOAhO2U3Lo
oafNcwYoUQ+hEImJ
-----END CERTIFICATE-----