Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87bb267f-4f72-3adb-87d1-caa2e2b79d1e.roa
File:                     87bb267f-4f72-3adb-87d1-caa2e2b79d1e.roa (raw, json)
Hash identifier:          jIwEwzpYy+YSEj33ih+atPzonsURF1QhXk80xSLNC1w=
Subject key identifier:   F5:55:A8:52:A2:FE:4E:D1:59:E0:65:EA:D5:C8:26:02:93:C5:30:36
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553331AB123B2D6C2E53DA800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87bb267f-4f72-3adb-87d1-caa2e2b79d1e.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        206.216.0.0/20 maxlen: 20

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:1a:b1:23:b2:d6:c2:e5:3d:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=9f80f0bd-b190-49ec-be34-0c9a2fd9b6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:d1:42:96:3c:f3:60:f5:1c:cf:63:04:b0:
                    02:de:a2:60:e2:bd:0e:d1:68:c0:9e:6a:df:d2:11:
                    d3:72:1f:48:e3:f7:de:8e:c9:6f:4e:ff:9c:8b:5f:
                    f8:45:a9:60:ee:b0:9f:3c:cb:b9:31:07:58:57:6a:
                    05:79:3d:45:88:34:7e:7d:aa:ba:23:24:e7:a9:9c:
                    a6:cf:4b:4a:2d:80:8a:d4:93:49:c4:af:cc:5e:11:
                    e9:ac:54:7a:dd:e2:56:f7:10:59:53:b1:10:06:d0:
                    67:22:7a:5a:8d:d8:d7:50:e5:29:c0:9e:69:31:f1:
                    de:7f:f7:17:96:5b:1b:6f:24:7d:56:db:8a:0c:a1:
                    11:67:88:12:84:ab:b4:86:2e:45:b6:b2:06:dc:e2:
                    33:97:7b:a6:29:28:1b:67:36:0c:aa:eb:d4:ea:e6:
                    94:08:57:c6:19:ca:6d:cf:e2:e1:33:af:bf:45:23:
                    a8:0b:92:ce:90:07:9c:3f:8f:5e:88:70:a8:72:a2:
                    42:51:70:3f:48:01:a4:8a:c4:27:73:f5:13:d5:af:
                    ed:4e:81:28:de:0d:e8:d2:ff:b9:52:93:2f:d7:94:
                    ad:3c:2e:16:82:71:35:98:91:3a:23:cb:ee:3a:8a:
                    0e:f3:cf:16:11:34:cf:b6:e0:24:c1:1e:47:05:91:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:55:A8:52:A2:FE:4E:D1:59:E0:65:EA:D5:C8:26:02:93:C5:30:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87bb267f-4f72-3adb-87d1-caa2e2b79d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.216.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c0:e9:37:b9:d3:c4:03:e4:94:d3:2a:d2:c1:72:be:09:f8:
         93:d6:3e:f2:30:45:d1:bd:6b:ee:f9:19:f4:e8:f7:d4:6d:af:
         eb:ca:11:1d:c2:e8:3d:f6:18:cc:4e:20:2c:50:8a:a0:da:04:
         a1:d9:aa:00:5f:29:8d:da:70:65:e8:4b:bc:32:af:2d:1a:fe:
         59:8d:7a:51:01:47:d5:dc:61:6f:bb:45:bf:e9:9a:93:ee:5a:
         66:68:50:7d:d2:2f:bf:3a:b5:8a:9b:28:c1:fa:b5:39:7f:4d:
         b1:64:e9:60:da:1f:5b:c6:8b:5a:93:a6:80:aa:fc:8c:1b:5a:
         74:a9:5b:6f:23:31:02:85:b1:57:17:fe:37:b8:f2:2f:a2:de:
         02:ea:4e:24:8e:1a:55:58:5b:44:0a:7c:d8:f4:47:7b:c8:07:
         f9:18:68:46:00:e5:dd:10:21:83:40:b6:ca:72:09:56:54:39:
         eb:df:18:8f:d2:d6:c0:c3:94:ec:78:ce:58:df:93:ac:15:8d:
         d7:91:2a:73:35:fe:5e:3e:81:cb:46:71:51:9a:4d:36:d3:c4:
         63:f9:11:78:b2:53:33:9b:d8:3c:11:c3:82:4c:71:28:d8:a9:
         ec:52:9f:bc:2e:15:a2:cf:13:71:72:20:10:87:75:15:72:22:
         9b:84:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----